Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/1/3134332e302e3134342e302f32322d3232203d3e20323634303230.roa
File:                     3134332e302e3134342e302f32322d3232203d3e20323634303230.roa (raw, json)
Hash identifier:          KlAQLvZ9XiK6eMmHyjQgg2fhcwYeYpXkuR6DgBB490A=
Subject key identifier:   45:FF:49:62:B5:84:01:B4:BD:C6:1B:1C:A4:66:22:A9:F5:9B:13:56
Certificate issuer:       /CN=3E3293CF66479CC79346F97DCC606E532A1DA675
Certificate serial:       52E5DB7BA32B20EFBD053219E93ED0863BD482B9
Authority key identifier: 3E:32:93:CF:66:47:9C:C7:93:46:F9:7D:CC:60:6E:53:2A:1D:A6:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E3293CF66479CC79346F97DCC606E532A1DA675.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/1/3134332e302e3134342e302f32322d3232203d3e20323634303230.roa
Signing time:             Thu 04 Apr 2024 19:25:56 +0000
ROA not before:           Thu 04 Apr 2024 19:20:56 +0000
ROA not after:            Thu 03 Apr 2025 19:25:56 +0000
asID:                     264020
IP address blocks:        143.0.144.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/1/3E3293CF66479CC79346F97DCC606E532A1DA675.crl
                          rsync://rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/1/3E3293CF66479CC79346F97DCC606E532A1DA675.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E3293CF66479CC79346F97DCC606E532A1DA675.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:47:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:e5:db:7b:a3:2b:20:ef:bd:05:32:19:e9:3e:d0:86:3b:d4:82:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E3293CF66479CC79346F97DCC606E532A1DA675
        Validity
            Not Before: Apr  4 19:20:56 2024 GMT
            Not After : Apr  3 19:25:56 2025 GMT
        Subject: CN=45FF4962B58401B4BDC61B1CA46622A9F59B1356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4d:7d:c2:07:85:17:67:2b:a9:fb:da:85:6b:
                    02:52:bc:69:6e:45:ed:fa:39:be:de:3b:53:34:2b:
                    8e:5f:b3:33:33:f1:34:83:3a:ae:a7:d7:f9:4c:b2:
                    66:b1:5c:70:fc:ee:8e:db:9f:a4:a4:0f:b3:c9:f1:
                    2b:53:f7:b1:ee:60:28:55:b7:c7:d9:55:c8:94:81:
                    5d:22:b7:68:c6:f0:17:e3:63:ed:36:2a:31:98:64:
                    c8:3e:e5:af:3f:a6:1f:83:a8:3e:db:5b:d1:e4:c5:
                    e1:5f:4f:16:72:4c:a9:58:dc:4a:db:a2:39:40:e5:
                    a9:89:ca:3e:13:28:5e:47:1e:0a:bd:49:ca:ba:56:
                    9d:e4:83:46:46:94:da:41:8d:cb:57:cf:db:38:d4:
                    08:5f:7a:2f:ea:03:b3:41:b1:06:72:2b:ff:d6:f7:
                    e1:df:9b:b7:fd:a3:46:c1:70:7d:eb:0f:14:97:9f:
                    f2:af:5c:4f:aa:4f:44:07:d8:49:95:b0:d5:77:d7:
                    73:db:5a:d0:48:cf:9d:d0:b5:26:07:50:6c:c1:54:
                    3e:ba:80:6d:88:47:60:c2:1f:97:da:6d:1f:35:86:
                    71:ab:67:08:ca:6b:90:52:5f:83:08:b3:c7:7e:2b:
                    38:82:5d:1e:3a:f7:0a:a1:15:1b:5f:77:3e:e6:8e:
                    99:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:FF:49:62:B5:84:01:B4:BD:C6:1B:1C:A4:66:22:A9:F5:9B:13:56
            X509v3 Authority Key Identifier:
                keyid:3E:32:93:CF:66:47:9C:C7:93:46:F9:7D:CC:60:6E:53:2A:1D:A6:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/1/3E3293CF66479CC79346F97DCC606E532A1DA675.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E3293CF66479CC79346F97DCC606E532A1DA675.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/1/3134332e302e3134342e302f32322d3232203d3e20323634303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:ec:24:57:46:77:64:a4:fe:10:6f:85:6c:dd:f3:dd:e5:56:
         6a:0e:08:bf:f2:f8:cf:66:d9:e4:5d:7b:8d:b6:53:69:c9:66:
         7e:aa:f5:c1:d0:b5:4a:f4:3e:d4:f8:13:48:02:29:f8:5d:14:
         53:f7:69:9d:95:c8:cb:95:60:15:6d:5d:93:b6:b4:9e:e5:d9:
         75:a7:86:c3:51:0e:96:2a:d8:44:9c:b0:ee:60:71:99:88:3f:
         cc:9e:d6:92:07:e1:32:94:b8:6f:0b:a9:b1:a5:98:7c:77:24:
         17:f0:04:f1:ba:60:ec:43:02:4e:e4:fe:4f:73:fb:c0:5f:56:
         64:dc:85:42:34:91:6a:a9:d1:b6:d6:7e:62:08:32:28:02:59:
         c4:0d:40:0b:d4:17:21:5b:6a:b3:56:df:86:32:ac:14:16:d6:
         04:13:a9:22:43:c8:be:9a:45:94:9d:a6:c9:c7:30:29:23:ff:
         6e:6d:1e:b2:8e:81:7c:d2:1f:63:a5:eb:54:29:c4:9c:d0:f3:
         73:bc:e6:5a:81:ab:f8:97:1d:da:48:f0:37:4f:8e:63:b1:73:
         39:86:08:5c:4b:a8:37:3b:74:51:25:8c:f9:31:6f:bc:21:92:
         72:96:a5:4d:05:30:76:2a:f4:0a:dc:1d:36:5b:57:90:76:16:
         8d:29:91:0a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUUuXbe6MrIO+9BTIZ6T7QhjvUgrkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0UzMjkzQ0Y2NjQ3OUNDNzkzNDZGOTdEQ0M2MDZFNTMy
QTFEQTY3NTAeFw0yNDA0MDQxOTIwNTZaFw0yNTA0MDMxOTI1NTZaMDMxMTAvBgNV
BAMTKDQ1RkY0OTYyQjU4NDAxQjRCREM2MUIxQ0E0NjYyMkE5RjU5QjEzNTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQTX3CB4UXZyup+9qFawJSvGlu
Re36Ob7eO1M0K45fszMz8TSDOq6n1/lMsmaxXHD87o7bn6SkD7PJ8StT97HuYChV
t8fZVciUgV0it2jG8BfjY+02KjGYZMg+5a8/ph+DqD7bW9HkxeFfTxZyTKlY3Erb
ojlA5amJyj4TKF5HHgq9Scq6Vp3kg0ZGlNpBjctXz9s41Ahfei/qA7NBsQZyK//W
9+Hfm7f9o0bBcH3rDxSXn/KvXE+qT0QH2EmVsNV313PbWtBIz53QtSYHUGzBVD66
gG2IR2DCH5fabR81hnGrZwjKa5BSX4MIs8d+KziCXR469wqhFRtfdz7mjplfAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQURf9JYrWEAbS9xhscpGYiqfWbE1YwHwYDVR0j
BBgwFoAUPjKTz2ZHnMeTRvl9zGBuUyodpnUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFVIek0zeERMUThrODJtN1puUTlycXFUR1NENFNqdjFjYTRkQzFyaVZl
elYvMS8zRTMyOTNDRjY2NDc5Q0M3OTM0NkY5N0RDQzYwNkU1MzJBMURBNjc1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNFMzI5M0NGNjY0NzlDQzc5
MzQ2Rjk3RENDNjA2RTUzMkExREE2NzUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hVSHpNM3hETFE4azgybTdablE5cnFxVEdTRDRTanYxY2E0ZEMxcmlWZXpWLzEv
MzEzNDMzMmUzMDJlMzEzNDM0MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM0
MzAzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCjwCQMA0GCSqGSIb3DQEBCwUAA4IBAQCH7CRXRndk
pP4Qb4Vs3fPd5VZqDgi/8vjPZtnkXXuNtlNpyWZ+qvXB0LVK9D7U+BNIAin4XRRT
92mdlcjLlWAVbV2TtrSe5dl1p4bDUQ6WKthEnLDuYHGZiD/MntaSB+EylLhvC6mx
pZh8dyQX8ATxumDsQwJO5P5Pc/vAX1Zk3IVCNJFqqdG21n5iCDIoAlnEDUAL1Bch
W2qzVt+GMqwUFtYEE6kiQ8i+mkWUnabJxzApI/9ubR6yjoF80h9jpetUKcSc0PNz
vOZagav4lx3aSPA3T45jsXM5hghcS6g3O3RRJYz5MW+8IZJylqVNBTB2KvQK3B02
W1eQdhaNKZEK
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:03 2024 by rpki-client on console-fra.rpki-client.org