Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e31372e33322e302f31392d3332203d3e2031393136.roa
File:                     3230302e31372e33322e302f31392d3332203d3e2031393136.roa (raw, json)
Hash identifier:          9qVzrM2L+6Ii0HFQG2BIk+HnGeH3bkABfmDyGcjzqiU=
Subject key identifier:   39:C6:48:5A:AF:9C:08:2B:F3:F6:4C:80:B4:3E:57:54:92:94:91:14
Certificate issuer:       /CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
Certificate serial:       0CD251558830639FCAC97A7A1FAC331499849E57
Authority key identifier: 77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e31372e33322e302f31392d3332203d3e2031393136.roa
Signing time:             Wed 26 Jun 2024 20:46:33 +0000
ROA not before:           Wed 26 Jun 2024 20:41:33 +0000
ROA not after:            Wed 25 Jun 2025 20:46:33 +0000
asID:                     1916
IP address blocks:        200.17.32.0/19 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/7701CBA3BC1B47C951960EA7204772C4899F11B2.crl
                          rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/7701CBA3BC1B47C951960EA7204772C4899F11B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Jun 2024 22:07:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:d2:51:55:88:30:63:9f:ca:c9:7a:7a:1f:ac:33:14:99:84:9e:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
        Validity
            Not Before: Jun 26 20:41:33 2024 GMT
            Not After : Jun 25 20:46:33 2025 GMT
        Subject: CN=39C6485AAF9C082BF3F64C80B43E575492949114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:ac:29:6a:07:d4:8e:3a:32:c9:b4:35:52:84:
                    72:91:95:60:f1:20:44:70:cc:cd:71:5a:df:bf:75:
                    38:b4:be:3e:5f:62:34:1f:39:f2:88:a4:f2:05:ff:
                    ef:ef:8c:47:ed:2e:57:e4:d6:5d:d3:e5:78:cc:d6:
                    5b:29:0e:32:4a:46:d4:b0:4e:7c:21:a3:79:44:4f:
                    64:75:52:c0:c5:1c:3b:79:a2:d4:ca:64:03:8a:7b:
                    fe:f4:8f:26:4c:bf:43:00:2b:12:f3:16:32:71:52:
                    fd:ea:53:31:94:73:86:5c:75:e0:88:11:a9:03:be:
                    6d:25:81:93:ac:a7:3c:87:13:20:97:41:2d:16:d3:
                    20:c4:fd:5b:0f:62:79:59:dd:f2:4d:ad:ca:7c:2f:
                    60:51:ef:79:2a:73:2d:2e:bf:4a:63:e6:9b:b3:09:
                    e8:b1:9b:b4:a0:2a:f8:a8:01:14:55:fb:ca:04:ee:
                    9e:88:2e:23:76:e2:75:bb:96:75:5d:fd:d9:5e:42:
                    c0:ac:02:e6:5d:7a:5e:1e:de:00:02:69:fd:75:eb:
                    8d:17:db:91:40:e8:ea:60:e1:44:34:4a:d3:59:dc:
                    f2:77:e0:12:b3:76:a9:49:52:1a:2c:9d:34:93:4d:
                    cb:ad:93:70:a0:4c:15:88:52:89:a3:f1:f0:4c:f8:
                    33:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:C6:48:5A:AF:9C:08:2B:F3:F6:4C:80:B4:3E:57:54:92:94:91:14
            X509v3 Authority Key Identifier:
                keyid:77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/7701CBA3BC1B47C951960EA7204772C4899F11B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e31372e33322e302f31392d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.17.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9d:1f:61:f5:c0:a3:36:ee:71:65:95:90:c0:36:5a:9b:d0:c7:
         aa:bf:e2:01:61:c6:b2:17:95:9c:a3:bd:ec:4e:94:fb:c0:b1:
         5c:84:05:c3:0a:61:e9:d7:8f:e4:04:92:c0:27:3c:d9:bc:50:
         7b:fb:1d:50:bc:2a:89:6f:06:fb:4b:8f:bc:82:64:9f:4b:d0:
         29:4c:c0:c6:55:88:ac:cd:1e:cd:6a:f0:b0:b1:5e:b8:5c:b3:
         ac:1f:b3:b0:bf:e0:26:b4:86:21:20:e7:31:17:3a:d2:bf:3e:
         ff:ea:24:56:8c:ec:ae:32:3a:be:07:fe:41:00:e6:74:47:14:
         f5:60:be:f8:20:01:d8:33:21:eb:57:6e:52:5b:c9:9b:9f:f9:
         7f:b1:6f:d1:5a:3a:0a:56:db:dc:de:3c:3b:de:6c:0e:5f:18:
         4c:01:9b:f2:e1:fd:c7:75:89:7b:61:9a:79:51:53:36:6b:ba:
         71:79:49:d4:76:d9:00:61:55:33:21:7e:9d:69:14:88:d5:f1:
         4a:63:50:31:08:b8:e5:02:f7:82:cf:42:f4:2f:ad:23:59:11:
         71:14:87:25:cf:f3:7b:f1:15:4e:3f:21:d1:d5:c6:29:db:8f:
         eb:f4:4e:54:f4:1f:a4:4a:2a:90:d5:d5:d4:6e:73:fa:e2:bd:
         8d:55:c0:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 23:30:18 2024 by rpki-client on console-fra.rpki-client.org