Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/1/3134332e302e3139362e302f32322d3234203d3e20323634303130.roa
File:                     3134332e302e3139362e302f32322d3234203d3e20323634303130.roa (raw, json)
Hash identifier:          8XKiBpEGeAq0BJxjGwRnuzAtpIbd68D07+R0d6W5pmk=
Subject key identifier:   54:5F:77:70:41:D1:31:05:11:C9:D0:A7:DA:7B:FC:62:95:84:D7:3D
Certificate issuer:       /CN=37EC66E6D5153E335C4A11B51C7DFB481E91CB87
Certificate serial:       2988D42ADF262224031F183EC8EF0E9AAC0448D0
Authority key identifier: 37:EC:66:E6:D5:15:3E:33:5C:4A:11:B5:1C:7D:FB:48:1E:91:CB:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37EC66E6D5153E335C4A11B51C7DFB481E91CB87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/1/3134332e302e3139362e302f32322d3234203d3e20323634303130.roa
Signing time:             Thu 04 Apr 2024 01:23:28 +0000
ROA not before:           Thu 04 Apr 2024 01:18:28 +0000
ROA not after:            Thu 03 Apr 2025 01:23:28 +0000
asID:                     264010
IP address blocks:        143.0.196.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/1/37EC66E6D5153E335C4A11B51C7DFB481E91CB87.crl
                          rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/1/37EC66E6D5153E335C4A11B51C7DFB481E91CB87.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37EC66E6D5153E335C4A11B51C7DFB481E91CB87.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 08:43:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:88:d4:2a:df:26:22:24:03:1f:18:3e:c8:ef:0e:9a:ac:04:48:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37EC66E6D5153E335C4A11B51C7DFB481E91CB87
        Validity
            Not Before: Apr  4 01:18:28 2024 GMT
            Not After : Apr  3 01:23:28 2025 GMT
        Subject: CN=545F777041D1310511C9D0A7DA7BFC629584D73D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bb:74:6e:0e:0d:f2:4e:07:e9:f8:c0:5e:33:
                    46:66:e7:f5:10:90:02:9d:30:9e:91:7b:9c:a9:03:
                    5c:e1:f3:db:e3:32:85:0c:d2:01:f0:b3:32:68:7e:
                    fb:b1:43:92:d5:3a:ba:be:b1:39:f9:e5:35:1b:fa:
                    f6:35:6e:ab:da:ab:53:52:c5:4b:d4:99:87:a2:1c:
                    06:3b:5a:2b:c1:de:46:ac:b3:2a:0e:30:4b:3d:03:
                    87:6a:b2:82:44:ef:fb:a2:93:0b:a2:86:c6:4e:96:
                    4f:2a:9f:dc:a1:69:e5:3b:55:df:ab:21:ec:75:2b:
                    2f:39:1a:0f:f1:68:4c:44:3e:9c:f9:56:52:b6:84:
                    eb:b9:ea:d9:a3:f8:03:1a:ee:36:43:7a:2d:b4:88:
                    92:70:57:59:19:bd:a2:92:94:92:2d:96:40:32:eb:
                    99:95:73:21:ab:99:98:06:01:f6:f5:c0:67:b6:4e:
                    d8:28:a2:18:6c:1e:7a:2b:f3:fb:93:1a:55:1f:d6:
                    f4:ba:86:72:3e:0c:8e:17:ff:f8:93:ac:14:7c:76:
                    97:80:5f:73:c1:4d:5a:9b:a4:5b:7a:ac:1c:7b:70:
                    87:d1:ce:b4:cb:33:35:db:d1:6c:79:08:de:82:84:
                    8c:27:f7:65:01:21:36:fb:ed:26:17:24:60:ad:ae:
                    b3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:5F:77:70:41:D1:31:05:11:C9:D0:A7:DA:7B:FC:62:95:84:D7:3D
            X509v3 Authority Key Identifier:
                keyid:37:EC:66:E6:D5:15:3E:33:5C:4A:11:B5:1C:7D:FB:48:1E:91:CB:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/1/37EC66E6D5153E335C4A11B51C7DFB481E91CB87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37EC66E6D5153E335C4A11B51C7DFB481E91CB87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/1/3134332e302e3139362e302f32322d3234203d3e20323634303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:e0:7c:fb:d9:af:fd:9f:29:e6:17:21:74:95:03:84:3e:e2:
         d1:77:73:61:89:7c:85:3c:5a:96:6e:89:3a:a9:fc:a0:d1:1f:
         6c:91:ab:86:99:93:d0:dd:48:95:46:d2:59:59:a3:21:ad:97:
         5d:6b:95:57:1d:70:0c:3f:47:fc:21:35:b2:23:e4:b2:f6:19:
         31:b9:ed:91:b5:1f:46:1a:0d:03:6c:2c:2a:a2:70:39:9a:10:
         75:76:50:38:a4:31:f2:44:0f:a4:00:cb:05:e1:34:67:e6:87:
         11:60:e5:08:ec:9a:a5:ee:4b:6b:f4:31:64:3b:f2:e5:d0:ba:
         99:5c:3d:28:bd:aa:4e:70:5a:cf:3d:84:20:98:2a:89:dc:fb:
         e7:e8:9d:69:19:60:d1:3b:f1:ca:a6:cd:98:38:1f:32:89:43:
         fd:34:60:65:62:7d:61:07:fd:6d:14:b7:38:8a:f9:28:9c:2a:
         fb:bb:66:7a:e5:40:6e:17:9a:18:35:b6:73:5d:bf:df:0e:a0:
         de:f2:27:ef:08:d1:8f:ce:df:20:a9:06:e4:b0:9f:48:af:99:
         07:7d:56:63:13:44:81:ed:75:6f:ac:86:b0:ab:d7:cc:4e:89:
         88:1b:87:93:64:35:25:bd:09:22:c0:67:1a:81:fc:ae:51:b7:
         f3:93:92:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 09:28:26 2024 by rpki-client on console-fra.rpki-client.org