Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3134332e3235352e31352e302f32342d3234203d3e20323635313431.roa
File:                     3134332e3235352e31352e302f32342d3234203d3e20323635313431.roa (raw, json)
Hash identifier:          CPGGo0/XrG6U+f7cnp0tGRUEmorVYFLI3agmH3s1kuw=
Subject key identifier:   24:B9:7C:88:E3:12:07:6A:FA:75:D0:7D:64:30:E5:6E:95:D4:83:D1
Certificate issuer:       /CN=3FE77B8855F61DF2AD68185DD0977BCB42C708F4
Certificate serial:       4FAD5A591DC1EA9EE1F892D539EB762B90896A9D
Authority key identifier: 3F:E7:7B:88:55:F6:1D:F2:AD:68:18:5D:D0:97:7B:CB:42:C7:08:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3134332e3235352e31352e302f32342d3234203d3e20323635313431.roa
Signing time:             Mon 24 Jun 2024 17:44:55 +0000
ROA not before:           Mon 24 Jun 2024 17:39:55 +0000
ROA not after:            Mon 23 Jun 2025 17:44:55 +0000
asID:                     265141
IP address blocks:        143.255.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.crl
                          rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 12:26:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:ad:5a:59:1d:c1:ea:9e:e1:f8:92:d5:39:eb:76:2b:90:89:6a:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FE77B8855F61DF2AD68185DD0977BCB42C708F4
        Validity
            Not Before: Jun 24 17:39:55 2024 GMT
            Not After : Jun 23 17:44:55 2025 GMT
        Subject: CN=24B97C88E312076AFA75D07D6430E56E95D483D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f3:91:b2:da:57:ea:00:b3:53:ce:67:d9:00:
                    ce:2a:3f:ad:54:04:d2:da:f9:a2:1c:d1:b3:bd:4e:
                    1e:46:79:f9:f8:a3:ec:c0:da:09:82:c7:f0:c1:86:
                    5c:06:78:ec:81:18:ef:ba:03:29:5c:14:36:f3:02:
                    12:25:33:75:0b:b2:8c:f4:c5:f5:88:a8:81:1b:03:
                    aa:9a:6b:35:25:6d:6d:0b:24:f5:74:a4:a1:34:78:
                    b2:90:c1:94:e3:8d:a4:47:30:23:cf:28:19:fd:86:
                    11:18:33:07:a5:e8:c0:3a:85:19:5e:bd:4f:26:89:
                    55:33:b1:73:a6:d3:0d:c0:88:28:7d:c8:a6:60:b8:
                    62:7a:55:32:b1:d4:38:0f:6c:8b:fa:30:db:56:70:
                    70:9e:98:23:de:e3:9a:e6:3d:44:ae:b4:ca:2b:e6:
                    03:24:54:03:ce:60:91:fd:22:0f:9d:a2:5b:33:d8:
                    0b:46:86:71:84:8f:0f:15:e8:10:7c:75:bb:36:b1:
                    49:57:fe:b1:31:01:e7:d5:3a:71:86:ae:da:f4:97:
                    29:68:d5:38:b9:41:24:d8:30:de:4c:13:f5:30:ef:
                    db:e3:a8:d9:8d:22:9c:1c:62:2a:4b:64:ae:e8:db:
                    43:e5:ed:9f:ae:33:9b:74:4a:69:12:a3:49:c9:57:
                    77:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:B9:7C:88:E3:12:07:6A:FA:75:D0:7D:64:30:E5:6E:95:D4:83:D1
            X509v3 Authority Key Identifier:
                keyid:3F:E7:7B:88:55:F6:1D:F2:AD:68:18:5D:D0:97:7B:CB:42:C7:08:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3134332e3235352e31352e302f32342d3234203d3e20323635313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:bf:13:81:93:ee:80:c0:d3:e6:d2:67:aa:00:88:45:31:d5:
         cf:1c:c3:0a:a8:40:ee:b9:47:3d:aa:7e:f2:08:77:e0:92:b7:
         70:6a:aa:e5:01:86:93:bc:09:64:21:1b:44:8c:ba:ab:a2:2a:
         f2:cd:e8:2d:04:1b:8d:d9:db:16:b9:18:da:11:c6:51:b2:39:
         4a:cf:c3:98:37:27:02:a9:e2:b5:fa:3f:8e:31:d3:3b:4b:91:
         dd:95:bb:3f:31:b5:3f:20:7a:2f:d6:61:fd:87:75:96:c4:a7:
         fb:42:da:f8:0e:fe:ed:03:77:70:58:58:3b:e8:a5:cb:d6:ef:
         97:00:ba:24:bc:96:69:67:37:6d:3d:78:3d:18:ef:b3:44:bb:
         45:47:5b:66:01:3a:6a:b2:db:43:71:56:4e:df:74:c6:94:c8:
         78:8a:56:8a:69:ec:05:1c:87:a3:66:1c:80:46:bc:7e:59:45:
         41:c4:e8:a5:cb:6d:b3:16:fd:d0:47:5c:96:09:04:a5:58:89:
         22:36:b3:58:a2:ce:8a:b9:7c:3d:c4:eb:88:90:61:ed:5e:99:
         41:0c:65:8f:fc:33:94:1d:d6:18:ca:64:f0:5d:3e:3b:db:96:
         81:e0:d6:e1:09:f3:c1:a4:8d:08:34:50:ce:59:09:b9:50:5b:
         24:88:a0:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:40:05 2025 by rpki-client