Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/3134332e3133372e3132332e302f32342d3234203d3e20323634303336.roa
File:                     3134332e3133372e3132332e302f32342d3234203d3e20323634303336.roa (raw, json)
Hash identifier:          jP/ghNDcVK8pcGeNRcRFtDzEVmKXavDHMV7DVGGMKdg=
Subject key identifier:   2C:1C:B2:75:11:E3:EC:D1:8F:45:B6:B7:5F:32:E7:3B:81:BD:80:4F
Certificate issuer:       /CN=8BCC3BCD747996DEA6D7F16098CF132148801B30
Certificate serial:       7D997C4E12FC86AB2CDBC423CDD547137DDDD9D1
Authority key identifier: 8B:CC:3B:CD:74:79:96:DE:A6:D7:F1:60:98:CF:13:21:48:80:1B:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/3134332e3133372e3132332e302f32342d3234203d3e20323634303336.roa
Signing time:             Thu 04 Apr 2024 21:30:28 +0000
ROA not before:           Thu 04 Apr 2024 21:25:28 +0000
ROA not after:            Thu 03 Apr 2025 21:30:28 +0000
asID:                     264036
IP address blocks:        143.137.123.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.crl
                          rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:57:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:99:7c:4e:12:fc:86:ab:2c:db:c4:23:cd:d5:47:13:7d:dd:d9:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BCC3BCD747996DEA6D7F16098CF132148801B30
        Validity
            Not Before: Apr  4 21:25:28 2024 GMT
            Not After : Apr  3 21:30:28 2025 GMT
        Subject: CN=2C1CB27511E3ECD18F45B6B75F32E73B81BD804F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:99:73:8f:cf:83:a3:5c:aa:d7:c5:4f:3f:9a:
                    dc:2d:c1:3a:4c:23:b8:8e:41:f3:7b:40:bc:40:68:
                    5b:86:41:88:f1:1b:56:8b:91:2b:23:bb:48:5c:78:
                    29:20:dc:b9:5a:37:51:ee:3f:0a:b8:d7:c9:62:cf:
                    a3:4b:3d:85:50:76:a0:c8:67:67:4f:d9:62:56:8a:
                    9e:01:84:28:4c:53:66:d2:5c:b1:a0:57:c0:3e:73:
                    b7:a5:2f:2c:2a:7a:0f:e3:4a:b1:8b:9d:30:8e:31:
                    57:af:bf:a7:cf:6f:0e:bb:1b:4b:15:d0:13:f6:3e:
                    05:65:00:80:12:7b:cc:e7:ed:a1:3a:e1:34:64:f3:
                    6c:cb:06:c6:7d:70:5f:85:96:6c:e4:b8:48:8d:9f:
                    34:9b:d9:02:12:62:33:c0:79:32:91:9b:e5:b9:88:
                    e9:3d:3c:4f:b7:26:29:3b:b6:44:fb:4a:a9:ad:78:
                    de:5b:19:06:d9:7a:40:3e:7f:af:01:ae:cd:e1:8c:
                    2f:c8:dd:3d:79:db:18:57:0d:27:a4:1e:3e:5e:94:
                    01:fc:f3:7c:26:13:11:08:68:96:96:9d:21:af:0e:
                    48:54:59:0d:b1:5f:9a:ac:57:20:78:ac:fe:8f:a0:
                    18:d7:03:06:2b:d5:8d:57:99:8c:8f:7d:12:10:3d:
                    6a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:1C:B2:75:11:E3:EC:D1:8F:45:B6:B7:5F:32:E7:3B:81:BD:80:4F
            X509v3 Authority Key Identifier:
                keyid:8B:CC:3B:CD:74:79:96:DE:A6:D7:F1:60:98:CF:13:21:48:80:1B:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/3134332e3133372e3132332e302f32342d3234203d3e20323634303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:71:1b:69:1b:28:ca:09:6d:e3:7c:20:b4:21:fd:26:80:e7:
         de:c0:f1:6a:74:bc:ed:d9:55:7b:71:8f:20:7b:bd:8a:00:11:
         f5:93:20:a6:a3:b2:70:0b:c4:d8:0e:01:e5:f5:ac:19:fc:eb:
         11:c0:15:2e:ee:d9:e7:5a:c5:23:33:e8:dc:32:b6:5c:8a:58:
         db:55:a1:a3:b5:bb:64:31:51:57:7d:aa:24:ce:2b:81:6a:aa:
         26:53:ee:de:eb:d6:cd:ef:c9:b9:b8:29:b5:c2:e4:9e:2a:40:
         ea:a7:a8:c4:f2:0f:3d:05:a8:75:f7:fa:ec:cd:d5:06:fb:bf:
         7f:bd:0c:d0:c6:24:87:cb:93:ce:46:4d:46:5e:ff:0a:4b:a7:
         aa:0b:1a:2f:6a:2a:b1:3d:3a:cb:d3:cb:3e:a1:a2:4e:b8:43:
         03:91:a0:6e:c8:63:cf:67:50:7c:da:2f:d7:3a:51:84:9c:6a:
         86:26:ff:ac:dd:9e:a1:8f:af:da:d9:d7:0d:23:04:19:1a:c1:
         8a:94:b4:75:c9:8e:19:a2:2d:7d:30:b1:d6:a6:1b:00:0e:37:
         00:23:bf:10:b5:80:0f:bc:a7:18:ed:34:65:8b:56:28:98:0e:
         70:b1:44:d7:4e:8f:7d:86:12:08:d1:86:b1:14:0f:76:9e:b1:
         ae:1f:c0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:33 2024 by rpki-client on console-fra.rpki-client.org