Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/3134332e3235352e36302e302f32322d3232203d3e203533313132.roa
File:                     3134332e3235352e36302e302f32322d3232203d3e203533313132.roa (raw, json)
Hash identifier:          sl8S323KOK8MLMZW3irXCElyaYP0JMP4KfUV703dAfc=
Subject key identifier:   B6:A8:BC:48:DF:D3:0B:2D:5F:FE:A5:58:EC:C1:05:D2:21:46:06:26
Certificate issuer:       /CN=74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651
Certificate serial:       298C16C781DEFC6ABAF0B89A89EAB05FB6E2F998
Authority key identifier: 74:AD:EB:5B:0B:06:9D:AC:2D:94:A5:DD:C5:51:0D:9D:CC:0C:B6:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/3134332e3235352e36302e302f32322d3232203d3e203533313132.roa
Signing time:             Thu 04 Apr 2024 09:41:30 +0000
ROA not before:           Thu 04 Apr 2024 09:36:30 +0000
ROA not after:            Thu 03 Apr 2025 09:41:30 +0000
asID:                     53112
IP address blocks:        143.255.60.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.crl
                          rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:8c:16:c7:81:de:fc:6a:ba:f0:b8:9a:89:ea:b0:5f:b6:e2:f9:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651
        Validity
            Not Before: Apr  4 09:36:30 2024 GMT
            Not After : Apr  3 09:41:30 2025 GMT
        Subject: CN=B6A8BC48DFD30B2D5FFEA558ECC105D221460626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e7:84:96:02:6d:49:c5:c8:63:19:9a:16:b4:
                    4e:ad:d7:86:c1:db:b8:8b:0e:14:66:24:8e:38:06:
                    7d:b6:64:82:9c:2c:bb:24:d1:26:a0:8b:df:2b:d1:
                    32:64:c4:96:f6:19:d0:8a:c7:88:ad:5a:12:e3:f6:
                    87:89:78:5d:8a:ec:ad:2d:83:5f:3c:73:c9:52:91:
                    55:36:7f:87:56:2c:f1:0a:c3:25:e7:ab:f3:76:c0:
                    8c:4b:8c:d4:ab:b6:86:27:b2:98:91:ed:6b:64:cf:
                    9b:57:de:8b:24:80:f8:4e:d1:95:3a:3c:20:25:11:
                    de:54:24:3e:20:03:cd:17:f3:67:02:8a:4f:8c:44:
                    ad:f0:09:24:05:43:85:66:c9:40:a0:62:5d:b8:c0:
                    8c:a4:49:aa:7a:6f:3d:16:77:79:14:6a:98:bb:a5:
                    ff:98:6b:23:a9:07:e9:d9:fb:0d:94:73:20:cb:0b:
                    36:4d:bf:0a:78:7f:63:1f:ef:cf:e1:a2:73:99:50:
                    0d:71:09:5d:eb:f6:25:9c:85:a4:51:f3:ab:8d:f9:
                    2a:d6:2b:11:c5:ad:f1:b1:de:e4:15:d3:6b:6f:10:
                    86:84:87:9f:60:5d:90:fc:6d:ad:f3:6d:5a:5c:b8:
                    2b:7e:c0:0d:77:32:8e:ea:52:bc:d6:83:44:5f:0c:
                    e5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A8:BC:48:DF:D3:0B:2D:5F:FE:A5:58:EC:C1:05:D2:21:46:06:26
            X509v3 Authority Key Identifier:
                keyid:74:AD:EB:5B:0B:06:9D:AC:2D:94:A5:DD:C5:51:0D:9D:CC:0C:B6:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/3134332e3235352e36302e302f32322d3232203d3e203533313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:b5:16:c8:b8:53:e8:ad:9b:c5:3e:56:b2:60:73:bb:ec:6c:
         4f:27:07:b6:bb:70:5e:80:fc:3a:11:db:69:78:bd:8e:36:2d:
         f9:97:b7:b5:4d:c5:81:aa:e6:60:c4:fd:a7:0a:f5:7f:d7:29:
         17:67:a0:7f:bb:ff:01:09:35:89:fd:ab:65:d2:68:7d:aa:4a:
         72:dc:d3:fe:89:b8:b9:cb:f5:e1:d4:0d:c1:64:47:1b:fe:8c:
         93:e7:16:c4:26:04:17:7e:73:88:9c:57:71:64:c3:49:ed:a3:
         f7:a6:40:49:4d:fc:ac:6b:8f:aa:e7:2c:ec:cf:83:7e:86:60:
         fd:2d:d1:41:a1:46:71:c3:24:93:4e:31:54:53:6e:fd:2a:88:
         fe:67:a3:2c:4d:7a:98:ba:c5:9d:72:80:40:db:02:70:da:34:
         bc:13:a5:2d:58:10:0c:56:e4:63:20:6f:65:89:08:33:28:b4:
         56:5d:09:db:6d:8c:18:f4:04:aa:94:3b:3f:63:c2:bb:c8:d0:
         b1:79:d3:8d:47:f8:3b:2b:90:ba:d5:d2:f8:4a:29:29:a3:15:
         1a:cc:51:b4:22:55:18:14:6f:f3:5e:ec:12:b5:d5:9c:cb:01:
         be:d6:56:89:51:5a:23:55:95:68:9a:c2:fc:53:4d:6e:be:1a:
         a1:f3:d3:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:39 2024 by rpki-client on console-fra.rpki-client.org