Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e31382e3132382e302f31382d3332203d3e2031393136.roa
File:                     3230302e31382e3132382e302f31382d3332203d3e2031393136.roa (raw, json)
Hash identifier:          IvVY+R6T7aNG+k1LN67aPN7bNIatL8uIz0NDlc8K9Io=
Subject key identifier:   C3:F3:21:73:A5:95:86:1E:0D:F0:80:B5:C7:95:0B:6E:C3:1F:85:B2
Certificate issuer:       /CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
Certificate serial:       225430B6CDB88F9464A89077CDB81FC308A19635
Authority key identifier: 77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e31382e3132382e302f31382d3332203d3e2031393136.roa
Signing time:             Wed 26 Jun 2024 20:46:31 +0000
ROA not before:           Wed 26 Jun 2024 20:41:31 +0000
ROA not after:            Wed 25 Jun 2025 20:46:31 +0000
asID:                     1916
IP address blocks:        200.18.128.0/18 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/7701CBA3BC1B47C951960EA7204772C4899F11B2.crl
                          rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/7701CBA3BC1B47C951960EA7204772C4899F11B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Jun 2024 22:07:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:54:30:b6:cd:b8:8f:94:64:a8:90:77:cd:b8:1f:c3:08:a1:96:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
        Validity
            Not Before: Jun 26 20:41:31 2024 GMT
            Not After : Jun 25 20:46:31 2025 GMT
        Subject: CN=C3F32173A595861E0DF080B5C7950B6EC31F85B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a0:13:f4:d6:6e:a5:b5:a1:ad:ef:be:a4:d9:
                    9b:c6:36:40:81:3d:09:65:cb:81:17:a2:ed:e0:23:
                    c5:a5:68:b8:47:d3:bc:73:46:cc:61:22:7e:e8:31:
                    43:7f:d5:89:99:fa:c0:26:f7:14:bb:37:d1:54:97:
                    f3:a4:21:06:8b:c1:3f:36:6b:91:f5:06:a6:d8:87:
                    60:c0:ef:c9:2d:ff:c0:ae:ae:5e:04:cd:a6:c1:dd:
                    1e:a7:34:b6:0b:9b:ae:c7:8b:36:9a:a7:14:56:8c:
                    d0:f5:7b:87:cb:5a:fc:bf:45:86:61:2b:bf:97:bd:
                    48:db:6d:9e:12:83:0f:df:68:da:8d:d8:a1:7c:53:
                    61:a6:ca:d4:15:56:80:4c:fc:79:88:5e:e7:49:9e:
                    3a:3b:5c:ac:74:52:fe:44:e4:23:67:5a:32:71:25:
                    ab:94:0f:b0:c3:61:89:97:7b:25:2f:6c:92:ff:4a:
                    d7:1d:31:90:a1:de:a9:f2:83:4e:c3:71:09:34:0e:
                    ac:a0:41:90:39:cd:ef:1f:f1:10:c8:a6:bf:80:c6:
                    c9:ab:1c:01:ed:ff:7d:2f:86:d1:a1:2e:dd:78:ab:
                    b1:52:7c:39:57:a2:71:39:d1:d9:7d:39:a6:96:df:
                    6a:22:4f:4c:3d:9e:d4:0a:e5:7c:36:33:77:f1:6d:
                    bf:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F3:21:73:A5:95:86:1E:0D:F0:80:B5:C7:95:0B:6E:C3:1F:85:B2
            X509v3 Authority Key Identifier:
                keyid:77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/7701CBA3BC1B47C951960EA7204772C4899F11B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e31382e3132382e302f31382d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.18.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         96:42:d1:c8:21:0d:c9:11:8e:0f:6a:e2:2e:b8:57:4e:68:e2:
         f2:81:eb:ae:21:47:51:02:89:16:2a:3e:11:9c:ab:00:e6:b8:
         df:bc:0b:4c:34:bf:95:8e:ba:61:fd:13:96:e3:9f:88:48:3a:
         da:e3:5d:9c:98:7d:46:7f:82:80:20:e1:61:96:79:33:0e:59:
         76:00:75:00:ff:f9:b9:3d:ae:89:ad:7d:26:de:fd:81:98:3a:
         14:f8:54:66:a4:b9:32:08:b0:8a:a6:be:10:1d:9d:3a:69:ea:
         f3:4b:11:83:3f:72:f5:8d:45:d3:59:3e:7f:3e:0f:a0:09:40:
         bd:8e:a0:bf:66:26:64:1a:30:0e:52:6c:f6:f2:05:b6:9c:f3:
         d8:b5:a8:e4:47:45:0e:17:5a:6f:e9:37:04:09:15:f3:50:5e:
         4a:e6:6d:0b:f9:f4:99:4b:2d:79:86:1e:25:36:1f:ea:05:be:
         c8:7e:6b:5d:96:3f:75:a0:6b:2b:ae:56:bd:03:fd:3b:e9:f4:
         e2:b8:90:03:f1:06:24:cf:3c:0d:77:4e:34:3d:e4:69:f5:b5:
         3b:2f:51:6e:aa:f5:c2:0a:25:08:08:67:00:1a:13:95:ef:ce:
         5e:51:9f:aa:0a:48:de:f1:7b:01:ff:47:03:4c:3a:7b:25:1e:
         70:41:3f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 23:09:01 2024 by rpki-client on console-ams.rpki-client.org