Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HyyjtrCkQaPmypFyjdxHAwCBs1ZFUM97YeNCc5pe54Un/0/3134332e3235352e3230382e302f32322d3332203d3e203532373431.roa
File:                     3134332e3235352e3230382e302f32322d3332203d3e203532373431.roa (raw, json)
Hash identifier:          JpCqOrzH6hZNHSyAUQijIovZBA7BnOB7Efxw7I/evVA=
Subject key identifier:   E0:59:7F:1F:F3:0C:2E:76:41:90:85:3F:80:75:BF:24:44:39:AC:6E
Certificate issuer:       /CN=7FD5C7957E68877AE72AEF66ED2FEA315201BF3E
Certificate serial:       5787B530F26CFF86BF07EBB109AC2862C80860AD
Authority key identifier: 7F:D5:C7:95:7E:68:87:7A:E7:2A:EF:66:ED:2F:EA:31:52:01:BF:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FD5C7957E68877AE72AEF66ED2FEA315201BF3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HyyjtrCkQaPmypFyjdxHAwCBs1ZFUM97YeNCc5pe54Un/0/3134332e3235352e3230382e302f32322d3332203d3e203532373431.roa
Signing time:             Fri 27 Sep 2024 12:45:14 +0000
ROA not before:           Fri 27 Sep 2024 12:40:14 +0000
ROA not after:            Fri 26 Sep 2025 12:45:14 +0000
asID:                     52741
IP address blocks:        143.255.208.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HyyjtrCkQaPmypFyjdxHAwCBs1ZFUM97YeNCc5pe54Un/0/7FD5C7957E68877AE72AEF66ED2FEA315201BF3E.crl
                          rsync://rpki-repo.registro.br/repo/HyyjtrCkQaPmypFyjdxHAwCBs1ZFUM97YeNCc5pe54Un/0/7FD5C7957E68877AE72AEF66ED2FEA315201BF3E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FD5C7957E68877AE72AEF66ED2FEA315201BF3E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:87:b5:30:f2:6c:ff:86:bf:07:eb:b1:09:ac:28:62:c8:08:60:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FD5C7957E68877AE72AEF66ED2FEA315201BF3E
        Validity
            Not Before: Sep 27 12:40:14 2024 GMT
            Not After : Sep 26 12:45:14 2025 GMT
        Subject: CN=E0597F1FF30C2E764190853F8075BF244439AC6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2a:71:9f:14:8b:66:19:16:b1:99:0a:b9:4e:
                    7d:b0:cd:5b:af:37:8c:d7:5e:d5:ae:0e:a4:b4:ba:
                    f1:34:35:af:23:ae:fa:a5:71:b9:63:8a:e4:ab:7e:
                    5e:6b:aa:bd:1e:ab:dc:e6:c6:d6:23:1a:80:f6:8a:
                    13:8b:c1:1a:09:cc:29:60:73:a7:22:58:7f:6c:e2:
                    f1:15:ee:13:57:54:a1:8b:03:7e:ba:89:80:d9:1f:
                    8e:a2:62:da:29:a6:f7:30:b8:e8:ef:23:58:84:37:
                    db:9e:ea:d1:81:e6:09:02:00:ed:70:71:d1:e2:57:
                    7b:6d:be:f3:e3:11:02:cc:55:d5:e6:6f:6f:fe:b1:
                    37:d5:ed:2b:f6:40:dc:4d:b7:62:9c:2c:8d:00:09:
                    9b:cc:1d:40:c3:c9:d6:ba:de:99:fa:5a:e3:a7:3d:
                    96:68:5a:c9:74:ee:4b:cb:0b:4f:0f:f3:7e:df:ba:
                    e0:66:06:32:72:93:34:8b:f4:07:01:f6:a3:41:3e:
                    c8:b0:01:a4:44:0e:2d:fe:36:44:8f:93:36:00:e6:
                    2c:f6:7e:62:5a:aa:8a:e7:c6:33:ec:1b:a1:04:06:
                    f7:00:0c:bf:58:3d:89:92:97:ce:d9:0c:87:5c:4f:
                    34:aa:12:6c:7f:97:58:41:5f:98:7a:fc:42:09:44:
                    37:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:59:7F:1F:F3:0C:2E:76:41:90:85:3F:80:75:BF:24:44:39:AC:6E
            X509v3 Authority Key Identifier:
                keyid:7F:D5:C7:95:7E:68:87:7A:E7:2A:EF:66:ED:2F:EA:31:52:01:BF:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HyyjtrCkQaPmypFyjdxHAwCBs1ZFUM97YeNCc5pe54Un/0/7FD5C7957E68877AE72AEF66ED2FEA315201BF3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FD5C7957E68877AE72AEF66ED2FEA315201BF3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HyyjtrCkQaPmypFyjdxHAwCBs1ZFUM97YeNCc5pe54Un/0/3134332e3235352e3230382e302f32322d3332203d3e203532373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:de:77:79:2d:7a:76:ab:d3:8d:76:b9:74:2c:aa:81:c4:40:
         a6:b4:0b:27:f2:a2:d7:d9:76:f1:59:e2:3d:39:fa:68:e2:72:
         ef:5a:ec:72:66:a5:a1:1c:c7:15:00:3b:29:cc:44:5f:31:79:
         06:8c:2a:85:87:a3:be:60:97:48:55:6e:cd:2d:d0:fb:48:e4:
         c7:c0:b9:20:2c:c2:03:28:2e:7d:c7:6e:96:60:7d:a1:c4:53:
         14:84:99:37:e6:80:b7:2b:81:0f:63:1b:c8:4c:0f:bf:c2:36:
         b9:14:96:61:96:04:1b:6c:5d:bd:6f:75:85:c5:e0:63:aa:ff:
         cd:18:16:49:07:95:47:a1:e6:b0:48:06:6d:f9:cf:bb:d0:2a:
         c8:03:0f:ab:a9:e6:da:57:23:77:01:75:90:0c:88:4c:d9:9b:
         57:8d:40:ea:87:3f:92:02:98:56:5c:56:9a:6e:9f:de:a0:de:
         ec:ae:42:59:67:c7:68:7d:08:c7:f8:19:89:44:79:3b:fb:2f:
         eb:5f:95:15:26:4c:93:0e:0d:58:80:99:a3:43:9f:1b:ce:b2:
         cc:dc:72:77:4e:07:66:2f:0c:2c:94:53:d1:e3:ad:ba:bf:c5:
         9d:7f:37:71:7d:88:65:47:87:81:36:3b:f2:94:62:84:f1:49:
         9a:21:83:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:23 2024 by rpki-client on console-ams.rpki-client.org