Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HhpbtAJ7rnPWLCrz2MMKGHU7XGZoUqWJ9pu1JGCfDvBf/0/3134332e302e32382e302f32322d3234203d3e20323633393931.roa
File:                     3134332e302e32382e302f32322d3234203d3e20323633393931.roa (raw, json)
Hash identifier:          pFmi+ukHXmh5jIWRj+Ni2WBML6kMzGBp6/zW2vbpCao=
Subject key identifier:   88:23:94:06:CA:B7:AA:C4:B0:1C:BE:2E:5F:B3:28:BA:18:26:BD:6F
Certificate issuer:       /CN=971334C1223E510A2C0DAA6AC00F2D40330D6C48
Certificate serial:       2B75817F5BD4D624B9C8791985CD68D659D9ECEC
Authority key identifier: 97:13:34:C1:22:3E:51:0A:2C:0D:AA:6A:C0:0F:2D:40:33:0D:6C:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/971334C1223E510A2C0DAA6AC00F2D40330D6C48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhpbtAJ7rnPWLCrz2MMKGHU7XGZoUqWJ9pu1JGCfDvBf/0/3134332e302e32382e302f32322d3234203d3e20323633393931.roa
Signing time:             Tue 04 Jun 2024 17:35:49 +0000
ROA not before:           Tue 04 Jun 2024 17:30:49 +0000
ROA not after:            Tue 03 Jun 2025 17:35:49 +0000
asID:                     263991
IP address blocks:        143.0.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HhpbtAJ7rnPWLCrz2MMKGHU7XGZoUqWJ9pu1JGCfDvBf/0/971334C1223E510A2C0DAA6AC00F2D40330D6C48.crl
                          rsync://rpki-repo.registro.br/repo/HhpbtAJ7rnPWLCrz2MMKGHU7XGZoUqWJ9pu1JGCfDvBf/0/971334C1223E510A2C0DAA6AC00F2D40330D6C48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/971334C1223E510A2C0DAA6AC00F2D40330D6C48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 05:02:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:75:81:7f:5b:d4:d6:24:b9:c8:79:19:85:cd:68:d6:59:d9:ec:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=971334C1223E510A2C0DAA6AC00F2D40330D6C48
        Validity
            Not Before: Jun  4 17:30:49 2024 GMT
            Not After : Jun  3 17:35:49 2025 GMT
        Subject: CN=88239406CAB7AAC4B01CBE2E5FB328BA1826BD6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:00:02:ac:fa:15:58:4b:40:d7:b7:10:af:64:
                    ec:1b:99:5e:cc:73:07:6f:6e:f8:72:19:b0:c2:ed:
                    6a:7a:1a:a5:a4:31:4e:76:f2:be:1c:89:39:cc:9f:
                    e3:84:a7:3b:f4:1c:ce:83:f9:a3:28:4b:42:ad:2a:
                    bc:c2:e5:19:df:7c:1f:5c:21:35:b1:56:bf:c0:49:
                    85:a1:60:24:d4:80:e7:af:d6:54:b4:72:36:ac:32:
                    8f:c3:4b:19:d6:f8:3e:e9:13:0f:6b:4a:5a:56:24:
                    33:de:37:f7:0f:b7:65:33:7b:48:7c:85:93:40:46:
                    da:85:1c:75:14:b5:06:4b:0e:2d:d0:45:87:d1:2d:
                    de:fa:02:5e:ec:84:d4:d5:8d:02:0b:1e:f0:bd:ab:
                    73:30:f5:6a:2d:6b:68:29:3f:e1:fc:d7:6e:41:35:
                    04:6f:ca:9c:b3:89:3a:58:5e:98:77:ee:4e:4d:6f:
                    1e:4e:34:28:b9:59:2c:45:d5:b2:8a:42:0d:c5:77:
                    ac:b3:47:96:85:0c:6c:0b:12:25:36:31:29:74:e7:
                    78:18:9e:b1:2b:49:0a:49:d2:35:5a:87:4f:b3:d6:
                    f0:b6:04:75:3d:fe:c9:fb:f4:27:98:f6:38:16:65:
                    28:c3:e2:49:de:99:91:64:76:63:1d:83:b5:30:be:
                    a6:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:23:94:06:CA:B7:AA:C4:B0:1C:BE:2E:5F:B3:28:BA:18:26:BD:6F
            X509v3 Authority Key Identifier:
                keyid:97:13:34:C1:22:3E:51:0A:2C:0D:AA:6A:C0:0F:2D:40:33:0D:6C:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhpbtAJ7rnPWLCrz2MMKGHU7XGZoUqWJ9pu1JGCfDvBf/0/971334C1223E510A2C0DAA6AC00F2D40330D6C48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/971334C1223E510A2C0DAA6AC00F2D40330D6C48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhpbtAJ7rnPWLCrz2MMKGHU7XGZoUqWJ9pu1JGCfDvBf/0/3134332e302e32382e302f32322d3234203d3e20323633393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:7b:50:53:b6:2c:2e:44:3e:be:9d:80:e9:25:52:80:36:ba:
         db:a9:91:49:25:29:cb:15:68:2c:5e:34:d1:11:d4:ce:a9:4d:
         21:d2:29:60:eb:8e:f0:4e:72:c1:41:64:a7:0e:3c:92:e7:2f:
         a8:4d:9e:db:09:fc:12:62:b6:6c:54:d7:05:2d:f2:2b:ff:30:
         e3:1f:f4:25:15:24:96:7c:f2:28:bc:4c:28:9e:78:20:54:3e:
         22:ff:37:b1:57:df:ab:8e:5c:28:46:93:6c:8f:64:b8:7a:0b:
         73:21:64:40:34:88:0e:1f:89:98:53:25:17:26:a2:df:87:47:
         ab:bc:c1:92:8a:0e:2c:48:36:ca:dd:24:e7:cb:66:20:da:41:
         c5:71:5d:13:90:19:87:b3:1b:30:06:7b:2e:71:9a:3f:c1:81:
         48:2d:57:3c:87:25:c7:ab:59:b8:d5:95:46:40:3d:2a:76:3c:
         cc:9f:c6:88:75:60:9e:27:47:9b:ad:60:de:cd:04:1d:9b:39:
         ee:f2:af:47:7f:0b:b4:31:28:c6:f1:6d:6c:46:8e:a4:bd:b7:
         37:7a:93:4a:39:10:06:05:73:9e:09:95:cc:b3:df:e9:32:2d:
         4e:0e:a4:4a:ef:34:2d:9b:3e:eb:2e:8e:3a:90:81:d5:55:94:
         b7:42:d8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:44 2025 by rpki-client