Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/3134332e302e3136352e302f32342d3234203d3e20323634303134.roa
File:                     3134332e302e3136352e302f32342d3234203d3e20323634303134.roa (raw, json)
Hash identifier:          lBnbi+cZ0P/16s0Lwpg1lFRR4SKsQ/4q3lu3OnyOAnQ=
Subject key identifier:   00:08:CC:BE:73:76:29:87:1D:CD:D5:8A:C2:54:BB:6D:73:85:2C:8A
Certificate issuer:       /CN=0A5BFC449BC0AE94F260C50A31DCBFBC318391E8
Certificate serial:       04FA88FABDA344C2D4EFDC3A1E440C282B84E9DE
Authority key identifier: 0A:5B:FC:44:9B:C0:AE:94:F2:60:C5:0A:31:DC:BF:BC:31:83:91:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/3134332e302e3136352e302f32342d3234203d3e20323634303134.roa
Signing time:             Thu 04 Apr 2024 05:35:47 +0000
ROA not before:           Thu 04 Apr 2024 05:30:47 +0000
ROA not after:            Thu 03 Apr 2025 05:35:47 +0000
asID:                     264014
IP address blocks:        143.0.165.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.crl
                          rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 20:53:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:fa:88:fa:bd:a3:44:c2:d4:ef:dc:3a:1e:44:0c:28:2b:84:e9:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5BFC449BC0AE94F260C50A31DCBFBC318391E8
        Validity
            Not Before: Apr  4 05:30:47 2024 GMT
            Not After : Apr  3 05:35:47 2025 GMT
        Subject: CN=0008CCBE737629871DCDD58AC254BB6D73852C8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b0:a2:da:45:45:d2:42:60:c9:1b:a5:16:66:
                    4d:7e:61:28:7b:72:92:31:f8:a1:28:7b:1c:ad:8a:
                    31:26:35:fc:d7:5f:f7:f3:4a:40:21:32:7d:5d:45:
                    8a:fd:d1:43:e4:fb:10:11:b7:f7:b5:48:d8:70:45:
                    82:29:47:da:0c:71:44:1a:1d:a2:9c:66:74:b0:26:
                    17:18:1a:18:9e:62:09:a3:14:3f:80:fd:0a:81:31:
                    f2:f5:e0:24:ff:42:d4:5c:99:81:c2:de:5c:74:90:
                    75:38:d9:63:8e:f7:a9:55:b5:9a:96:a0:8a:18:35:
                    7b:97:bd:a6:ea:89:19:8a:b5:9e:95:0b:7c:db:1e:
                    07:80:1a:c7:13:c3:a0:13:ad:f5:59:2e:7d:1c:4a:
                    6b:4f:ab:b9:7d:45:cf:c5:0c:7d:c2:69:c7:26:70:
                    48:29:b8:bb:89:ee:68:55:00:76:db:f0:8f:49:06:
                    bf:51:30:5f:70:90:9a:90:c5:87:6c:fb:14:09:9b:
                    75:fb:f6:a0:8d:f1:75:1b:85:27:96:6e:fd:59:b1:
                    17:fd:cf:52:9a:90:be:0c:71:9a:09:db:72:4b:13:
                    2d:83:c3:6e:b5:6c:8b:78:e3:c8:2c:47:76:54:17:
                    a3:be:95:d7:47:6f:a1:c3:d5:69:10:d3:72:b6:bc:
                    bc:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:08:CC:BE:73:76:29:87:1D:CD:D5:8A:C2:54:BB:6D:73:85:2C:8A
            X509v3 Authority Key Identifier:
                keyid:0A:5B:FC:44:9B:C0:AE:94:F2:60:C5:0A:31:DC:BF:BC:31:83:91:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/3134332e302e3136352e302f32342d3234203d3e20323634303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:38:03:4f:7f:58:54:b9:de:26:94:44:25:d0:e6:32:8b:a0:
         4d:1c:12:1d:65:b4:7b:72:5b:f2:87:4e:c3:d8:13:01:1d:90:
         25:69:e4:24:1d:88:1b:74:da:82:f7:61:8d:88:56:0d:df:0a:
         a8:61:6a:68:48:fd:bc:fd:ae:ff:c2:22:5a:93:f4:44:43:60:
         00:30:27:fe:b6:e7:79:6d:23:84:dd:b5:13:d1:07:11:5c:d4:
         cd:c8:98:8a:a5:55:7f:1d:42:a1:3c:f9:f5:8c:10:90:02:f3:
         63:83:10:76:36:da:9c:ff:c9:5f:90:f2:f0:71:3f:d8:e3:b4:
         0f:2f:34:cf:38:3b:79:89:f1:12:6b:32:97:a7:81:ae:87:5a:
         a1:2f:b1:b9:de:f1:db:3b:36:86:60:92:61:42:fd:64:94:d1:
         d0:e7:3c:d1:69:7f:ac:7a:0d:4f:d6:f4:14:29:39:a4:af:44:
         be:b8:7a:b2:e0:0f:1e:c6:e5:25:77:4c:c5:98:90:01:67:fc:
         12:30:48:b4:90:ea:0f:6c:0f:61:6e:6d:72:04:19:6a:4d:fb:
         fa:e3:79:af:b9:c2:be:03:90:6f:0a:1f:82:81:de:67:69:fb:
         90:02:48:d9:de:f2:b1:6f:92:44:20:0d:19:8f:ce:0f:5e:09:
         97:ae:c5:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 19:18:11 2024 by rpki-client on console-fra.rpki-client.org