Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4P1h6uGnHnXCCM6S3DLyZPMRqbfjcpSGq6DGWAj9ZzqK/0/3139322e3134302e38382e302f32322d3232203d3e20323636323630.roa
File:                     3139322e3134302e38382e302f32322d3232203d3e20323636323630.roa (raw, json)
Hash identifier:          h3kAPvX1pzgDw9haJjsrAyq73vAaPen3ypBu3gzVW8s=
Subject key identifier:   CA:CD:57:A8:73:A6:A8:5A:42:CA:59:13:41:84:CB:59:B5:76:66:40
Certificate issuer:       /CN=BEED82E271E59A3284851FDC2DD7DDE90749BC67
Certificate serial:       635AAD14C3EBB4ECFB80677B692C4342FAEDC676
Authority key identifier: BE:ED:82:E2:71:E5:9A:32:84:85:1F:DC:2D:D7:DD:E9:07:49:BC:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BEED82E271E59A3284851FDC2DD7DDE90749BC67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4P1h6uGnHnXCCM6S3DLyZPMRqbfjcpSGq6DGWAj9ZzqK/0/3139322e3134302e38382e302f32322d3232203d3e20323636323630.roa
Signing time:             Tue 09 Jan 2024 14:19:10 +0000
ROA not before:           Tue 09 Jan 2024 14:14:10 +0000
ROA not after:            Tue 07 Jan 2025 14:19:10 +0000
asID:                     266260
IP address blocks:        192.140.88.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4P1h6uGnHnXCCM6S3DLyZPMRqbfjcpSGq6DGWAj9ZzqK/0/BEED82E271E59A3284851FDC2DD7DDE90749BC67.crl
                          rsync://rpki-repo.registro.br/repo/4P1h6uGnHnXCCM6S3DLyZPMRqbfjcpSGq6DGWAj9ZzqK/0/BEED82E271E59A3284851FDC2DD7DDE90749BC67.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BEED82E271E59A3284851FDC2DD7DDE90749BC67.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 16:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:5a:ad:14:c3:eb:b4:ec:fb:80:67:7b:69:2c:43:42:fa:ed:c6:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BEED82E271E59A3284851FDC2DD7DDE90749BC67
        Validity
            Not Before: Jan  9 14:14:10 2024 GMT
            Not After : Jan  7 14:19:10 2025 GMT
        Subject: CN=CACD57A873A6A85A42CA59134184CB59B5766640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8c:e8:be:e6:d6:c0:1d:81:f6:18:5b:e4:d2:
                    3d:bd:4f:cc:ad:d7:25:08:82:6a:a6:6e:bc:ce:af:
                    1d:07:0b:a2:1e:41:a9:2a:6e:42:21:76:62:64:b8:
                    8e:95:d2:ea:43:87:1e:f5:a3:94:5d:3f:51:ee:27:
                    93:83:f0:4e:91:fb:a1:c6:e7:97:1b:bc:b0:0e:59:
                    e7:16:8b:4f:9b:0e:96:b2:a6:90:1b:9f:8a:5d:3e:
                    d6:f3:cc:09:a8:a4:56:7e:a5:78:9d:6b:9d:50:18:
                    6b:9c:c1:bc:ce:9d:09:1d:e1:9a:9a:ee:d8:71:08:
                    6a:a4:b4:9f:74:36:e1:3a:44:a3:0e:ea:a6:f9:e1:
                    f1:ff:93:e3:dc:78:5d:08:39:e9:3e:7c:55:7c:fb:
                    53:db:78:25:87:f6:c2:22:74:79:ce:31:96:32:b9:
                    8e:c0:5b:5e:dc:85:0b:17:70:80:9a:10:17:f3:8d:
                    0c:93:e6:76:4c:dd:15:eb:7e:e3:1d:6d:50:c2:c7:
                    f4:06:9f:1e:29:ce:ea:b4:e4:c3:0f:fe:e4:0c:f6:
                    82:f6:92:5c:60:9c:5d:de:f5:e5:ea:3b:51:ce:19:
                    c4:bc:b0:c1:ab:80:49:f9:c5:14:7d:dd:20:de:aa:
                    ee:4e:93:8a:6f:4e:85:18:9a:1e:0e:63:55:40:67:
                    89:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:CD:57:A8:73:A6:A8:5A:42:CA:59:13:41:84:CB:59:B5:76:66:40
            X509v3 Authority Key Identifier:
                keyid:BE:ED:82:E2:71:E5:9A:32:84:85:1F:DC:2D:D7:DD:E9:07:49:BC:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4P1h6uGnHnXCCM6S3DLyZPMRqbfjcpSGq6DGWAj9ZzqK/0/BEED82E271E59A3284851FDC2DD7DDE90749BC67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BEED82E271E59A3284851FDC2DD7DDE90749BC67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4P1h6uGnHnXCCM6S3DLyZPMRqbfjcpSGq6DGWAj9ZzqK/0/3139322e3134302e38382e302f32322d3232203d3e20323636323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:62:d7:92:23:0c:81:d7:38:2f:8b:38:55:e6:3c:f3:c1:10:
         d6:e4:5f:dd:4d:ed:fe:4e:61:0d:a8:37:86:eb:a8:4f:35:c0:
         ce:07:cb:4c:d4:cd:8a:f4:81:fe:eb:bf:6d:d2:f4:6e:7c:4f:
         62:11:90:50:f3:5d:f2:76:b4:df:18:1e:40:0b:cc:12:3d:64:
         dd:a9:43:5a:ba:25:5f:fa:c8:bf:fa:78:8a:6b:b2:e8:58:16:
         61:f3:1a:af:d4:ee:a5:67:20:90:35:c2:ba:b6:40:b0:99:bb:
         08:ab:5f:f5:6a:51:3a:75:d8:2f:ce:6f:47:0a:2a:23:33:4a:
         11:62:0a:4a:3e:e5:e3:65:25:f9:2a:67:b9:53:c4:9d:08:c5:
         83:78:9d:0d:25:7e:42:23:14:1f:18:79:af:90:a6:f2:70:2a:
         e1:22:85:8e:3d:26:19:e4:36:ba:8a:c2:a7:56:7d:82:ec:52:
         37:f5:33:f1:93:5f:64:82:d2:34:6e:69:88:9b:85:fe:fb:8c:
         b3:10:92:01:38:56:3e:03:9e:86:67:69:8d:b1:f7:0c:bb:0b:
         32:89:cf:29:82:d0:fd:11:e2:3d:96:25:e6:f0:b5:62:61:43:
         7e:c2:e7:80:cd:57:67:08:e0:bd:b7:6c:2e:ce:1b:fc:32:20:
         d2:e0:ef:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 15:58:12 2024 by rpki-client on console.sobornost.net