Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/1/3134332e3230322e35322e302f32322d3234203d3e203631373534.roa
File:                     3134332e3230322e35322e302f32322d3234203d3e203631373534.roa (raw, json)
Hash identifier:          +M8XMti1I2C/WcbR0AGX/hmDF+F942oQ0v3EZOlPJx4=
Subject key identifier:   97:50:FF:60:BB:92:CE:02:08:AF:9A:88:0F:DB:7E:AB:E7:F8:46:75
Certificate issuer:       /CN=B92001871A07D03B31A6C890436B41249FAC3A6E
Certificate serial:       4F5097A1FEFF673717B6534FBFC89439236B3AA6
Authority key identifier: B9:20:01:87:1A:07:D0:3B:31:A6:C8:90:43:6B:41:24:9F:AC:3A:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B92001871A07D03B31A6C890436B41249FAC3A6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/1/3134332e3230322e35322e302f32322d3234203d3e203631373534.roa
Signing time:             Thu 04 Apr 2024 22:12:16 +0000
ROA not before:           Thu 04 Apr 2024 22:07:16 +0000
ROA not after:            Thu 03 Apr 2025 22:12:16 +0000
asID:                     61754
IP address blocks:        143.202.52.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/1/B92001871A07D03B31A6C890436B41249FAC3A6E.crl
                          rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/1/B92001871A07D03B31A6C890436B41249FAC3A6E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B92001871A07D03B31A6C890436B41249FAC3A6E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:50:97:a1:fe:ff:67:37:17:b6:53:4f:bf:c8:94:39:23:6b:3a:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B92001871A07D03B31A6C890436B41249FAC3A6E
        Validity
            Not Before: Apr  4 22:07:16 2024 GMT
            Not After : Apr  3 22:12:16 2025 GMT
        Subject: CN=9750FF60BB92CE0208AF9A880FDB7EABE7F84675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:05:87:e7:5d:f5:39:bc:ee:01:a7:32:1e:3b:
                    ee:72:e2:32:3f:ee:39:b2:57:8c:14:89:e4:e7:14:
                    1b:1c:30:5e:99:db:23:92:d5:56:8d:1d:f1:71:a1:
                    ab:09:98:db:51:59:b6:54:62:68:39:87:66:83:66:
                    35:2e:57:dc:3a:d7:9e:e8:a8:17:7b:e2:06:88:f2:
                    ac:a2:19:0b:4a:44:f1:92:86:51:2a:ea:12:56:5e:
                    4b:71:cc:19:23:f8:3c:a7:79:a6:3a:73:48:d9:91:
                    92:9d:7a:34:86:b6:af:3d:e9:cf:73:74:fd:59:02:
                    74:a6:ee:d2:61:8c:71:bd:b6:86:b2:ae:68:8e:e1:
                    a0:c8:55:8a:cb:dc:91:6d:e5:da:0f:a2:ea:0d:34:
                    f1:8f:7c:2b:0c:21:33:65:00:08:d1:2c:5a:2d:f1:
                    76:85:e0:f6:c8:23:35:94:0e:ba:4b:90:05:79:28:
                    62:81:4b:2b:72:b3:53:7b:36:c6:50:5c:5e:b2:42:
                    94:1c:2d:ef:08:1e:30:bc:2e:e4:4f:22:e4:e6:d0:
                    f0:1b:b9:3f:b9:41:c9:1e:6c:46:52:5d:ad:14:e7:
                    10:06:4f:6f:16:5a:56:f8:3e:6a:d0:db:39:c0:08:
                    b5:6b:90:9e:74:3b:82:06:3c:61:65:29:81:91:07:
                    aa:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:50:FF:60:BB:92:CE:02:08:AF:9A:88:0F:DB:7E:AB:E7:F8:46:75
            X509v3 Authority Key Identifier:
                keyid:B9:20:01:87:1A:07:D0:3B:31:A6:C8:90:43:6B:41:24:9F:AC:3A:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/1/B92001871A07D03B31A6C890436B41249FAC3A6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B92001871A07D03B31A6C890436B41249FAC3A6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/1/3134332e3230322e35322e302f32322d3234203d3e203631373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:71:8f:ba:e8:09:bd:0b:82:ce:4c:83:96:c6:55:61:3a:0f:
         e8:60:91:62:fa:37:96:b5:86:57:f0:c4:59:20:42:19:7f:c0:
         9a:8a:6c:46:f3:43:d6:b7:97:29:0d:ec:93:f8:34:3d:d9:d4:
         e5:ec:4b:9f:df:9a:de:02:0d:52:0f:d0:72:d7:30:78:e5:71:
         19:c8:ed:8c:a0:9f:70:f0:c6:40:d8:fa:51:0a:cd:54:67:38:
         e6:f7:a3:7b:0a:3e:b1:e3:b4:c1:6b:4e:6b:ea:60:4d:27:fd:
         cb:1b:f0:71:dd:b0:4e:1f:d9:05:e3:a0:1e:1b:57:33:c9:49:
         4f:6f:90:77:88:cd:1a:a5:24:4d:3d:6c:df:8b:b1:a8:91:46:
         d7:25:90:52:88:62:f1:61:ad:2c:ad:0f:6f:f3:00:d0:b6:c9:
         f4:02:f5:a3:49:27:25:fe:17:32:7c:e7:be:c3:0b:e3:7a:c9:
         ec:0c:83:64:04:58:8b:f6:ea:2f:57:3b:69:68:eb:b0:cc:f4:
         37:6c:1c:4c:18:25:b3:eb:19:4c:18:42:fb:2d:c8:84:93:51:
         3c:7e:b8:3d:8d:eb:a1:86:ba:53:4b:52:ca:17:d6:01:90:5b:
         c6:db:54:f2:2e:c3:73:cb:cd:28:1e:ce:4d:10:ea:2a:73:dc:
         d6:71:51:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:21 2024 by rpki-client on console-fra.rpki-client.org