Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e3135392e3234302e302f32302d3332203d3e2031393136.roa
File:                     3230302e3135392e3234302e302f32302d3332203d3e2031393136.roa (raw, json)
Hash identifier:          +5ZUkS6LiykZ0gkWwFs45l832debFTnRvRgzdP/K7qw=
Subject key identifier:   CD:44:BD:98:7B:2D:24:90:32:48:04:09:13:9F:CC:62:70:02:2D:37
Certificate issuer:       /CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
Certificate serial:       5B8A2EC6DEEB88DC7E83CEC1871DC78B5EAF4B79
Authority key identifier: 77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e3135392e3234302e302f32302d3332203d3e2031393136.roa
Signing time:             Wed 26 Jun 2024 20:46:33 +0000
ROA not before:           Wed 26 Jun 2024 20:41:33 +0000
ROA not after:            Wed 25 Jun 2025 20:46:33 +0000
asID:                     1916
IP address blocks:        200.159.240.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/7701CBA3BC1B47C951960EA7204772C4899F11B2.crl
                          rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/7701CBA3BC1B47C951960EA7204772C4899F11B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Jun 2024 22:07:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:8a:2e:c6:de:eb:88:dc:7e:83:ce:c1:87:1d:c7:8b:5e:af:4b:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
        Validity
            Not Before: Jun 26 20:41:33 2024 GMT
            Not After : Jun 25 20:46:33 2025 GMT
        Subject: CN=CD44BD987B2D249032480409139FCC6270022D37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c2:a1:5a:c1:6c:04:41:fe:4d:97:c9:b2:27:
                    54:5d:30:53:aa:9b:20:37:0f:ec:4d:1e:78:4f:88:
                    48:83:68:6f:fb:75:99:ab:9d:a7:15:ab:5e:5e:03:
                    e7:b4:53:14:70:61:5c:ca:6a:ca:42:2b:8c:b3:1f:
                    55:bd:c6:9a:e2:ee:49:6d:70:c2:1e:35:14:c9:31:
                    25:30:b8:4a:f9:bf:bf:f7:b4:01:e4:e2:14:da:70:
                    ed:5b:cd:30:fa:de:97:6b:88:d9:ad:a3:1e:a5:c2:
                    e5:c5:56:87:13:fa:43:0b:d1:e0:2a:f1:6d:b4:8e:
                    48:b4:9c:54:38:83:98:73:ee:71:d0:74:dd:3a:db:
                    b3:a7:78:e8:2f:b5:ff:31:bc:0f:66:ac:1b:8a:9f:
                    52:05:0b:aa:b9:53:ca:ec:65:83:7c:a8:49:3f:5a:
                    02:e0:0c:d6:fc:a9:5c:10:9e:22:c9:7c:61:9f:c9:
                    48:91:51:49:80:3b:19:6c:a2:be:e7:bd:34:5b:df:
                    2a:af:ea:ed:4c:2f:91:5a:ce:5f:91:df:b3:b7:71:
                    74:77:e9:1d:58:7e:35:97:a3:ce:c7:c9:74:ca:0c:
                    86:ef:1c:b8:03:33:6d:9c:af:b2:77:1d:c1:70:15:
                    7f:0a:d0:02:5b:3f:c1:f1:f1:01:99:40:6e:ae:2b:
                    6f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:44:BD:98:7B:2D:24:90:32:48:04:09:13:9F:CC:62:70:02:2D:37
            X509v3 Authority Key Identifier:
                keyid:77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/7701CBA3BC1B47C951960EA7204772C4899F11B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e3135392e3234302e302f32302d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.159.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         48:ef:32:c1:5b:ad:15:26:89:ce:53:f3:17:09:09:ef:b0:56:
         bc:49:a9:0c:5d:82:3c:5b:68:cc:3f:77:d8:67:5f:a1:19:8f:
         8a:47:e9:11:6d:37:73:94:43:77:04:4d:86:62:ff:f8:be:e0:
         ae:84:51:2f:25:53:6e:57:88:95:03:2e:fc:d1:a9:78:80:35:
         74:1c:cc:5d:84:0b:61:44:bb:21:52:1e:b8:36:e3:90:98:23:
         fa:21:d5:8b:f3:e4:b9:9e:5e:53:03:74:cf:03:ca:92:57:d9:
         a8:d3:98:ab:c9:fc:a5:05:28:ba:e6:46:b9:0b:49:c0:d4:bc:
         7d:1a:cb:3e:31:50:37:34:d8:ac:91:a0:b1:65:ff:e9:9b:1b:
         7a:ad:c4:4d:0a:f3:3c:ff:ec:b9:05:46:af:21:f3:b1:0f:86:
         ab:90:65:2e:64:b3:35:0c:2c:9d:5b:a7:f4:4f:38:82:ca:4c:
         89:84:e6:f1:80:39:da:1c:94:3e:7e:cb:76:a8:e4:60:fd:c9:
         2a:ce:26:bd:9c:86:eb:0f:e8:b2:44:7f:20:8f:4e:d9:ba:f7:
         e7:49:09:55:13:4c:b0:a5:1c:ea:ff:8f:61:62:6f:7a:c6:be:
         3b:0d:dc:d9:c5:e6:c5:b8:6e:22:f4:d9:60:ae:d7:9e:07:a5:
         d5:55:c9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 23:09:01 2024 by rpki-client on console-ams.rpki-client.org