Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e3133392e302e302f31382d3332203d3e2031393136.roa
File:                     3230302e3133392e302e302f31382d3332203d3e2031393136.roa (raw, json)
Hash identifier:          +dvzYkoYSWlCAfq4pC0RB1DUKZI6xpxKddnJ/CDcrec=
Subject key identifier:   8B:29:52:8A:01:44:66:69:64:26:30:67:FA:D5:44:D7:3D:04:D4:25
Certificate issuer:       /CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
Certificate serial:       3412873D9F84E3BEB141EAB413E9965F12B464D1
Authority key identifier: 77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e3133392e302e302f31382d3332203d3e2031393136.roa
Signing time:             Wed 26 Jun 2024 20:46:33 +0000
ROA not before:           Wed 26 Jun 2024 20:41:33 +0000
ROA not after:            Wed 25 Jun 2025 20:46:33 +0000
asID:                     1916
IP address blocks:        200.139.0.0/18 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/7701CBA3BC1B47C951960EA7204772C4899F11B2.crl
                          rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/7701CBA3BC1B47C951960EA7204772C4899F11B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Jun 2024 22:07:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:12:87:3d:9f:84:e3:be:b1:41:ea:b4:13:e9:96:5f:12:b4:64:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
        Validity
            Not Before: Jun 26 20:41:33 2024 GMT
            Not After : Jun 25 20:46:33 2025 GMT
        Subject: CN=8B29528A0144666964263067FAD544D73D04D425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bb:2c:6b:ba:fd:3d:8b:be:e4:26:bc:c8:f9:
                    9f:0e:0b:65:0d:50:f6:3b:d6:c1:ac:7f:b8:c8:c5:
                    b0:29:79:19:81:15:e8:a6:17:4a:2d:fc:9f:92:09:
                    d2:b0:65:fc:af:a2:d9:61:59:a1:e6:d6:88:c2:12:
                    2c:a7:8f:f8:28:e4:dd:4a:c2:ed:da:16:25:2b:32:
                    f8:60:68:9f:b9:d0:3f:1b:48:b4:fc:a9:66:10:05:
                    88:a4:cb:00:af:78:5d:cc:57:51:55:d0:c0:05:fe:
                    c0:6d:ea:44:fd:bd:e3:af:c7:f5:40:c3:44:da:39:
                    d0:69:db:b4:73:4e:2b:2b:64:34:ac:7c:8e:95:ea:
                    91:91:7b:f3:dd:57:d8:60:4f:b6:18:f3:52:6b:2d:
                    44:4a:85:f6:6f:65:84:47:46:0c:c2:08:fb:8e:a8:
                    c5:b0:41:2b:85:5a:1e:11:58:b2:db:eb:eb:3c:09:
                    3e:56:2b:f4:4b:e7:d7:da:90:e4:9a:74:ab:9b:f3:
                    8e:7d:ad:d9:cf:29:bb:46:24:69:82:18:60:63:07:
                    81:e5:0c:84:37:91:65:9b:69:11:f7:36:f6:78:f1:
                    e9:ad:98:11:4b:57:22:3b:1c:64:b9:dc:88:8b:d1:
                    84:72:c1:52:8e:b5:b2:37:9f:6a:57:fd:3a:20:4a:
                    1c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:29:52:8A:01:44:66:69:64:26:30:67:FA:D5:44:D7:3D:04:D4:25
            X509v3 Authority Key Identifier:
                keyid:77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/7701CBA3BC1B47C951960EA7204772C4899F11B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e3133392e302e302f31382d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.139.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         8c:93:4e:68:43:43:51:5f:0c:96:51:39:97:bc:2f:e0:55:5a:
         f1:ab:d7:ab:5f:db:a9:e3:4d:4f:28:cb:3c:77:d7:98:88:fa:
         9c:7a:74:37:52:d1:92:08:f7:c0:f3:38:4f:c0:ec:aa:6e:9b:
         b1:03:c5:b9:7a:fd:6b:ad:1a:e1:03:1c:dc:f4:e3:d5:f1:3e:
         d4:ba:d1:ac:6b:d1:a3:ed:5f:3d:95:45:af:40:87:eb:c9:34:
         d2:b3:c5:32:8c:2f:15:95:5f:a0:7d:9a:2d:0d:88:82:88:2f:
         be:b1:aa:60:06:89:c5:19:73:1a:bd:0d:83:4d:33:3f:d7:71:
         ea:60:e4:e7:1b:a5:f0:46:63:63:c5:24:a2:31:80:56:58:09:
         3c:58:fe:05:e1:58:88:08:e9:73:08:90:39:d9:f3:a4:0d:33:
         85:62:ce:6f:e4:41:35:f8:13:5d:7e:4c:b2:c6:b4:16:8e:d3:
         59:b9:4c:0f:02:3f:48:e4:47:4f:7f:52:8f:36:22:46:5c:ee:
         fd:7a:a0:68:df:08:84:4e:8e:c5:aa:44:d9:e7:bb:b5:cd:35:
         94:d8:ce:3f:76:7e:de:9c:f0:66:e6:a6:f0:39:a1:2b:23:8d:
         e8:99:8f:b9:ea:62:ad:89:d6:a5:6f:8e:81:c4:76:16:3b:a0:
         dd:d0:07:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 23:09:01 2024 by rpki-client on console-ams.rpki-client.org