Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DGKGTwbDxurMrETjXyejjjPSqDV4C1dsCybJPWSdBFTd/0/3134332e302e3138342e302f32322d3234203d3e20323634303133.roa
File:                     3134332e302e3138342e302f32322d3234203d3e20323634303133.roa (raw, json)
Hash identifier:          UM4xH4wXL3nhkYfjlCXWiEVa9meq5kwEXnGhBsO5wr4=
Subject key identifier:   B7:26:DE:5F:48:07:5A:82:8F:7B:5E:55:F1:32:53:5D:64:20:8E:A3
Certificate issuer:       /CN=B4427441B48FB34853A49345A310681C00837092
Certificate serial:       367ED464C6B0AA1356E1010B16030F0B579065CA
Authority key identifier: B4:42:74:41:B4:8F:B3:48:53:A4:93:45:A3:10:68:1C:00:83:70:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4427441B48FB34853A49345A310681C00837092.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DGKGTwbDxurMrETjXyejjjPSqDV4C1dsCybJPWSdBFTd/0/3134332e302e3138342e302f32322d3234203d3e20323634303133.roa
Signing time:             Tue 28 May 2024 20:35:22 +0000
ROA not before:           Tue 28 May 2024 20:30:22 +0000
ROA not after:            Tue 27 May 2025 20:35:22 +0000
asID:                     264013
IP address blocks:        143.0.184.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DGKGTwbDxurMrETjXyejjjPSqDV4C1dsCybJPWSdBFTd/0/B4427441B48FB34853A49345A310681C00837092.crl
                          rsync://rpki-repo.registro.br/repo/DGKGTwbDxurMrETjXyejjjPSqDV4C1dsCybJPWSdBFTd/0/B4427441B48FB34853A49345A310681C00837092.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4427441B48FB34853A49345A310681C00837092.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:7e:d4:64:c6:b0:aa:13:56:e1:01:0b:16:03:0f:0b:57:90:65:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4427441B48FB34853A49345A310681C00837092
        Validity
            Not Before: May 28 20:30:22 2024 GMT
            Not After : May 27 20:35:22 2025 GMT
        Subject: CN=B726DE5F48075A828F7B5E55F132535D64208EA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:22:c0:98:16:80:78:f6:9b:c4:95:52:7d:d6:
                    64:7a:f8:78:c2:d8:b6:54:4f:ae:36:85:5d:7e:f0:
                    fd:00:41:43:6d:43:07:0f:30:e9:19:cc:bf:e2:71:
                    bb:e3:90:28:95:32:58:f3:25:60:67:41:7e:81:62:
                    e4:48:e6:25:eb:ae:43:ec:81:e7:bd:94:6d:a3:9b:
                    cc:8f:d2:fe:81:78:c6:4a:e0:51:3f:45:58:28:70:
                    d4:2c:61:97:07:3d:b4:2d:a4:e0:5a:90:3d:a6:9b:
                    86:01:3b:45:23:a8:45:44:cb:95:0a:91:af:b3:95:
                    7a:55:9f:f8:5e:5b:1b:7d:78:b7:32:a3:b8:1f:cf:
                    30:aa:07:7e:c1:9c:ef:a6:ee:7a:a7:ba:f0:79:0d:
                    e0:f2:e2:2b:19:fa:2e:e8:92:8c:bc:83:bb:de:04:
                    49:64:d1:78:e4:c3:90:1d:b4:2e:d1:7f:f3:0b:89:
                    1a:6d:de:fb:f3:41:2f:b5:23:78:c6:3f:fc:df:da:
                    e7:00:9f:c2:8a:22:59:0d:bb:d2:44:e8:94:8d:6c:
                    9f:2e:a2:99:3a:88:62:71:c6:fb:4b:4a:d9:26:db:
                    ea:d1:c3:95:84:13:54:20:a9:f3:b4:43:f3:b6:48:
                    39:69:38:85:c2:cc:c2:4c:c9:da:b4:77:b4:a1:e6:
                    8b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:26:DE:5F:48:07:5A:82:8F:7B:5E:55:F1:32:53:5D:64:20:8E:A3
            X509v3 Authority Key Identifier:
                keyid:B4:42:74:41:B4:8F:B3:48:53:A4:93:45:A3:10:68:1C:00:83:70:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DGKGTwbDxurMrETjXyejjjPSqDV4C1dsCybJPWSdBFTd/0/B4427441B48FB34853A49345A310681C00837092.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4427441B48FB34853A49345A310681C00837092.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DGKGTwbDxurMrETjXyejjjPSqDV4C1dsCybJPWSdBFTd/0/3134332e302e3138342e302f32322d3234203d3e20323634303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:ed:b4:a9:8e:2f:62:9b:7c:8a:42:75:c9:42:61:23:c1:69:
         2a:d5:17:3f:ee:03:b4:45:f9:5a:89:81:fa:4c:00:57:52:6b:
         7e:38:e0:7e:29:0c:cc:d7:29:5c:fd:dc:b0:dc:02:13:87:39:
         17:8e:fe:18:09:a2:ac:df:6b:87:ed:ef:62:5c:ed:95:dc:1f:
         ea:e2:e5:bc:74:0e:c5:f8:6e:cd:1f:47:3d:9d:43:8d:ee:75:
         82:b5:e9:84:aa:f0:2f:6c:d0:fe:19:67:32:16:77:4f:da:f8:
         40:29:4d:05:04:32:30:af:26:af:d5:21:be:75:92:99:0e:64:
         e9:95:1c:0a:b7:17:8a:f1:d4:93:ea:41:4e:90:8e:9c:67:d9:
         7b:2b:97:ba:54:b6:dc:e2:6a:a1:00:3b:7f:37:37:70:4a:80:
         47:c3:14:8b:c7:a3:9f:b1:77:d8:9e:ef:f0:fe:08:f5:12:00:
         12:8d:b4:dd:19:a7:db:4d:cb:80:85:9d:dd:3d:9a:84:23:93:
         19:a2:f3:52:ad:2b:05:b6:db:e1:f0:2e:29:d8:d1:16:d6:f7:
         26:09:6f:c6:ef:41:ba:d5:9e:c7:54:0c:a3:43:44:c6:99:49:
         c7:e3:64:9c:b8:6c:30:e2:65:b0:3a:5a:84:01:eb:81:55:49:
         bb:ac:67:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:08 2024 by rpki-client on console-fra.rpki-client.org