Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E6CaMq8vDJP4u5DTRNPKFqvNRnvhjDD8Djs5ZmiABnEk/0/3134332e3235352e3132302e302f32322d3234203d3e203631393438.roa
File:                     3134332e3235352e3132302e302f32322d3234203d3e203631393438.roa (raw, json)
Hash identifier:          Zn/+YmsO1FgXssl6hlwGNd2pu/1MrqM8MhQLFKYbi+4=
Subject key identifier:   85:51:2A:A0:1D:CA:18:C7:D4:4E:8D:86:C9:47:96:EE:65:9A:62:ED
Certificate issuer:       /CN=25A0DF6A1FD01602672F05F11CAF0EB839063871
Certificate serial:       0BE885BFD61AC0D0DDE2D14B1CA33D249C3C5170
Authority key identifier: 25:A0:DF:6A:1F:D0:16:02:67:2F:05:F1:1C:AF:0E:B8:39:06:38:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25A0DF6A1FD01602672F05F11CAF0EB839063871.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E6CaMq8vDJP4u5DTRNPKFqvNRnvhjDD8Djs5ZmiABnEk/0/3134332e3235352e3132302e302f32322d3234203d3e203631393438.roa
Signing time:             Tue 28 May 2024 15:41:10 +0000
ROA not before:           Tue 28 May 2024 15:36:10 +0000
ROA not after:            Tue 27 May 2025 15:41:10 +0000
asID:                     61948
IP address blocks:        143.255.120.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E6CaMq8vDJP4u5DTRNPKFqvNRnvhjDD8Djs5ZmiABnEk/0/25A0DF6A1FD01602672F05F11CAF0EB839063871.crl
                          rsync://rpki-repo.registro.br/repo/E6CaMq8vDJP4u5DTRNPKFqvNRnvhjDD8Djs5ZmiABnEk/0/25A0DF6A1FD01602672F05F11CAF0EB839063871.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25A0DF6A1FD01602672F05F11CAF0EB839063871.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Jun 2024 11:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:e8:85:bf:d6:1a:c0:d0:dd:e2:d1:4b:1c:a3:3d:24:9c:3c:51:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25A0DF6A1FD01602672F05F11CAF0EB839063871
        Validity
            Not Before: May 28 15:36:10 2024 GMT
            Not After : May 27 15:41:10 2025 GMT
        Subject: CN=85512AA01DCA18C7D44E8D86C94796EE659A62ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:0e:62:6f:d2:f7:c3:fe:f1:3b:ab:d3:3a:1f:
                    4e:33:a0:f0:5d:5b:ed:1a:6d:24:0f:16:7a:cf:93:
                    b4:90:65:4b:32:95:ef:4b:4a:82:83:09:f6:7d:cc:
                    e7:d7:b9:c5:16:d5:27:9f:29:92:c4:f7:68:62:99:
                    3d:77:de:fc:38:43:a4:5d:42:84:9a:6f:5c:63:6e:
                    77:c9:96:b3:2a:97:96:f6:b4:0b:4f:bd:43:4e:2e:
                    cf:e1:fd:92:5f:57:36:34:c9:76:7f:8a:92:e0:ed:
                    cb:4c:ba:20:2f:8e:a1:e9:00:cb:c0:22:24:c4:53:
                    ac:42:71:84:8e:5b:7f:7d:d6:c6:4e:10:35:4e:aa:
                    d8:67:d5:dc:c1:a6:f0:3f:b4:ee:26:a6:96:7c:d5:
                    d8:fb:34:b7:f0:90:94:36:9a:52:76:7a:11:31:64:
                    bd:2f:dd:b6:33:5c:c5:73:13:a1:22:51:b2:18:09:
                    ec:60:d8:3a:a0:f6:6d:40:c5:98:9d:bb:4d:6b:06:
                    43:30:ae:2b:38:57:57:29:02:dd:72:d2:7b:9a:54:
                    e8:ad:9c:68:8b:e4:4d:9c:12:47:c3:db:4c:9f:f0:
                    05:5e:2d:a4:c0:59:51:44:ab:44:24:3d:bf:3f:45:
                    9e:34:fa:d3:7c:3f:56:c4:57:e1:ae:e5:6f:6f:f3:
                    a0:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:51:2A:A0:1D:CA:18:C7:D4:4E:8D:86:C9:47:96:EE:65:9A:62:ED
            X509v3 Authority Key Identifier:
                keyid:25:A0:DF:6A:1F:D0:16:02:67:2F:05:F1:1C:AF:0E:B8:39:06:38:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E6CaMq8vDJP4u5DTRNPKFqvNRnvhjDD8Djs5ZmiABnEk/0/25A0DF6A1FD01602672F05F11CAF0EB839063871.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25A0DF6A1FD01602672F05F11CAF0EB839063871.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E6CaMq8vDJP4u5DTRNPKFqvNRnvhjDD8Djs5ZmiABnEk/0/3134332e3235352e3132302e302f32322d3234203d3e203631393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:24:bf:1f:ef:98:88:a2:08:ae:ab:65:35:c5:a3:11:1d:14:
         5d:3e:35:11:ee:03:30:0e:ca:22:1f:24:86:ef:5c:b7:a5:ed:
         a4:4c:4b:b9:8f:db:f3:46:b3:ae:d1:dc:50:42:c4:b8:64:c5:
         25:fd:98:83:c8:56:ed:84:b7:62:db:9f:0a:30:78:31:9d:18:
         30:c6:2d:7c:a7:d3:30:d3:e8:d4:81:90:47:84:17:93:10:47:
         a1:53:97:ba:28:1c:53:72:1c:a5:a5:2a:2f:30:bb:9e:56:0f:
         2a:52:05:16:62:c9:cb:89:05:f2:cf:a8:bd:82:59:bd:09:f8:
         9a:d7:8e:25:30:e8:ac:cc:2d:d9:1d:c8:2b:cf:2e:d8:aa:f1:
         6d:4d:92:9b:83:1a:56:1a:d9:ec:7a:de:7f:47:f9:1e:1d:10:
         fe:c8:2b:84:a4:62:47:57:e4:18:ab:b1:1b:76:29:27:d2:35:
         54:a0:d7:52:9e:fc:3f:5e:ae:0f:48:6c:c9:4d:46:f3:88:92:
         78:c8:41:73:aa:09:12:53:ad:32:67:8e:2e:98:7c:30:68:a8:
         87:89:80:91:22:a7:11:8f:09:2c:e0:64:d7:57:ba:7d:a9:50:
         58:d4:a1:e8:53:de:0d:4b:b0:dd:e0:35:8a:56:3a:1e:a3:67:
         53:94:49:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 13:43:13 2024 by rpki-client on console-fra.rpki-client.org