Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/1/3134332e3230322e32382e302f32322d3234203d3e20323632343237.roa
File:                     3134332e3230322e32382e302f32322d3234203d3e20323632343237.roa (raw, json)
Hash identifier:          eAhOwd8VteJ/yy0kaHdhTuKnnrDslOJwrEqxeJfYxc0=
Subject key identifier:   09:1A:5C:DD:9A:96:1E:1E:7E:B5:2F:C1:C7:F7:6D:D4:AB:F8:8C:A3
Certificate issuer:       /CN=A94C261E7F54FD8F9132D7CC65876A9FCCB22B44
Certificate serial:       2D577C5F963CA6E7ED1A9B678153E577F3ED2C4D
Authority key identifier: A9:4C:26:1E:7F:54:FD:8F:91:32:D7:CC:65:87:6A:9F:CC:B2:2B:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A94C261E7F54FD8F9132D7CC65876A9FCCB22B44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/1/3134332e3230322e32382e302f32322d3234203d3e20323632343237.roa
Signing time:             Thu 04 Apr 2024 04:44:46 +0000
ROA not before:           Thu 04 Apr 2024 04:39:46 +0000
ROA not after:            Thu 03 Apr 2025 04:44:46 +0000
asID:                     262427
IP address blocks:        143.202.28.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/1/A94C261E7F54FD8F9132D7CC65876A9FCCB22B44.crl
                          rsync://rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/1/A94C261E7F54FD8F9132D7CC65876A9FCCB22B44.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A94C261E7F54FD8F9132D7CC65876A9FCCB22B44.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 13:51:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:57:7c:5f:96:3c:a6:e7:ed:1a:9b:67:81:53:e5:77:f3:ed:2c:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A94C261E7F54FD8F9132D7CC65876A9FCCB22B44
        Validity
            Not Before: Apr  4 04:39:46 2024 GMT
            Not After : Apr  3 04:44:46 2025 GMT
        Subject: CN=091A5CDD9A961E1E7EB52FC1C7F76DD4ABF88CA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:8b:df:fb:66:7e:a4:9f:ec:6a:05:78:32:6c:
                    d9:0b:89:ce:25:66:46:77:79:a2:eb:4c:f1:c4:4e:
                    99:26:3e:82:af:1b:a8:f1:c5:5b:fe:5a:bc:e3:7f:
                    32:44:9e:95:4a:67:46:6a:99:4f:3b:d1:63:ce:0e:
                    54:09:a7:67:91:90:1e:b4:41:0e:98:3f:8b:b5:9a:
                    47:fe:21:90:0c:52:43:d0:cb:b8:46:96:2c:0c:8c:
                    77:cc:db:c7:f1:5e:ef:31:20:41:33:35:c3:07:53:
                    52:fe:46:1c:86:e1:80:de:68:91:bc:6d:52:2a:70:
                    44:c7:cf:6a:56:20:99:67:b9:c9:09:07:4a:17:a7:
                    52:1f:30:2d:6a:b8:f7:1c:79:23:ed:36:35:fd:d4:
                    e2:db:66:92:07:91:f9:ee:e7:15:45:86:08:63:f6:
                    ec:e7:ee:fd:7f:38:8a:15:4c:f8:4d:d4:ff:9c:37:
                    ec:a3:1d:e1:25:e3:24:dc:29:87:bb:69:80:57:1c:
                    cf:88:bb:04:40:36:ec:7f:4b:13:69:63:b1:f9:54:
                    3c:02:42:82:0f:f6:a4:d3:b3:51:ee:ea:68:39:3a:
                    82:ab:4d:d1:af:2a:e6:5c:bd:52:93:3d:0f:f1:e0:
                    30:5c:ef:fc:1e:a9:90:13:fb:4d:06:0d:43:5a:b1:
                    38:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:1A:5C:DD:9A:96:1E:1E:7E:B5:2F:C1:C7:F7:6D:D4:AB:F8:8C:A3
            X509v3 Authority Key Identifier:
                keyid:A9:4C:26:1E:7F:54:FD:8F:91:32:D7:CC:65:87:6A:9F:CC:B2:2B:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/1/A94C261E7F54FD8F9132D7CC65876A9FCCB22B44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A94C261E7F54FD8F9132D7CC65876A9FCCB22B44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/1/3134332e3230322e32382e302f32322d3234203d3e20323632343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:6a:4f:55:2e:ad:cb:bb:3e:76:ea:cc:e0:b3:fa:47:b8:c2:
         74:51:cb:28:ef:31:5f:5c:5f:d0:49:8d:57:ca:1f:26:da:ec:
         7c:2e:77:b6:9f:66:92:6b:41:7f:a1:57:36:48:a2:12:6f:39:
         6f:ab:99:1e:8d:e3:60:c7:a1:a3:6e:36:07:7a:8d:bb:0f:9a:
         e9:97:45:a9:63:ad:69:7e:bd:77:da:fe:0a:f6:52:67:4f:56:
         0a:4a:74:3e:89:f1:4a:fa:56:a5:a4:fe:d8:87:19:e9:7c:9b:
         a1:68:49:28:7a:31:6a:0c:1c:0e:3c:8b:8a:44:33:e6:fa:6d:
         85:a4:39:b8:9a:c7:2e:70:80:37:74:38:a7:9d:23:e7:5f:65:
         7e:2c:0e:63:3f:86:03:08:b5:5a:26:b5:34:d9:dd:4e:bb:05:
         d9:3c:cb:85:c8:3d:fa:56:50:f2:8d:b8:93:ea:97:a4:b0:95:
         f2:bf:d0:e1:45:08:ac:44:f3:8d:d7:45:ca:4b:f8:d2:72:dc:
         7f:8c:3a:b0:93:8c:3a:27:49:8a:3a:e7:26:08:5f:87:d3:cf:
         b6:68:0a:f2:49:53:a1:4e:e4:00:1a:31:35:32:85:20:21:bc:
         b0:21:55:90:63:03:bc:0f:a6:21:f5:a2:0b:5f:e1:08:57:a4:
         31:a7:c9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:49:58 2024 by rpki-client on console-ams.rpki-client.org