Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/3134332e3133372e36302e302f32332d3233203d3e20323632353639.roa
File:                     3134332e3133372e36302e302f32332d3233203d3e20323632353639.roa (raw, json)
Hash identifier:          LfOw3fMC2YoG4yGR41mW78cFu9L9HgHV2hHtLlxmopQ=
Subject key identifier:   34:BF:F4:88:7F:15:FD:86:13:33:1D:B0:20:CB:92:92:A9:8B:F2:B4
Certificate issuer:       /CN=22191C91C699626F1DF3C3B76D44F235C4976110
Certificate serial:       12AE8B8D625301CBE0F322D223D1B0E87CF8B155
Authority key identifier: 22:19:1C:91:C6:99:62:6F:1D:F3:C3:B7:6D:44:F2:35:C4:97:61:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22191C91C699626F1DF3C3B76D44F235C4976110.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/3134332e3133372e36302e302f32332d3233203d3e20323632353639.roa
Signing time:             Thu 04 Apr 2024 07:20:43 +0000
ROA not before:           Thu 04 Apr 2024 07:15:43 +0000
ROA not after:            Thu 03 Apr 2025 07:20:43 +0000
asID:                     262569
IP address blocks:        143.137.60.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/22191C91C699626F1DF3C3B76D44F235C4976110.crl
                          rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/22191C91C699626F1DF3C3B76D44F235C4976110.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22191C91C699626F1DF3C3B76D44F235C4976110.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 13:07:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:ae:8b:8d:62:53:01:cb:e0:f3:22:d2:23:d1:b0:e8:7c:f8:b1:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22191C91C699626F1DF3C3B76D44F235C4976110
        Validity
            Not Before: Apr  4 07:15:43 2024 GMT
            Not After : Apr  3 07:20:43 2025 GMT
        Subject: CN=34BFF4887F15FD8613331DB020CB9292A98BF2B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2c:0c:8e:20:cc:dd:3c:b5:44:33:a6:ba:b8:
                    35:c8:d5:23:da:7c:10:c3:b6:f2:86:b2:1e:0b:a6:
                    dd:ca:f1:a8:80:94:cc:4a:19:6e:68:df:c6:fe:38:
                    56:84:16:ba:13:77:2a:f7:d1:cd:14:95:98:2a:1e:
                    dd:2f:32:c9:12:95:50:04:cc:69:9d:24:4d:09:9e:
                    39:7c:b4:19:a3:ce:1c:23:1d:45:88:0e:61:e4:1c:
                    bd:b6:f0:69:70:bb:8e:a3:d7:53:25:a1:d8:e4:52:
                    8c:59:af:5d:74:12:8d:a6:af:40:f7:f0:57:50:63:
                    e2:ce:67:43:eb:87:da:11:30:29:5e:43:e5:d0:e1:
                    f6:cd:14:00:2b:18:3c:15:a1:62:78:32:a1:49:6f:
                    d8:b7:e1:ca:75:32:9f:1c:e8:4b:f2:d1:d5:88:cd:
                    47:ae:cf:cc:4c:6f:d6:64:c2:01:1b:e3:89:bf:05:
                    d3:6c:32:4e:5c:30:34:bc:f8:c6:4b:6e:95:c6:e7:
                    7d:df:18:33:8e:c6:4b:19:18:b8:39:f8:f1:57:d2:
                    f0:5c:22:b3:23:65:d3:f7:65:74:5f:4f:b4:4c:64:
                    be:b4:69:87:00:dc:08:85:4c:bc:5b:b5:03:02:6f:
                    8a:73:5f:20:65:cb:f9:e1:f5:5b:b6:8d:54:e0:24:
                    18:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:BF:F4:88:7F:15:FD:86:13:33:1D:B0:20:CB:92:92:A9:8B:F2:B4
            X509v3 Authority Key Identifier:
                keyid:22:19:1C:91:C6:99:62:6F:1D:F3:C3:B7:6D:44:F2:35:C4:97:61:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/22191C91C699626F1DF3C3B76D44F235C4976110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22191C91C699626F1DF3C3B76D44F235C4976110.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/3134332e3133372e36302e302f32332d3233203d3e20323632353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:92:b0:fb:98:a6:98:58:36:de:53:64:ff:6a:dc:90:2f:75:
         86:8e:c2:96:89:b0:e5:b7:96:97:24:7a:3c:0f:1d:94:62:72:
         19:70:21:aa:64:15:f9:65:e1:60:6c:c5:6c:ab:85:39:8f:82:
         2f:20:df:89:5e:25:81:75:f9:ab:d2:e0:87:b2:6d:6c:4a:af:
         bb:9a:76:48:c2:7f:ab:b7:af:27:37:cb:1c:e2:9a:47:3a:b8:
         0e:e4:a9:d8:32:69:53:3b:3d:8c:63:f0:8c:eb:9d:2e:d8:0c:
         dd:49:a9:6e:34:39:d8:cf:5a:0d:1b:e6:43:ec:0a:e5:15:02:
         94:16:20:db:da:41:6a:f9:67:ee:76:30:69:66:b7:2b:d0:a6:
         4b:57:0f:ad:c3:09:66:ea:0a:e3:d3:88:0b:e5:e7:55:04:97:
         91:d3:0a:14:5f:8d:3a:a4:e0:21:c3:bc:e2:a0:09:c9:cc:b7:
         62:eb:9d:36:d6:36:29:56:7f:5c:29:15:e7:9c:62:ec:8c:8d:
         01:eb:06:79:cf:b6:95:20:1d:08:18:e1:1a:de:65:39:1d:37:
         6f:b3:41:85:92:b2:43:3f:7f:5b:e5:4b:96:57:2c:6c:f3:80:
         d6:de:77:89:ff:33:c8:d3:f8:0c:a0:74:ba:f2:10:30:92:c2:
         de:64:a0:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 13:25:24 2024 by rpki-client on console-ams.rpki-client.org