Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/3134332e3230322e3138382e302f32322d3332203d3e20323633303835.roa
File:                     3134332e3230322e3138382e302f32322d3332203d3e20323633303835.roa (raw, json)
Hash identifier:          rfuLdgMvv0HDJvfNzKp1BkSRrExLo8kMHJmGjgClIHQ=
Subject key identifier:   74:E4:F7:95:7E:9E:F0:26:DF:DA:75:E3:E1:79:FD:EA:13:AD:3F:B3
Certificate issuer:       /CN=1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822
Certificate serial:       61EF1CD719562C2BC0AAC45AC118F3ECF6679D7A
Authority key identifier: 1A:9F:A3:7F:39:AE:1F:F5:54:22:CD:1E:A4:DD:C2:2C:7B:D3:A8:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/3134332e3230322e3138382e302f32322d3332203d3e20323633303835.roa
Signing time:             Sun 11 Aug 2024 18:11:34 +0000
ROA not before:           Sun 11 Aug 2024 18:06:34 +0000
ROA not after:            Sun 10 Aug 2025 18:11:34 +0000
asID:                     263085
IP address blocks:        143.202.188.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.crl
                          rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:ef:1c:d7:19:56:2c:2b:c0:aa:c4:5a:c1:18:f3:ec:f6:67:9d:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822
        Validity
            Not Before: Aug 11 18:06:34 2024 GMT
            Not After : Aug 10 18:11:34 2025 GMT
        Subject: CN=74E4F7957E9EF026DFDA75E3E179FDEA13AD3FB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:cc:cc:98:1e:a1:8e:ee:2c:27:cf:72:db:ef:
                    66:b3:06:5a:a3:67:c5:be:94:cb:d7:f2:02:2f:d0:
                    9d:3e:4c:36:54:7c:59:dc:a4:92:d2:07:74:f0:53:
                    16:02:0b:98:6f:e8:de:60:f1:35:06:11:08:80:1b:
                    de:6b:e2:5c:92:67:82:7e:99:48:fa:5d:d9:cb:a0:
                    5c:cf:81:51:85:4a:06:b9:c0:60:9c:ae:f5:52:0c:
                    80:4d:3c:db:4c:11:6f:81:7d:ea:6f:a3:28:0d:93:
                    7e:54:4c:90:ae:11:75:bd:ac:60:56:2d:08:67:c0:
                    ca:54:dc:cd:9a:ce:e3:63:a8:e4:b4:6f:80:3c:4e:
                    9d:89:58:3b:d4:46:43:d2:d3:23:e1:70:07:3e:70:
                    63:3b:10:42:4f:c9:10:e0:90:91:50:a4:84:c9:1e:
                    f9:fd:b9:b9:42:81:d8:f8:17:80:ef:4d:2d:ff:a0:
                    5d:3e:4f:99:e3:89:9f:34:cd:32:02:a2:bd:81:b7:
                    5e:ec:45:eb:a9:05:66:fe:a8:cc:00:1a:dd:40:9f:
                    27:b1:b8:4b:7e:e5:73:8c:3c:61:69:ec:ff:63:a3:
                    14:a0:f0:85:aa:86:52:30:cf:0a:ad:68:33:2b:ff:
                    36:6b:37:ad:c4:4c:77:38:62:da:e4:8a:e7:56:84:
                    7c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:E4:F7:95:7E:9E:F0:26:DF:DA:75:E3:E1:79:FD:EA:13:AD:3F:B3
            X509v3 Authority Key Identifier:
                keyid:1A:9F:A3:7F:39:AE:1F:F5:54:22:CD:1E:A4:DD:C2:2C:7B:D3:A8:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/3134332e3230322e3138382e302f32322d3332203d3e20323633303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:65:13:fc:c3:46:a1:78:48:30:3f:90:e9:2c:34:2d:6d:b1:
         ea:83:cc:01:92:13:e8:6c:c2:51:ca:d5:9d:d4:b2:74:46:51:
         75:12:2e:c4:bc:e8:a8:14:03:12:0c:a5:90:8a:91:8b:80:d6:
         ab:a0:47:30:a7:47:03:3e:7e:a2:57:98:f5:1a:ca:11:76:00:
         d6:d0:d6:8b:d2:a9:8f:92:7c:43:27:dc:24:56:91:16:0c:c2:
         a5:86:fb:0e:74:20:17:15:17:0f:85:15:bc:94:d8:ce:b5:0d:
         e2:89:fe:ea:b9:8b:59:aa:32:d0:6f:65:14:b3:3b:a8:84:69:
         a9:57:0b:07:2e:9d:ff:7e:db:ba:4c:d0:c1:38:ab:fe:48:85:
         2a:97:93:d0:e2:f8:4a:dd:94:e7:0d:fd:d7:1c:68:8b:97:7c:
         90:7c:34:5a:7c:dc:a8:1f:92:a5:56:9f:c2:63:68:bc:26:74:
         43:aa:47:c8:91:7c:db:ed:d9:bf:74:08:14:fd:38:17:bf:04:
         0d:e3:a8:83:f0:4d:44:4a:05:31:a6:fb:63:e3:a6:7b:16:63:
         94:e1:99:94:5a:d3:90:ab:8c:79:69:ef:e6:58:8d:3f:24:9e:
         23:b1:1d:5f:63:74:ad:71:26:3b:83:50:fa:17:49:f3:7f:4f:
         e7:a0:42:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:10 2024 by rpki-client on console-fra.rpki-client.org