Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3134332e3230322e3132382e302f32322d3232203d3e20323632333234.roa
File:                     3134332e3230322e3132382e302f32322d3232203d3e20323632333234.roa (raw, json)
Hash identifier:          67FvNMbezUthAxYAtSaPy0N8M6szCzLRspYK4vcULic=
Subject key identifier:   58:55:DE:14:CF:37:D7:F2:C6:12:86:75:EF:2D:11:5E:EB:BB:F9:2A
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       152B2464290D6662267B0BBCEAB5F65EB5C42D7A
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3134332e3230322e3132382e302f32322d3232203d3e20323632333234.roa
Signing time:             Fri 23 Aug 2024 19:44:57 +0000
ROA not before:           Fri 23 Aug 2024 19:39:57 +0000
ROA not after:            Fri 22 Aug 2025 19:44:57 +0000
asID:                     262324
IP address blocks:        143.202.128.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:2b:24:64:29:0d:66:62:26:7b:0b:bc:ea:b5:f6:5e:b5:c4:2d:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Aug 23 19:39:57 2024 GMT
            Not After : Aug 22 19:44:57 2025 GMT
        Subject: CN=5855DE14CF37D7F2C6128675EF2D115EEBBBF92A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:98:10:1f:88:22:06:88:b3:aa:4d:7f:c7:8e:
                    10:89:51:9d:8f:df:70:bf:05:94:d8:17:08:50:34:
                    90:d0:a5:aa:d3:8a:0e:00:02:3f:3e:44:98:b7:9e:
                    e9:7a:12:fd:94:49:be:da:fc:1d:ed:f0:53:16:a0:
                    0e:e3:6a:dc:90:3c:23:5d:3e:fa:6a:0a:2f:01:21:
                    4d:a7:35:d0:ef:ab:93:f0:e4:b9:f5:b6:30:80:30:
                    34:4f:bc:ed:e2:27:f0:68:67:aa:a0:b6:d1:eb:32:
                    52:cc:3c:1f:a6:15:4a:94:e9:70:41:c2:10:f0:6c:
                    86:be:f3:18:85:29:98:d4:33:d0:97:d9:1a:42:e6:
                    22:3f:d5:37:6a:b3:64:ae:01:1a:e5:04:41:67:79:
                    91:08:88:48:da:8f:30:9a:a1:ca:d6:40:dd:3e:2f:
                    98:08:6f:7a:6e:73:af:5a:ee:68:f5:50:9c:9f:1e:
                    77:e6:a4:58:bd:e9:32:4b:92:85:5a:4d:eb:94:64:
                    f8:7a:74:c0:96:fc:bc:66:1e:2c:a5:a4:66:cb:0a:
                    2f:88:1d:5f:33:46:73:dc:31:2c:2b:d8:af:82:3f:
                    2a:75:b3:2c:2c:b8:d8:3b:c1:3c:28:00:dc:65:40:
                    df:a5:88:45:ca:b3:ae:a5:ca:32:45:b1:10:40:36:
                    0c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:55:DE:14:CF:37:D7:F2:C6:12:86:75:EF:2D:11:5E:EB:BB:F9:2A
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3134332e3230322e3132382e302f32322d3232203d3e20323632333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:8c:5f:d1:ed:36:dc:15:21:c0:6e:7a:03:20:f1:1b:18:74:
         f7:e4:b5:59:f5:25:8b:05:12:df:4d:b4:c5:78:1d:bc:ec:b8:
         b8:71:45:71:3d:07:4d:5b:04:0e:46:84:41:77:48:5e:3a:61:
         6e:60:e5:e3:bb:1d:32:09:3d:b5:a0:9c:5e:ce:9c:f3:69:18:
         7a:16:17:65:51:f6:21:77:9a:60:d8:dd:a6:4f:2d:30:2e:d4:
         2b:94:1f:a1:5a:82:81:5c:e6:c1:80:32:af:6b:65:6b:30:cc:
         c0:ba:bb:dc:fa:12:cc:43:37:6f:d6:8c:65:d0:21:91:4a:db:
         cb:2c:b3:24:7f:cf:8b:da:9d:0f:35:4e:b4:aa:3c:56:06:3d:
         4f:52:79:97:4a:58:86:72:4c:25:f1:48:b1:b4:18:6d:3e:0b:
         c2:53:d7:0f:8e:92:55:01:ea:ec:91:92:de:d0:f0:35:82:11:
         31:c4:29:aa:12:f8:e6:df:f0:a4:61:0e:9f:1a:ac:be:3a:65:
         c8:c7:c0:16:b3:4c:d0:60:93:3b:e5:3b:23:be:3d:95:db:56:
         41:24:ab:55:0f:f3:94:dc:fa:78:83:25:89:89:6d:9d:6d:1e:
         f1:21:8e:1f:15:53:d7:b7:aa:c5:29:0a:34:74:46:03:f9:e3:
         f5:b7:2c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:02:57 2024 by rpki-client on console-fra.rpki-client.org