Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/3134332e3133372e33362e302f32322d3232203d3e20323730393439.roa
File:                     3134332e3133372e33362e302f32322d3232203d3e20323730393439.roa (raw, json)
Hash identifier:          i/VE6CHwJdLzi+qFJ5bZWYYTpGfpyEgqS54nO3RM8IE=
Subject key identifier:   55:9F:FD:6A:45:D0:92:09:49:08:07:10:A3:49:B4:29:A9:D9:0B:50
Certificate issuer:       /CN=95B2CF7C5635CD912BBD7A8DED184CC398CBE307
Certificate serial:       456402F81A95CA1793AD3F605B41C94B1EE26BE0
Authority key identifier: 95:B2:CF:7C:56:35:CD:91:2B:BD:7A:8D:ED:18:4C:C3:98:CB:E3:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/3134332e3133372e33362e302f32322d3232203d3e20323730393439.roa
Signing time:             Thu 04 Apr 2024 02:00:45 +0000
ROA not before:           Thu 04 Apr 2024 01:55:45 +0000
ROA not after:            Thu 03 Apr 2025 02:00:45 +0000
asID:                     270949
IP address blocks:        143.137.36.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.crl
                          rsync://rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:64:02:f8:1a:95:ca:17:93:ad:3f:60:5b:41:c9:4b:1e:e2:6b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95B2CF7C5635CD912BBD7A8DED184CC398CBE307
        Validity
            Not Before: Apr  4 01:55:45 2024 GMT
            Not After : Apr  3 02:00:45 2025 GMT
        Subject: CN=559FFD6A45D0920949080710A349B429A9D90B50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a3:a9:a3:86:ae:79:d2:34:68:6e:0b:36:27:
                    a9:0b:66:a9:96:df:7c:1b:2a:10:86:40:81:6e:70:
                    b3:e8:56:23:a2:48:0f:4b:10:7e:88:96:3a:b3:19:
                    0a:61:a7:8f:fe:36:2c:e1:d3:27:58:43:cb:ee:3a:
                    2b:74:03:03:98:2e:2f:13:13:45:9c:aa:7d:00:89:
                    2d:8e:46:97:dd:42:02:4e:26:ce:d1:d1:ba:af:a0:
                    96:b2:af:9e:0e:6a:02:8e:48:e3:ea:54:48:e8:85:
                    3d:49:1e:21:e7:76:0a:01:da:c7:fa:85:b2:3b:e6:
                    05:ca:0f:f9:5d:56:85:9a:93:77:64:1c:c2:c8:04:
                    5d:00:76:f6:1c:67:2b:ea:5b:bd:a1:2b:d9:50:89:
                    e3:f5:fa:b5:ad:d7:cb:8d:17:16:cd:19:77:f5:65:
                    33:9d:06:35:e1:39:57:39:f9:f1:10:80:db:66:d9:
                    af:be:0b:31:27:44:75:07:36:6f:b3:d9:13:4d:26:
                    ff:99:ba:c6:84:d3:0c:9e:c4:85:26:ee:55:14:0a:
                    84:92:4d:ca:7a:f2:9f:dc:c2:6b:fb:64:e3:b6:a8:
                    bb:0c:2c:fd:c9:43:c2:0e:b7:b9:b6:5d:40:16:b9:
                    dc:b5:2d:55:ce:e8:fd:bc:87:cf:aa:ce:8c:89:a7:
                    1a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:9F:FD:6A:45:D0:92:09:49:08:07:10:A3:49:B4:29:A9:D9:0B:50
            X509v3 Authority Key Identifier:
                keyid:95:B2:CF:7C:56:35:CD:91:2B:BD:7A:8D:ED:18:4C:C3:98:CB:E3:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/3134332e3133372e33362e302f32322d3232203d3e20323730393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:90:0f:ba:87:b1:b3:bb:4a:3e:05:fe:2b:66:2a:f4:92:06:
         bc:6e:62:5b:29:cb:2c:de:69:13:c5:b0:59:c1:67:57:94:11:
         1b:cf:6b:11:a0:d5:e9:ed:06:ba:fe:51:e2:a3:e6:18:6d:ee:
         11:31:58:d4:0d:46:da:38:df:8e:3c:31:82:55:fb:e1:08:58:
         83:ed:4b:ea:75:10:0e:be:a9:d4:c6:8e:d5:ef:eb:48:d5:85:
         07:60:83:8f:a5:13:f3:93:f5:b3:de:da:8a:92:e6:ca:23:70:
         07:09:d4:a1:08:98:97:b3:76:3f:ae:55:7a:d9:7a:cc:ef:e4:
         ed:6a:fa:0f:8c:a2:cf:b1:ce:a3:44:3e:03:1e:ac:a4:7d:82:
         ad:a6:62:b1:31:6f:9b:a7:7a:17:16:c4:ea:0a:fe:f2:e1:de:
         53:25:8d:ef:bb:aa:67:ca:ba:90:78:a9:3d:94:fb:01:68:25:
         bf:39:6a:a5:0c:97:cd:09:b5:8b:04:ea:76:19:2e:a1:e9:1c:
         34:35:3c:ec:ca:ae:ef:04:74:a6:c8:bb:b2:be:f0:f3:1b:60:
         7a:7e:e9:cf:cb:52:a5:08:c3:95:17:95:78:9a:60:be:a7:47:
         7d:72:31:e0:32:14:ed:da:c9:d7:a1:0a:9f:5a:76:1e:ea:0b:
         b8:cf:a7:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:41 2024 by rpki-client on console-ams.rpki-client.org