Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/3230302e302e3137392e302f32342d3234203d3e20323731353733.roa
File:                     3230302e302e3137392e302f32342d3234203d3e20323731353733.roa (raw, json)
Hash identifier:          I6L+1PF1AoPim+2Rj86d5i3Ka3EIE92jHqa8twRbU0g=
Subject key identifier:   85:FA:98:D2:9A:2A:5D:0B:AD:89:84:BE:B5:BC:4A:01:09:59:53:F7
Certificate issuer:       /CN=06C64410651F0607F24E4F1A3AF2CB4EAC857C2A
Certificate serial:       4BE0794C0D416A59A41A094C177FD089F03269DD
Authority key identifier: 06:C6:44:10:65:1F:06:07:F2:4E:4F:1A:3A:F2:CB:4E:AC:85:7C:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06C64410651F0607F24E4F1A3AF2CB4EAC857C2A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/3230302e302e3137392e302f32342d3234203d3e20323731353733.roa
Signing time:             Fri 10 May 2024 14:54:29 +0000
ROA not before:           Fri 10 May 2024 14:49:29 +0000
ROA not after:            Fri 09 May 2025 14:54:29 +0000
asID:                     271573
IP address blocks:        200.0.179.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/06C64410651F0607F24E4F1A3AF2CB4EAC857C2A.crl
                          rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/06C64410651F0607F24E4F1A3AF2CB4EAC857C2A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06C64410651F0607F24E4F1A3AF2CB4EAC857C2A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 16 Jun 2024 15:05:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:e0:79:4c:0d:41:6a:59:a4:1a:09:4c:17:7f:d0:89:f0:32:69:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06C64410651F0607F24E4F1A3AF2CB4EAC857C2A
        Validity
            Not Before: May 10 14:49:29 2024 GMT
            Not After : May  9 14:54:29 2025 GMT
        Subject: CN=85FA98D29A2A5D0BAD8984BEB5BC4A01095953F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e1:6e:c9:6e:91:10:7c:a3:d3:8d:5b:f2:2f:
                    85:d0:7b:85:25:2d:87:9e:41:83:77:e0:e0:38:99:
                    f2:8a:38:1b:cf:b9:6c:60:20:9f:b5:27:56:6e:55:
                    21:f1:2f:fe:ef:f8:f6:81:9e:16:6a:10:7d:d3:dc:
                    46:5f:45:1b:b9:70:0c:1d:d1:73:98:7a:cb:a9:e7:
                    3c:b0:4a:77:61:d1:28:30:9a:ae:a3:bb:7f:4e:7d:
                    93:d2:cb:c3:63:1d:40:cf:98:58:d8:cd:16:dc:51:
                    51:ab:3c:cd:a0:45:fd:08:a8:a8:0c:d2:8f:11:ad:
                    50:77:89:30:b5:0a:d5:8e:23:0f:2f:d7:7a:42:2e:
                    67:79:de:83:f7:16:6f:29:ff:2b:d7:da:08:62:f0:
                    50:f6:ce:05:9d:9b:d2:1c:a0:f7:5d:e9:09:97:b0:
                    1b:0a:66:31:9e:cf:a9:83:e4:8f:c3:94:8e:8a:0b:
                    dc:91:69:8d:39:54:72:34:31:36:da:64:bb:d9:8a:
                    16:33:f8:fc:a5:80:43:b4:de:39:d2:55:fb:b3:17:
                    88:02:35:f0:4a:c7:df:78:d6:5b:56:53:c9:a7:8b:
                    93:03:77:db:7d:0f:de:0a:00:28:9f:35:3f:be:40:
                    77:9d:6d:bf:0e:6a:76:c5:89:20:dd:c7:7b:62:cf:
                    a4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:FA:98:D2:9A:2A:5D:0B:AD:89:84:BE:B5:BC:4A:01:09:59:53:F7
            X509v3 Authority Key Identifier:
                keyid:06:C6:44:10:65:1F:06:07:F2:4E:4F:1A:3A:F2:CB:4E:AC:85:7C:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/06C64410651F0607F24E4F1A3AF2CB4EAC857C2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06C64410651F0607F24E4F1A3AF2CB4EAC857C2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/3230302e302e3137392e302f32342d3234203d3e20323731353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:37:94:55:4a:76:8b:ee:60:3b:d4:ed:f5:72:57:67:8f:56:
         ca:c2:8d:7d:5f:de:9a:22:12:b9:ef:53:37:51:74:23:14:67:
         bc:6d:15:12:24:a2:78:d7:57:f9:ec:a6:b7:14:f3:03:b3:c6:
         15:16:65:14:84:3a:0a:cf:e4:a7:61:6a:6d:e0:cb:29:3a:2f:
         d8:59:71:27:e4:28:86:a0:09:da:37:d8:fd:64:69:76:0a:2d:
         56:9a:59:59:11:0c:4b:f0:90:bf:e3:3b:6d:4f:61:2d:d5:c9:
         43:ae:92:66:99:6d:0c:44:25:a6:26:01:54:31:6b:6c:a3:d8:
         b8:11:51:38:07:18:f3:9d:b4:43:88:63:0b:50:ef:79:a0:91:
         1a:33:a7:0a:5f:5f:cf:f8:e3:87:f1:74:bf:e4:e3:fc:3a:e4:
         5d:48:20:14:cb:ce:93:fd:d2:36:b5:a6:13:d9:57:af:8e:57:
         93:ff:8b:8c:a4:eb:bc:c3:a1:83:ff:70:96:ab:9f:7d:38:5b:
         56:ed:54:70:5a:75:1c:61:02:a9:94:36:b7:80:5b:c0:55:06:
         22:04:22:70:67:62:d3:d8:1f:4a:5f:c1:12:1c:d2:e1:38:6f:
         b5:ff:30:60:f0:f4:df:17:2c:e4:b4:68:aa:3f:13:ad:55:ad:
         e4:20:6b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 16:53:07 2024 by rpki-client on console-ams.rpki-client.org