Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/3134332e302e3136362e302f32342d3234203d3e20323634303134.roa
File:                     3134332e302e3136362e302f32342d3234203d3e20323634303134.roa (raw, json)
Hash identifier:          f7tz6cUy+m7B2JSBkZIna3pt2PrxO+y71R5epxegqa8=
Subject key identifier:   38:23:8C:F7:2D:AA:CB:E2:5C:78:1B:C6:68:47:64:7D:1C:D4:8D:8B
Certificate issuer:       /CN=0A5BFC449BC0AE94F260C50A31DCBFBC318391E8
Certificate serial:       08C3ACE15029D928CC39E6DC28E44EB56EC410A7
Authority key identifier: 0A:5B:FC:44:9B:C0:AE:94:F2:60:C5:0A:31:DC:BF:BC:31:83:91:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/3134332e302e3136362e302f32342d3234203d3e20323634303134.roa
Signing time:             Thu 04 Apr 2024 05:35:47 +0000
ROA not before:           Thu 04 Apr 2024 05:30:47 +0000
ROA not after:            Thu 03 Apr 2025 05:35:47 +0000
asID:                     264014
IP address blocks:        143.0.166.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.crl
                          rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 20:53:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:c3:ac:e1:50:29:d9:28:cc:39:e6:dc:28:e4:4e:b5:6e:c4:10:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5BFC449BC0AE94F260C50A31DCBFBC318391E8
        Validity
            Not Before: Apr  4 05:30:47 2024 GMT
            Not After : Apr  3 05:35:47 2025 GMT
        Subject: CN=38238CF72DAACBE25C781BC66847647D1CD48D8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c1:7b:41:f3:97:84:fb:11:69:2f:58:8e:99:
                    95:36:c5:de:f0:29:3d:8d:bf:e2:4e:17:8c:f5:f3:
                    b2:f0:9c:41:d1:b6:2f:78:0f:07:f3:d0:0b:75:43:
                    9a:ee:b0:de:7a:8b:a2:52:0a:be:9a:79:89:f3:bb:
                    36:b9:9a:6b:d8:85:59:9b:26:df:8d:4f:6f:9e:e4:
                    d7:4c:64:a8:3c:1f:2a:56:5e:20:85:39:75:fc:ef:
                    58:01:ee:13:e1:ec:c0:7b:42:f4:50:0c:3f:45:e2:
                    97:93:76:1a:af:c2:c4:08:17:64:19:89:e5:88:3e:
                    0a:68:dd:81:23:83:dc:d4:c1:49:cb:be:44:6c:1b:
                    25:ce:5d:f0:a7:e2:2c:73:dc:27:ae:3d:be:4b:ed:
                    0e:be:e3:b5:ad:56:95:11:47:32:6a:51:3d:c8:71:
                    0f:65:49:26:93:46:12:b6:96:b9:f5:10:07:ed:c2:
                    36:33:a6:8a:57:f1:54:03:6c:44:a1:38:ba:e2:1b:
                    1b:ab:67:ec:aa:65:32:9c:5b:f5:49:25:14:69:88:
                    dc:bc:72:50:53:70:0b:03:29:79:7c:2e:34:c5:eb:
                    2a:da:1b:3b:df:e7:9d:eb:56:1a:8a:d6:9d:5a:8d:
                    e3:2a:68:43:52:7a:de:80:59:80:51:48:87:54:9d:
                    d7:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:23:8C:F7:2D:AA:CB:E2:5C:78:1B:C6:68:47:64:7D:1C:D4:8D:8B
            X509v3 Authority Key Identifier:
                keyid:0A:5B:FC:44:9B:C0:AE:94:F2:60:C5:0A:31:DC:BF:BC:31:83:91:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/3134332e302e3136362e302f32342d3234203d3e20323634303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:38:8f:9b:de:bb:7c:69:bf:63:1d:1e:90:4e:65:0b:cb:ca:
         78:85:45:58:83:f9:ad:1f:4a:91:5b:4c:f2:8f:23:65:eb:e3:
         88:c8:1c:ec:69:76:a1:56:9e:64:6d:a8:fb:40:b5:de:da:e8:
         f7:c0:f6:9c:1d:7f:70:a0:9f:0c:5a:d2:37:c2:5d:f7:7e:8e:
         71:7a:93:85:bd:ec:37:79:9c:e7:6b:f8:72:6f:ef:30:b5:95:
         5d:f5:09:ab:27:fa:b6:a5:7b:c1:3c:86:20:49:b9:6f:77:42:
         68:f7:29:92:d5:e0:d9:14:6d:a3:07:f6:57:8c:81:d2:d9:0f:
         f6:4c:ae:15:79:21:d9:ee:9f:8e:c5:e3:f0:b4:e3:af:9a:15:
         49:25:cb:ee:30:07:cf:77:65:ec:fd:35:47:54:1f:b7:df:c5:
         aa:d7:30:ab:6f:86:df:da:61:c5:71:19:1b:67:ed:12:3f:0a:
         34:4b:d2:22:58:fd:e0:83:7b:e2:b7:38:3c:16:3f:05:3b:69:
         12:e2:8b:9b:5e:6c:f1:9f:e4:43:b6:91:2c:6d:75:a1:db:c0:
         de:97:7c:e8:8c:93:b0:1a:6a:01:7c:c2:44:f3:eb:e1:1d:dc:
         29:ec:75:7d:64:72:39:8a:c2:e1:8c:c2:e5:da:fb:1a:91:f1:
         4e:1f:89:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 19:18:11 2024 by rpki-client on console-fra.rpki-client.org