Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e3132382e3232342e302f32302d3332203d3e2031393136.roa
File:                     3230302e3132382e3232342e302f32302d3332203d3e2031393136.roa (raw, json)
Hash identifier:          2f1ZTPyUuRcQejL9QwCHe6fRPCSbfbKZvYGgA5mPTqA=
Subject key identifier:   95:D4:40:A6:92:E7:44:B2:8D:89:74:37:33:2D:33:3D:E4:EF:E2:F6
Certificate issuer:       /CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
Certificate serial:       4227338C9A5BC18A5C14F992143A92CD77568AD7
Authority key identifier: 77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e3132382e3232342e302f32302d3332203d3e2031393136.roa
Signing time:             Wed 26 Jun 2024 20:46:33 +0000
ROA not before:           Wed 26 Jun 2024 20:41:33 +0000
ROA not after:            Wed 25 Jun 2025 20:46:33 +0000
asID:                     1916
IP address blocks:        200.128.224.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/7701CBA3BC1B47C951960EA7204772C4899F11B2.crl
                          rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/7701CBA3BC1B47C951960EA7204772C4899F11B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Jun 2024 22:07:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:27:33:8c:9a:5b:c1:8a:5c:14:f9:92:14:3a:92:cd:77:56:8a:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
        Validity
            Not Before: Jun 26 20:41:33 2024 GMT
            Not After : Jun 25 20:46:33 2025 GMT
        Subject: CN=95D440A692E744B28D897437332D333DE4EFE2F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:29:88:17:e2:74:20:9f:5e:52:aa:a6:55:a1:
                    a1:b2:08:80:20:75:8b:39:eb:ac:f5:28:37:f7:c1:
                    89:ab:52:e4:57:55:1f:d1:22:d0:74:53:27:60:bd:
                    03:ad:e7:a6:c7:3b:3b:e0:b6:c0:93:af:10:ee:17:
                    99:74:fc:03:78:e5:b7:10:a0:25:bb:f4:75:d3:5f:
                    a4:ec:e0:f1:82:43:e0:5d:38:17:36:68:ca:29:33:
                    60:61:4d:58:2b:1e:a4:9d:4c:2a:cb:36:04:88:ea:
                    76:76:7d:b0:20:4f:21:a4:3f:73:fe:07:75:23:15:
                    d0:f6:83:52:46:3a:f0:67:3a:34:8b:25:c3:00:87:
                    be:b4:98:f1:e5:ed:9c:22:6d:2b:20:47:50:3f:08:
                    27:80:15:f5:09:26:90:bf:aa:7b:10:2a:45:5b:66:
                    af:5e:60:6d:ea:2b:1e:b1:88:ff:1d:bf:25:c3:6a:
                    25:5c:49:5a:3a:85:16:10:8a:9c:b0:1a:3f:0f:c1:
                    c0:b7:64:71:b2:4e:b7:a1:90:52:b0:3c:2f:4a:05:
                    b7:c2:0d:c1:7e:37:ee:cb:41:3e:30:ec:00:7e:55:
                    ce:85:e5:a6:73:fe:fd:33:42:c1:08:4a:7f:50:cb:
                    a4:69:97:16:05:20:2e:55:f8:8f:9e:93:eb:54:81:
                    87:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:D4:40:A6:92:E7:44:B2:8D:89:74:37:33:2D:33:3D:E4:EF:E2:F6
            X509v3 Authority Key Identifier:
                keyid:77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/7701CBA3BC1B47C951960EA7204772C4899F11B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e3132382e3232342e302f32302d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.128.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a5:81:0d:e9:7e:b7:ee:6b:02:1c:d2:75:ae:e1:76:2f:bc:69:
         ca:84:79:a4:a0:46:cc:a9:ff:85:92:44:01:c0:e4:93:9a:28:
         dc:a2:91:a4:6c:e6:97:df:2a:4b:ce:1f:fa:6a:fb:d0:6f:2a:
         41:fa:df:19:35:41:f7:20:47:2b:96:a0:9d:ca:3f:1a:d1:ed:
         38:dd:12:20:4d:0a:1b:3b:63:51:f6:29:38:9b:1f:d9:30:7a:
         96:36:c9:de:97:13:63:a3:cd:11:9f:37:a2:09:ce:ca:4c:27:
         2f:6f:d2:37:aa:2a:6c:41:03:50:7c:01:96:13:fe:e1:59:8d:
         e3:75:0e:63:7e:6f:c4:12:25:b1:38:be:64:c7:1b:ba:23:06:
         8c:5d:af:28:d4:b5:35:61:98:03:4d:a8:09:93:0f:ce:72:7a:
         7f:90:24:44:a1:87:99:29:29:73:46:bb:8c:ba:6d:a2:df:05:
         1c:78:64:d8:8b:77:c7:c0:3a:9e:da:10:eb:22:af:a2:51:ca:
         f7:68:f9:72:e2:cf:d3:69:70:f6:12:5e:28:d4:d4:fb:40:bd:
         03:31:d9:7b:03:14:70:89:d3:92:66:ed:a9:9f:68:33:ac:2e:
         be:94:6d:6d:d1:45:8d:01:0e:ea:3b:f4:9a:90:a3:32:d7:98:
         7e:27:ec:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 23:09:01 2024 by rpki-client on console-ams.rpki-client.org