Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EKjR1CZec79ecdEbeWQ7N3pEXg9Fivz4aMboxZXuqjvm/1/3134332e3230322e3231362e302f32322d3234203d3e20323634303734.roa
File:                     3134332e3230322e3231362e302f32322d3234203d3e20323634303734.roa (raw, json)
Hash identifier:          UA6913WWUGeZjE543dlhn7SzXb+hIebA5SqIqY30jjc=
Subject key identifier:   70:BA:9B:5A:CA:9A:D8:E4:56:A9:05:E6:A9:C6:A4:99:57:4A:FA:B4
Certificate issuer:       /CN=053534088AE146C26641820A5E5F82310DB957FC
Certificate serial:       2398367907935407A4636762FDBF84A16EB7229A
Authority key identifier: 05:35:34:08:8A:E1:46:C2:66:41:82:0A:5E:5F:82:31:0D:B9:57:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/053534088AE146C26641820A5E5F82310DB957FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EKjR1CZec79ecdEbeWQ7N3pEXg9Fivz4aMboxZXuqjvm/1/3134332e3230322e3231362e302f32322d3234203d3e20323634303734.roa
Signing time:             Wed 03 Apr 2024 23:35:56 +0000
ROA not before:           Wed 03 Apr 2024 23:30:56 +0000
ROA not after:            Wed 02 Apr 2025 23:35:56 +0000
asID:                     264074
IP address blocks:        143.202.216.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EKjR1CZec79ecdEbeWQ7N3pEXg9Fivz4aMboxZXuqjvm/1/053534088AE146C26641820A5E5F82310DB957FC.crl
                          rsync://rpki-repo.registro.br/repo/EKjR1CZec79ecdEbeWQ7N3pEXg9Fivz4aMboxZXuqjvm/1/053534088AE146C26641820A5E5F82310DB957FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/053534088AE146C26641820A5E5F82310DB957FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:98:36:79:07:93:54:07:a4:63:67:62:fd:bf:84:a1:6e:b7:22:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=053534088AE146C26641820A5E5F82310DB957FC
        Validity
            Not Before: Apr  3 23:30:56 2024 GMT
            Not After : Apr  2 23:35:56 2025 GMT
        Subject: CN=70BA9B5ACA9AD8E456A905E6A9C6A499574AFAB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:96:03:7e:ec:60:fd:ff:62:a3:4f:39:d1:32:
                    4e:3f:81:98:72:23:d4:65:3f:c1:e5:2c:c0:35:a3:
                    e2:b4:71:d7:83:ab:3b:9c:01:d4:65:f9:b7:85:37:
                    fb:3d:37:4b:50:2c:58:a7:f0:89:7b:c3:38:fe:34:
                    e8:0b:61:12:77:33:9f:e1:6b:3f:7b:36:a7:3d:11:
                    c2:88:16:8b:d2:06:4a:0a:c3:6d:17:b1:f9:f4:a3:
                    72:ec:1d:de:d1:08:a2:01:93:44:a5:49:0e:75:78:
                    67:1b:99:b5:71:2b:65:98:c2:7b:58:11:e0:37:b2:
                    19:f1:3e:06:52:fa:d1:b1:48:e3:14:c4:42:73:50:
                    b1:ea:c9:06:fb:fe:fd:45:7c:fd:37:65:a3:72:78:
                    2b:70:f0:0b:3f:42:b2:85:1a:20:3d:a9:d8:fc:1e:
                    83:24:fb:4f:26:4d:a9:d4:a6:b7:17:5f:7f:9d:2f:
                    51:84:7d:d5:5e:d6:3b:19:17:99:3b:71:d9:46:1b:
                    ab:d9:c2:c3:e0:0b:31:07:f3:66:12:e3:72:b7:a2:
                    47:25:bc:cd:73:b3:65:56:c4:26:ac:13:38:f8:8d:
                    18:b4:13:e7:94:95:e3:cd:ed:fd:67:99:39:2c:4e:
                    6e:29:a6:da:ee:64:13:80:28:78:9e:ed:96:3b:7d:
                    44:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:BA:9B:5A:CA:9A:D8:E4:56:A9:05:E6:A9:C6:A4:99:57:4A:FA:B4
            X509v3 Authority Key Identifier:
                keyid:05:35:34:08:8A:E1:46:C2:66:41:82:0A:5E:5F:82:31:0D:B9:57:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EKjR1CZec79ecdEbeWQ7N3pEXg9Fivz4aMboxZXuqjvm/1/053534088AE146C26641820A5E5F82310DB957FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/053534088AE146C26641820A5E5F82310DB957FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKjR1CZec79ecdEbeWQ7N3pEXg9Fivz4aMboxZXuqjvm/1/3134332e3230322e3231362e302f32322d3234203d3e20323634303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:d1:bf:8e:e7:f5:0b:51:20:1a:62:68:75:b2:f4:f6:af:2a:
         d3:73:81:ef:56:f2:0d:94:36:a2:e1:36:c0:f2:1f:56:f4:c3:
         d2:c5:92:4c:f3:e2:8f:81:c0:98:f2:78:85:a6:79:47:5d:24:
         18:04:2f:0e:c3:1f:d7:80:6b:1c:d6:cc:88:d4:d3:f2:1f:83:
         31:2b:77:54:c3:8b:68:79:e7:b3:69:ef:31:37:99:ac:79:98:
         5e:2f:03:6b:37:70:c8:f4:95:45:e7:ff:4e:44:49:3c:3b:10:
         75:c0:06:5c:36:0f:7e:49:40:a0:98:bb:67:a6:81:14:1c:6b:
         08:fb:61:02:5d:48:47:c6:c6:08:ca:b1:a8:71:bc:9c:45:75:
         dd:f8:5f:c2:e3:00:fc:55:27:59:aa:de:1f:13:d3:5f:d6:5d:
         f3:40:24:b9:43:c3:33:57:a0:fd:3e:ac:bf:78:dc:4e:62:8c:
         57:7d:07:35:de:ab:36:bb:14:52:76:0f:33:22:34:32:c6:fa:
         31:3b:6a:14:f4:7d:f0:e1:97:3f:02:df:fa:9b:fb:2d:1f:53:
         a4:f9:a8:e2:45:a3:40:a8:e1:2e:67:9c:37:0d:12:b9:a9:4f:
         a3:b5:db:90:76:31:71:08:7d:87:e9:48:e1:2d:ed:bc:ca:72:
         8c:e0:d8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:43 2024 by rpki-client on console-ams.rpki-client.org