Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/3134332e3235352e31382e302f32342d3234203d3e203532393136.roa
File:                     3134332e3235352e31382e302f32342d3234203d3e203532393136.roa (raw, json)
Hash identifier:          +mBkH2nnUmPBf9LERr2Ms/x5Nhgs1TRmRHGizt+nMuU=
Subject key identifier:   9F:B1:C0:51:1C:EE:77:A1:7B:6E:74:16:C2:0D:3F:AD:76:26:72:D2
Certificate issuer:       /CN=EF908A177FAF3EDEEAF39EF1BC3B208225302E77
Certificate serial:       4BD8D9283FF9EA89096440B4E3556EE0AA829C13
Authority key identifier: EF:90:8A:17:7F:AF:3E:DE:EA:F3:9E:F1:BC:3B:20:82:25:30:2E:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/3134332e3235352e31382e302f32342d3234203d3e203532393136.roa
Signing time:             Wed 03 Apr 2024 20:51:34 +0000
ROA not before:           Wed 03 Apr 2024 20:46:34 +0000
ROA not after:            Wed 02 Apr 2025 20:51:34 +0000
asID:                     52916
IP address blocks:        143.255.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.crl
                          rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 01:31:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:d8:d9:28:3f:f9:ea:89:09:64:40:b4:e3:55:6e:e0:aa:82:9c:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF908A177FAF3EDEEAF39EF1BC3B208225302E77
        Validity
            Not Before: Apr  3 20:46:34 2024 GMT
            Not After : Apr  2 20:51:34 2025 GMT
        Subject: CN=9FB1C0511CEE77A17B6E7416C20D3FAD762672D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e6:c4:96:c2:b4:0c:4b:3b:2e:3d:c6:d6:d8:
                    11:de:c8:da:e9:62:07:90:76:41:d1:75:e8:79:6f:
                    c6:5c:f5:d1:df:c2:aa:90:47:6b:51:97:62:9e:2b:
                    8d:7c:99:e1:7d:b1:97:bf:25:f5:1a:bd:92:b4:7d:
                    9a:25:c0:e6:70:f3:9c:23:65:1e:f5:5f:c1:83:1f:
                    b2:7f:a6:b3:aa:92:f1:17:b9:60:73:97:a9:c6:b9:
                    3a:c9:9e:56:18:2e:35:8d:14:c9:a9:08:77:8d:37:
                    f4:90:68:69:3a:b6:90:57:07:d1:20:a7:14:53:fd:
                    99:2b:1c:23:4c:74:51:00:50:2e:70:58:b1:dd:aa:
                    c9:d3:20:14:4b:88:2f:d2:bb:09:6e:ff:8d:6c:bc:
                    ad:8b:ec:45:a3:3a:eb:1c:21:0f:5b:d5:0f:39:9e:
                    7b:22:c7:c9:5d:7b:5a:70:8c:02:e9:34:f3:bd:a0:
                    53:99:f6:ed:b1:ac:3d:54:fc:48:25:4e:13:98:a8:
                    c6:55:a2:9e:29:b4:b3:47:7d:f8:ba:f5:ba:97:d7:
                    54:4b:bb:e2:df:8c:2d:df:ca:2a:56:d4:26:6c:42:
                    0b:9b:bd:48:18:d2:20:d3:17:39:2e:51:73:ae:37:
                    ba:2d:f0:01:b6:f9:7c:42:72:76:04:d1:5f:a6:39:
                    41:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B1:C0:51:1C:EE:77:A1:7B:6E:74:16:C2:0D:3F:AD:76:26:72:D2
            X509v3 Authority Key Identifier:
                keyid:EF:90:8A:17:7F:AF:3E:DE:EA:F3:9E:F1:BC:3B:20:82:25:30:2E:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/3134332e3235352e31382e302f32342d3234203d3e203532393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:a9:94:65:75:6c:1e:be:7c:41:70:4d:63:8a:0e:91:b5:bf:
         e1:c7:4a:93:e3:be:fa:29:8e:87:81:24:06:80:bf:49:7c:cb:
         3f:a6:c6:2d:51:c3:fe:17:4e:8f:9c:ef:cb:59:0f:4f:3f:28:
         33:12:41:a3:46:76:6b:5f:20:4c:e3:7e:09:dc:53:71:f5:76:
         77:7e:45:78:ff:fb:f5:fd:e0:0c:86:fa:d5:45:9b:d0:ab:90:
         ff:62:37:4d:42:61:c7:da:db:ed:d9:b9:31:38:af:12:77:2b:
         62:63:11:64:f3:69:0b:88:8e:0a:e2:d0:e8:b3:9d:ec:93:4c:
         85:75:33:6a:f4:82:93:15:a6:ed:c9:9a:a4:2d:0d:cc:42:67:
         4d:ab:31:dc:bd:dc:ec:d2:38:3d:9c:c3:93:3a:9a:de:7a:f2:
         18:d3:d5:50:81:df:be:59:12:d7:36:25:02:eb:e6:e9:3e:80:
         a9:82:1f:3d:d0:7f:ba:50:27:39:f5:de:ab:4e:22:9b:26:7b:
         b3:db:d2:fa:31:f6:62:9b:8f:e6:1d:4e:19:bf:20:8a:4f:6f:
         8a:16:c1:6a:f1:83:ac:f9:14:4a:98:6e:9a:15:e6:57:d9:0a:
         8e:25:04:03:0a:b4:6f:7e:d1:3e:1f:bd:b2:cb:83:5a:c1:b5:
         a6:ca:02:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:25:37 2024 by rpki-client on console-ams.rpki-client.org