Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/3134332e3230382e34302e302f32322d3234203d3e203238313330.roa
File:                     3134332e3230382e34302e302f32322d3234203d3e203238313330.roa (raw, json)
Hash identifier:          sLpeB/pAazb6FbtbzxeaVI/gva81Qs31JyawY3u0UVU=
Subject key identifier:   15:6F:19:D2:B5:04:ED:E2:46:62:C1:56:7C:A6:7B:BE:EC:B1:E5:29
Certificate issuer:       /CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
Certificate serial:       5625FC1AF33B5EA5F5C621F5F56CAC7781830084
Authority key identifier: 4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/3134332e3230382e34302e302f32322d3234203d3e203238313330.roa
Signing time:             Thu 04 Apr 2024 07:32:49 +0000
ROA not before:           Thu 04 Apr 2024 07:27:49 +0000
ROA not after:            Thu 03 Apr 2025 07:32:49 +0000
asID:                     28130
IP address blocks:        143.208.40.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl
                          rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:02:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:25:fc:1a:f3:3b:5e:a5:f5:c6:21:f5:f5:6c:ac:77:81:83:00:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
        Validity
            Not Before: Apr  4 07:27:49 2024 GMT
            Not After : Apr  3 07:32:49 2025 GMT
        Subject: CN=156F19D2B504EDE24662C1567CA67BBEECB1E529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:83:22:7b:21:11:0a:a0:dd:09:10:05:09:33:
                    0d:0c:2f:03:b4:a0:eb:46:5d:de:df:8c:3a:a1:f1:
                    ff:85:1b:56:a5:f2:5e:73:cd:9c:52:7b:2d:d0:9d:
                    a5:3f:b9:d7:b1:79:37:f9:cc:62:d9:54:04:fc:bd:
                    82:af:b9:a9:38:1e:6d:18:50:9e:01:d9:f2:2e:83:
                    c3:be:02:a6:b7:e0:a5:2b:80:08:f3:5a:5f:48:83:
                    8f:f9:a1:af:41:44:7f:2a:e2:00:45:f4:53:e1:1b:
                    41:9e:96:94:6e:3b:8a:9b:7e:39:c5:a9:fb:39:14:
                    30:4f:ba:60:f2:ce:aa:0d:e3:ea:9b:73:18:1b:eb:
                    b3:38:65:9a:a1:b2:de:6d:51:a8:6a:f9:38:2a:c2:
                    de:ae:45:10:a4:d5:ee:7d:51:bb:ad:37:aa:c8:22:
                    60:b1:b1:3f:b1:36:1d:78:77:e6:a2:91:f7:9f:70:
                    53:18:71:76:47:07:7f:31:f8:d2:6b:99:e9:c6:60:
                    a6:63:39:3b:8a:bd:d3:a0:45:9b:72:30:9d:08:74:
                    d1:50:19:d6:ad:f6:81:a8:bf:cd:3a:38:9c:b4:f0:
                    e8:c4:0a:b0:e7:80:ee:f3:04:61:f6:da:93:67:97:
                    44:f5:57:5b:bd:61:74:26:c9:6c:4b:f0:4b:e9:6a:
                    f7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:6F:19:D2:B5:04:ED:E2:46:62:C1:56:7C:A6:7B:BE:EC:B1:E5:29
            X509v3 Authority Key Identifier:
                keyid:4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/3134332e3230382e34302e302f32322d3234203d3e203238313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:9e:2d:09:c4:6f:99:ec:ee:a9:1a:7f:97:8a:b1:ce:79:9b:
         3a:f2:4b:e7:99:ff:e8:f8:83:f6:fa:f1:9f:3c:c4:7e:f1:f0:
         2a:5f:48:e7:d2:63:0e:fe:1d:92:64:fb:63:1e:99:75:bf:80:
         b7:e3:fa:be:08:2b:74:a0:b1:46:84:2e:73:84:0c:7e:dc:85:
         ec:c2:cf:3b:f5:d6:05:ff:d6:c6:a4:7a:e9:48:16:2d:bc:05:
         b3:7b:4e:7e:31:49:76:0d:87:f8:ba:21:37:d8:f9:b3:b5:ac:
         79:53:b8:6a:4a:53:eb:94:df:c5:c4:d9:c1:63:89:ee:a6:ac:
         3c:d8:03:db:e6:e5:0d:5d:f1:43:a0:f3:fd:51:a2:15:f3:99:
         aa:92:a4:17:e5:5b:1f:bb:c0:d9:49:63:c9:ff:36:d5:c7:1d:
         8f:ed:16:39:8a:75:56:0d:34:47:53:3a:14:c2:51:4e:7e:e6:
         82:96:44:c8:60:45:06:5c:7e:cd:11:6c:c1:a4:b1:01:60:1f:
         ef:ab:50:5b:ef:b6:51:86:e8:1a:76:7c:d8:6d:7d:f9:23:1e:
         4e:30:94:c8:c7:b5:3c:6f:09:aa:d2:aa:d1:7b:9b:e9:77:24:
         91:4e:4b:44:a6:df:13:0f:50:bc:be:da:36:c8:b1:fd:5a:0e:
         f6:3e:c3:cb
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUViX8GvM7XqX1xiH19Wysd4GDAIQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEIxM0RCNjRCQ0MyNUM5RkE5OUZBMkI5REZBQzQ5NjFE
M0RDMDlFMDAeFw0yNDA0MDQwNzI3NDlaFw0yNTA0MDMwNzMyNDlaMDMxMTAvBgNV
BAMTKDE1NkYxOUQyQjUwNEVERTI0NjYyQzE1NjdDQTY3QkJFRUNCMUU1MjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4gyJ7IREKoN0JEAUJMw0MLwO0
oOtGXd7fjDqh8f+FG1al8l5zzZxSey3QnaU/udexeTf5zGLZVAT8vYKvuak4Hm0Y
UJ4B2fIug8O+Aqa34KUrgAjzWl9Ig4/5oa9BRH8q4gBF9FPhG0GelpRuO4qbfjnF
qfs5FDBPumDyzqoN4+qbcxgb67M4ZZqhst5tUahq+Tgqwt6uRRCk1e59UbutN6rI
ImCxsT+xNh14d+aikfefcFMYcXZHB38x+NJrmenGYKZjOTuKvdOgRZtyMJ0IdNFQ
Gdat9oGov806OJy08OjECrDngO7zBGH22pNnl0T1V1u9YXQmyWxL8EvpavdVAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUFW8Z0rUE7eJGYsFWfKZ7vuyx5SkwHwYDVR0j
BBgwFoAUSxPbZLzCXJ+pn6K536xJYdPcCeAwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9oWHAzMTRBVm9uNVZVQjg1M29NVkQ2OWFaa3JLc3VHZkpEem95R3hnQXMy
LzEvNEIxM0RCNjRCQ0MyNUM5RkE5OUZBMkI5REZBQzQ5NjFEM0RDMDlFMC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS80QjEzREI2NEJDQzI1QzlGQTk5
RkEyQjlERkFDNDk2MUQzREMwOUUwLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9o
WHAzMTRBVm9uNVZVQjg1M29NVkQ2OWFaa3JLc3VHZkpEem95R3hnQXMyLzEvMzEz
NDMzMmUzMjMwMzgyZTM0MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM4MzEz
MzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQCj9AoMA0GCSqGSIb3DQEBCwUAA4IBAQCMni0JxG+Z7O6p
Gn+XirHOeZs68kvnmf/o+IP2+vGfPMR+8fAqX0jn0mMO/h2SZPtjHpl1v4C34/q+
CCt0oLFGhC5zhAx+3IXsws879dYF/9bGpHrpSBYtvAWze05+MUl2DYf4uiE32Pmz
tax5U7hqSlPrlN/FxNnBY4nupqw82APb5uUNXfFDoPP9UaIV85mqkqQX5Vsfu8DZ
SWPJ/zbVxx2P7RY5inVWDTRHUzoUwlFOfuaClkTIYEUGXH7NEWzBpLEBYB/vq1Bb
77ZRhugadnzYbX35Ix5OMJTIx7U8bwmq0qrRe5vpdySRTktEpt8TD1C8vto2yLH9
Wg72PsPL
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:12 2024 by rpki-client on console-ams.rpki-client.org