Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/3134332e3133372e3132322e302f32332d3233203d3e20323634303336.roa
File:                     3134332e3133372e3132322e302f32332d3233203d3e20323634303336.roa (raw, json)
Hash identifier:          Qv5ci160LgfzW/GTZxN+vvamjmNe6tM6xT6URVKXLeI=
Subject key identifier:   1C:C0:F9:A2:86:8E:19:77:EA:CE:C2:A5:B1:79:D8:5F:D6:2C:61:3E
Certificate issuer:       /CN=8BCC3BCD747996DEA6D7F16098CF132148801B30
Certificate serial:       1B52C703C3BE430C5CC41155380852E3DF299E4A
Authority key identifier: 8B:CC:3B:CD:74:79:96:DE:A6:D7:F1:60:98:CF:13:21:48:80:1B:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/3134332e3133372e3132322e302f32332d3233203d3e20323634303336.roa
Signing time:             Thu 04 Apr 2024 21:30:28 +0000
ROA not before:           Thu 04 Apr 2024 21:25:28 +0000
ROA not after:            Thu 03 Apr 2025 21:30:28 +0000
asID:                     264036
IP address blocks:        143.137.122.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.crl
                          rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:57:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:52:c7:03:c3:be:43:0c:5c:c4:11:55:38:08:52:e3:df:29:9e:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BCC3BCD747996DEA6D7F16098CF132148801B30
        Validity
            Not Before: Apr  4 21:25:28 2024 GMT
            Not After : Apr  3 21:30:28 2025 GMT
        Subject: CN=1CC0F9A2868E1977EACEC2A5B179D85FD62C613E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:61:d1:08:1c:e6:7a:65:fe:86:d2:af:eb:0c:
                    98:d8:46:89:52:f4:38:c8:57:b5:b2:80:e1:50:bb:
                    33:a4:1a:95:81:c8:eb:60:9e:48:07:24:c2:f3:c3:
                    b5:1b:3c:ab:99:f3:5b:0e:e2:ea:47:90:0f:7f:73:
                    97:f2:a1:1f:6f:1a:87:f8:e4:2e:12:14:1c:17:0b:
                    1f:e5:63:0d:77:2b:3c:ab:12:b1:e0:86:8d:cb:67:
                    8a:71:c9:8e:af:06:f0:31:d9:2f:e8:da:8f:1b:b8:
                    60:f5:e6:52:76:51:ad:e6:47:9b:75:b2:25:b2:41:
                    75:0f:92:9a:3f:ad:6a:e6:35:b3:ca:3a:71:8d:43:
                    be:df:c6:4a:9a:01:37:d0:2e:11:c2:46:ec:df:f7:
                    38:0a:c3:00:3a:17:0d:fe:b2:05:6f:33:41:80:9a:
                    4b:3c:39:47:3f:5e:89:3d:34:18:b8:be:ea:80:91:
                    0b:77:25:64:a4:67:99:da:79:37:e6:79:8d:37:5a:
                    62:20:f9:e9:ae:e7:d7:78:59:14:2d:cd:09:5b:f2:
                    ca:5c:27:5e:b2:2d:04:dd:c0:41:d9:aa:47:ee:f1:
                    82:06:a6:69:37:14:3e:0b:72:4d:76:8b:f2:07:b7:
                    27:c9:32:3e:a7:4f:43:04:2b:2d:46:e7:80:f6:02:
                    c5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:C0:F9:A2:86:8E:19:77:EA:CE:C2:A5:B1:79:D8:5F:D6:2C:61:3E
            X509v3 Authority Key Identifier:
                keyid:8B:CC:3B:CD:74:79:96:DE:A6:D7:F1:60:98:CF:13:21:48:80:1B:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/3134332e3133372e3132322e302f32332d3233203d3e20323634303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:ab:73:25:3d:0f:e0:fa:18:a7:ac:d3:42:8b:74:2a:fd:05:
         0b:0d:38:02:9d:54:d1:a1:86:7f:75:ad:6b:84:ae:f1:b6:d6:
         64:66:0d:96:e7:95:92:7c:1c:77:43:25:f3:ab:e7:66:3b:1c:
         49:3c:c2:7f:dd:f4:25:b0:65:bf:1c:e3:e2:a4:18:4f:ff:6d:
         64:01:67:99:7c:93:69:b0:d1:a3:f3:79:9a:67:a2:50:d9:29:
         61:3c:96:61:b8:ce:2e:57:f2:4c:85:2a:4d:1e:a3:7c:d1:08:
         39:6d:2b:50:39:92:c3:13:c5:4d:92:9b:03:53:d5:e3:4e:20:
         45:55:94:b6:43:50:bc:96:ac:b9:50:df:1b:ed:b7:fe:bb:39:
         b1:b7:bd:f5:9a:57:4a:f1:a0:3b:a4:8b:08:a9:a4:03:c2:7a:
         45:e2:bf:df:2b:0b:04:1f:b2:ee:a8:81:5f:02:17:48:6a:74:
         b0:f4:65:79:24:7a:b2:6c:99:55:8e:9d:8d:bf:b5:ef:a9:81:
         1a:f7:a3:6a:6a:78:c7:b7:6c:83:2d:88:05:11:0e:ef:e8:97:
         63:28:bb:91:8e:6c:f3:80:af:32:14:37:fa:16:42:62:cb:3c:
         92:e9:b0:43:a2:38:10:90:2b:6d:83:ca:f8:17:d0:27:5e:ee:
         28:cd:ad:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:33 2024 by rpki-client on console-fra.rpki-client.org