Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/3134332e302e3136342e302f32322d3234203d3e20323634303134.roa
File:                     3134332e302e3136342e302f32322d3234203d3e20323634303134.roa (raw, json)
Hash identifier:          NAlyE1gP5eEm2QCzZwWb0ZvOj7kmRHCKooa9+7IETXo=
Subject key identifier:   BB:B6:02:B6:05:44:FA:75:F0:A6:25:76:57:42:8A:53:77:B3:2F:D3
Certificate issuer:       /CN=0A5BFC449BC0AE94F260C50A31DCBFBC318391E8
Certificate serial:       16C18F16AF0A38E118C934706FA37BC54C6232F5
Authority key identifier: 0A:5B:FC:44:9B:C0:AE:94:F2:60:C5:0A:31:DC:BF:BC:31:83:91:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/3134332e302e3136342e302f32322d3234203d3e20323634303134.roa
Signing time:             Wed 14 Aug 2024 20:05:04 +0000
ROA not before:           Wed 14 Aug 2024 20:00:04 +0000
ROA not after:            Wed 13 Aug 2025 20:05:04 +0000
asID:                     264014
IP address blocks:        143.0.164.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.crl
                          rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:48:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:c1:8f:16:af:0a:38:e1:18:c9:34:70:6f:a3:7b:c5:4c:62:32:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5BFC449BC0AE94F260C50A31DCBFBC318391E8
        Validity
            Not Before: Aug 14 20:00:04 2024 GMT
            Not After : Aug 13 20:05:04 2025 GMT
        Subject: CN=BBB602B60544FA75F0A6257657428A5377B32FD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4b:2f:a2:cd:83:af:90:6f:a1:47:35:a6:58:
                    4c:9e:4c:3a:6f:e6:bf:e6:ed:bd:e8:46:d5:69:2f:
                    0d:ee:e4:cc:63:77:e7:4c:3a:ed:f9:2e:ed:05:f1:
                    e9:a1:d6:3e:7f:96:09:a6:72:a1:8c:29:96:2a:88:
                    6b:6d:6a:2e:ac:fc:b9:e8:d2:90:10:2e:16:19:7f:
                    21:0a:04:5e:e5:44:06:bb:ab:fa:8f:38:fd:82:8c:
                    db:5a:52:95:6c:c8:c2:a7:35:d7:81:b2:0b:71:e8:
                    22:dc:58:63:f9:00:f7:cb:ad:a5:f5:fc:b1:47:01:
                    78:44:fb:d5:d3:b7:d0:29:de:a5:35:44:3a:fe:ec:
                    34:c0:fa:fd:d8:7b:05:df:18:7f:25:75:47:6d:fa:
                    c8:0e:cb:bc:59:2c:3e:dd:8f:be:0b:bf:18:db:06:
                    71:32:17:9b:75:f6:70:9d:a5:a2:d6:40:89:e7:d9:
                    f5:3f:82:84:04:99:e5:74:57:b6:40:1e:32:36:12:
                    e4:c2:bc:55:46:94:5f:e8:8e:48:28:07:f3:5c:6e:
                    63:30:96:fc:e5:06:3b:4c:c2:8c:8a:d2:35:08:13:
                    62:95:56:34:d9:84:c3:46:4b:5d:42:3c:36:42:d2:
                    20:c6:15:e8:81:16:1e:0d:96:97:dd:9f:03:e3:63:
                    38:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:B6:02:B6:05:44:FA:75:F0:A6:25:76:57:42:8A:53:77:B3:2F:D3
            X509v3 Authority Key Identifier:
                keyid:0A:5B:FC:44:9B:C0:AE:94:F2:60:C5:0A:31:DC:BF:BC:31:83:91:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/3134332e302e3136342e302f32322d3234203d3e20323634303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:65:82:27:41:a6:3c:89:e2:e4:7f:73:6e:bb:8a:99:81:64:
         fa:2a:ed:b0:b4:b0:68:4f:dc:de:21:bf:82:8f:2b:1e:76:40:
         4c:61:76:c4:ea:e5:86:7c:95:50:39:95:d5:79:6d:20:45:55:
         4d:40:b4:54:41:72:04:15:08:2a:c8:7b:61:93:66:0e:82:f0:
         2a:d8:f7:1f:82:85:f7:44:12:22:44:5f:9a:17:da:cf:c5:0f:
         a9:0a:06:e1:46:d1:63:aa:a0:e9:90:8d:2d:71:50:53:af:cd:
         9f:fe:b0:46:f6:c8:1c:f4:28:82:d8:be:63:24:7e:52:01:23:
         f2:46:2e:d0:ef:c3:ea:b0:2a:42:a5:e7:05:f8:c6:d7:94:9f:
         8e:6b:ee:cb:9b:2d:a4:1e:1a:b5:63:d2:a0:10:8d:18:50:03:
         5c:20:25:15:d5:53:18:40:c7:75:0a:2f:37:c6:07:20:0f:c4:
         59:9f:ec:e1:03:51:ba:3a:fe:24:ee:e7:27:b1:7b:9c:c3:14:
         64:eb:39:a6:85:37:da:b5:1f:93:b7:bb:96:ef:c6:ce:70:8d:
         91:45:0d:e6:43:24:68:b2:3c:56:57:ce:9f:9e:6b:23:b7:31:
         f7:1a:64:ac:63:8f:dc:ad:e7:a9:a6:4e:4f:a3:2f:5c:8f:e9:
         95:ec:f5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:30:05 2024 by rpki-client on console-fra.rpki-client.org