Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e31382e38302e302f32302d3332203d3e2031393136.roa
File:                     3230302e31382e38302e302f32302d3332203d3e2031393136.roa (raw, json)
Hash identifier:          Jn8/suSBcbZ9eI1FuDfDg+FLapqM65VSsk3L/mtEayc=
Subject key identifier:   6F:22:7B:7D:F3:66:51:55:1B:71:6D:CC:36:F1:7D:3C:FF:E3:7E:10
Certificate issuer:       /CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
Certificate serial:       2505C8B7F7D16FDF370D3ABED13F68A3390E3305
Authority key identifier: 77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e31382e38302e302f32302d3332203d3e2031393136.roa
Signing time:             Wed 26 Jun 2024 20:46:32 +0000
ROA not before:           Wed 26 Jun 2024 20:41:32 +0000
ROA not after:            Wed 25 Jun 2025 20:46:32 +0000
asID:                     1916
IP address blocks:        200.18.80.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/7701CBA3BC1B47C951960EA7204772C4899F11B2.crl
                          rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/7701CBA3BC1B47C951960EA7204772C4899F11B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Jun 2024 22:07:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:05:c8:b7:f7:d1:6f:df:37:0d:3a:be:d1:3f:68:a3:39:0e:33:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
        Validity
            Not Before: Jun 26 20:41:32 2024 GMT
            Not After : Jun 25 20:46:32 2025 GMT
        Subject: CN=6F227B7DF36651551B716DCC36F17D3CFFE37E10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:28:19:4c:14:f0:4b:4b:e4:2d:5c:dc:fe:61:
                    6d:59:b1:3d:41:fe:d8:b7:1c:af:7b:ae:1a:7d:9c:
                    3d:b4:37:c0:fe:c3:4d:19:c7:70:fd:70:53:23:f6:
                    e5:f6:40:32:dc:f4:9d:12:00:45:f2:51:66:3e:8b:
                    d5:6b:15:be:fb:61:c3:c1:ce:3f:3b:10:36:38:a6:
                    75:f8:9e:f1:ea:6d:b2:e3:80:4a:1a:dc:5b:5f:83:
                    ca:6a:01:e9:83:97:74:59:82:e9:a3:4a:68:d9:f8:
                    d9:46:c5:5d:d9:c1:90:17:80:a5:28:f4:81:2a:93:
                    41:3d:83:a8:09:86:39:f9:0b:73:60:a9:8e:00:d5:
                    c8:7b:31:24:5b:76:24:cb:40:55:44:f7:da:ae:a5:
                    cf:71:3e:b4:65:b3:fe:ab:23:ae:42:fc:c7:64:98:
                    cb:2c:2d:c2:c2:9e:ee:0d:5e:66:af:04:1a:96:36:
                    82:6c:d1:70:57:b2:6c:38:f1:77:4a:d7:de:50:83:
                    9e:08:5f:a8:e2:b6:a4:33:b9:fb:87:57:5d:8e:a7:
                    5a:a2:a8:b6:01:58:8a:37:35:d5:32:b8:76:5b:b8:
                    8d:b9:64:d9:17:b4:14:b7:13:81:c8:3d:6a:15:b7:
                    bd:c8:be:b5:19:63:8a:55:81:ec:30:62:eb:ac:7e:
                    32:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:22:7B:7D:F3:66:51:55:1B:71:6D:CC:36:F1:7D:3C:FF:E3:7E:10
            X509v3 Authority Key Identifier:
                keyid:77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/7701CBA3BC1B47C951960EA7204772C4899F11B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e31382e38302e302f32302d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.18.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8c:1e:e8:c3:cf:d1:df:c8:ad:a5:fd:4d:e4:47:8e:ee:3a:2e:
         ec:fa:5b:63:7c:7b:94:d6:82:f5:a8:82:89:c5:ba:5b:52:71:
         b9:e1:5e:c1:63:b8:3b:7e:2c:9a:65:48:86:d2:d7:c2:d8:62:
         65:b8:95:de:f2:70:2c:d9:bd:23:b1:98:1b:cb:fb:af:6e:da:
         8b:9b:dd:75:1d:94:2d:16:63:fe:b2:6d:30:72:c8:ea:65:47:
         3c:fb:d3:f1:c3:b2:79:0e:20:5f:8b:3a:f0:59:c7:0d:2a:32:
         da:e0:2d:ad:43:80:90:e5:be:c2:a4:d7:6c:2f:d0:98:bd:27:
         6a:78:30:73:97:0e:74:ae:70:72:d3:47:84:ee:b8:59:0f:47:
         f5:bd:f5:71:6c:1c:84:3d:1f:eb:7a:5a:f7:a5:0e:e9:db:31:
         6b:f8:49:85:0f:92:8d:25:ee:83:02:b4:9d:1b:11:75:86:0f:
         9d:ca:6c:a7:63:57:fc:34:78:de:7e:7c:10:7b:76:8a:90:ff:
         8a:41:9f:1e:98:1b:a0:ba:dc:04:32:12:f6:59:73:21:35:6a:
         f2:3f:0f:d2:07:0f:d5:75:28:c5:e8:b9:36:b4:de:cb:7a:8a:
         55:84:cd:0a:33:f1:f7:b4:21:2f:2c:7f:9e:86:6c:a6:92:48:
         d9:3b:78:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 23:30:18 2024 by rpki-client on console-fra.rpki-client.org