Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DaEJEHrb1nbPsQKUXVDYBe37x9roX8cpE4qQGNjrNRc4/0/3134332e3133372e3139302e302f32332d3233203d3e20323634303431.roa
File:                     3134332e3133372e3139302e302f32332d3233203d3e20323634303431.roa (raw, json)
Hash identifier:          Wo/mJDPWzR3CGByg79VMbneCLHy3WWmttVfpCPaDLf8=
Subject key identifier:   33:70:3D:A6:21:15:63:86:54:AA:00:50:0C:62:1F:79:55:B2:66:9A
Certificate issuer:       /CN=4F855F6808FCD163FB20E5E5F939427253847DC2
Certificate serial:       23317D1676926234820421AAF649FBE4A16266AE
Authority key identifier: 4F:85:5F:68:08:FC:D1:63:FB:20:E5:E5:F9:39:42:72:53:84:7D:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F855F6808FCD163FB20E5E5F939427253847DC2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DaEJEHrb1nbPsQKUXVDYBe37x9roX8cpE4qQGNjrNRc4/0/3134332e3133372e3139302e302f32332d3233203d3e20323634303431.roa
Signing time:             Mon 12 Aug 2024 22:01:02 +0000
ROA not before:           Mon 12 Aug 2024 21:56:02 +0000
ROA not after:            Mon 11 Aug 2025 22:01:02 +0000
asID:                     264041
IP address blocks:        143.137.190.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DaEJEHrb1nbPsQKUXVDYBe37x9roX8cpE4qQGNjrNRc4/0/4F855F6808FCD163FB20E5E5F939427253847DC2.crl
                          rsync://rpki-repo.registro.br/repo/DaEJEHrb1nbPsQKUXVDYBe37x9roX8cpE4qQGNjrNRc4/0/4F855F6808FCD163FB20E5E5F939427253847DC2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F855F6808FCD163FB20E5E5F939427253847DC2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:17:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:31:7d:16:76:92:62:34:82:04:21:aa:f6:49:fb:e4:a1:62:66:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F855F6808FCD163FB20E5E5F939427253847DC2
        Validity
            Not Before: Aug 12 21:56:02 2024 GMT
            Not After : Aug 11 22:01:02 2025 GMT
        Subject: CN=33703DA62115638654AA00500C621F7955B2669A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a8:ed:10:ea:88:eb:15:51:c4:9e:03:4e:e2:
                    00:c6:ff:30:ab:0c:23:b6:91:9a:db:9a:d7:b4:6b:
                    c2:c1:68:7d:47:c0:54:f5:59:66:86:8d:1d:34:16:
                    b4:2b:8c:8d:73:25:ea:b5:56:ab:e7:0b:12:e3:61:
                    38:f4:70:f3:fe:0e:d0:d7:b5:93:e9:f6:7a:92:75:
                    6b:53:da:a3:c0:99:26:70:f4:a8:af:e5:48:e5:7e:
                    0f:77:21:e9:39:43:2d:ff:b4:1a:75:92:78:69:85:
                    9c:31:b0:d5:ec:52:dc:6d:7d:1a:7b:7d:c5:c2:d8:
                    70:df:08:e3:d1:3e:b6:c1:80:8b:b2:a2:ca:2c:67:
                    4b:d9:1e:9f:b8:b9:7c:ce:ab:37:5d:69:e5:05:c5:
                    8d:1a:14:8a:7d:b4:ac:3d:d5:e3:1a:76:eb:75:5b:
                    d4:0b:ad:92:02:cb:a1:17:e1:87:6a:29:7d:78:6b:
                    f2:11:e4:b7:8c:5b:4b:89:7a:56:f4:04:9f:da:8d:
                    a2:33:f4:48:7c:98:c3:06:77:45:62:03:88:e3:d7:
                    7e:64:29:e3:b2:ab:c8:72:54:fb:74:de:a5:aa:f8:
                    ce:f7:5e:37:f1:76:11:04:f4:ba:0f:f3:48:ea:6e:
                    33:51:60:78:53:49:07:0c:aa:68:ba:f3:5b:1f:2a:
                    53:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:70:3D:A6:21:15:63:86:54:AA:00:50:0C:62:1F:79:55:B2:66:9A
            X509v3 Authority Key Identifier:
                keyid:4F:85:5F:68:08:FC:D1:63:FB:20:E5:E5:F9:39:42:72:53:84:7D:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DaEJEHrb1nbPsQKUXVDYBe37x9roX8cpE4qQGNjrNRc4/0/4F855F6808FCD163FB20E5E5F939427253847DC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F855F6808FCD163FB20E5E5F939427253847DC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DaEJEHrb1nbPsQKUXVDYBe37x9roX8cpE4qQGNjrNRc4/0/3134332e3133372e3139302e302f32332d3233203d3e20323634303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:93:32:80:dc:ec:a8:b8:f9:35:14:72:1f:62:d8:42:8f:e6:
         59:ba:fc:5a:e4:f9:9f:5c:d5:77:da:04:8c:eb:66:82:5e:a6:
         2d:0d:63:d0:fa:b9:7b:71:a1:e0:3b:16:c4:af:1e:1f:0b:45:
         3d:d7:62:28:02:ab:5a:07:8a:30:55:82:50:b4:df:03:f9:9c:
         be:0d:5c:ce:98:08:a6:a1:24:8f:e7:78:4f:a7:1e:8f:b2:89:
         a6:da:3f:8f:29:2e:18:82:8a:28:62:fc:21:a4:81:1f:fe:6b:
         ad:a5:fc:a9:1b:ea:f2:7a:51:f5:2e:2c:5d:12:de:07:34:e4:
         0f:77:b4:5a:42:cc:b4:70:d0:c8:c9:ed:76:db:97:c9:f2:2f:
         c6:f5:b0:9a:e0:2d:f3:db:76:dc:1c:d4:f4:df:9f:e9:c2:e0:
         5a:8b:2d:38:39:68:c2:25:2c:8e:13:9a:e1:1f:31:70:1a:2f:
         10:fb:cb:4d:53:b3:42:53:f0:07:72:28:59:ca:55:d1:e4:36:
         2d:56:40:67:77:f4:56:fd:99:2c:1b:f2:0e:d4:d9:66:6e:ea:
         80:cb:93:24:03:79:7f:e6:32:27:20:53:ec:3d:55:6e:6c:3a:
         01:40:9c:2e:4a:b9:26:8b:a5:84:65:8f:c7:1e:3e:60:b6:29:
         f5:39:aa:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:20 2024 by rpki-client on console-fra.rpki-client.org