Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaTnimA75AzPmXN7SS36PbzagoFnghVxjiRux2MKEnfC/0/3230312e3135382e35362e302f32322d3234203d3e203631383130.roa
File:                     3230312e3135382e35362e302f32322d3234203d3e203631383130.roa (raw, json)
Hash identifier:          9IJuPIBmFkFjP87jNRgZ2nNWsTOkSr6ePdJDMOmxivE=
Subject key identifier:   09:26:C3:C6:35:21:5C:62:AB:1C:C5:93:C1:97:4D:D9:F6:7A:C3:40
Certificate issuer:       /CN=C1D7B4D4776503EAD063C1F2B7498814CC2598BE
Certificate serial:       03B0754B852DF3D56626168EC3D8C83228B76159
Authority key identifier: C1:D7:B4:D4:77:65:03:EA:D0:63:C1:F2:B7:49:88:14:CC:25:98:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1D7B4D4776503EAD063C1F2B7498814CC2598BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaTnimA75AzPmXN7SS36PbzagoFnghVxjiRux2MKEnfC/0/3230312e3135382e35362e302f32322d3234203d3e203631383130.roa
Signing time:             Wed 05 Jun 2024 19:40:31 +0000
ROA not before:           Wed 05 Jun 2024 19:35:31 +0000
ROA not after:            Wed 04 Jun 2025 19:40:31 +0000
asID:                     61810
IP address blocks:        201.158.56.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HaTnimA75AzPmXN7SS36PbzagoFnghVxjiRux2MKEnfC/0/C1D7B4D4776503EAD063C1F2B7498814CC2598BE.crl
                          rsync://rpki-repo.registro.br/repo/HaTnimA75AzPmXN7SS36PbzagoFnghVxjiRux2MKEnfC/0/C1D7B4D4776503EAD063C1F2B7498814CC2598BE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1D7B4D4776503EAD063C1F2B7498814CC2598BE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:b0:75:4b:85:2d:f3:d5:66:26:16:8e:c3:d8:c8:32:28:b7:61:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1D7B4D4776503EAD063C1F2B7498814CC2598BE
        Validity
            Not Before: Jun  5 19:35:31 2024 GMT
            Not After : Jun  4 19:40:31 2025 GMT
        Subject: CN=0926C3C635215C62AB1CC593C1974DD9F67AC340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cf:c1:a0:80:d0:9d:0f:49:d2:cf:4c:7f:75:
                    fc:de:bb:ad:c1:75:f6:d3:90:69:33:80:4e:85:06:
                    f9:66:31:b2:2f:46:8f:7c:cc:16:2a:bd:44:2a:ae:
                    7c:df:cd:91:36:4f:90:8e:ed:ba:ab:f8:e5:08:e5:
                    08:79:e4:20:ba:74:d4:6d:af:66:ac:cd:00:fb:55:
                    3f:3b:34:16:bf:73:72:9b:8f:99:ee:a2:12:9d:e8:
                    a5:93:c6:70:35:43:80:1f:92:2c:f9:45:30:e3:7c:
                    54:dc:7e:77:5c:5c:0c:70:f2:c7:a8:48:c5:87:e9:
                    b9:b4:87:e8:71:40:c0:d0:85:9a:f3:b6:2e:54:75:
                    ef:17:5f:fa:7f:d6:67:59:04:ea:73:d2:c5:af:3f:
                    e9:c4:6c:41:80:9b:77:90:fc:53:d3:ec:b9:e7:c8:
                    08:1b:5b:85:d6:15:b9:e0:d6:14:24:2e:ab:15:dc:
                    21:81:13:22:e4:41:c2:ef:dc:5a:f2:bf:49:e9:d6:
                    f9:df:0e:af:0e:57:51:31:ff:2c:7c:03:1b:6d:af:
                    d8:a3:02:58:d0:98:23:d4:58:1b:84:0e:86:5d:f5:
                    42:3b:4f:9f:db:28:f7:c7:33:93:59:1f:4b:35:c8:
                    6b:80:0e:a2:c8:53:6f:c6:21:cb:50:37:7a:27:86:
                    43:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:26:C3:C6:35:21:5C:62:AB:1C:C5:93:C1:97:4D:D9:F6:7A:C3:40
            X509v3 Authority Key Identifier:
                keyid:C1:D7:B4:D4:77:65:03:EA:D0:63:C1:F2:B7:49:88:14:CC:25:98:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaTnimA75AzPmXN7SS36PbzagoFnghVxjiRux2MKEnfC/0/C1D7B4D4776503EAD063C1F2B7498814CC2598BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1D7B4D4776503EAD063C1F2B7498814CC2598BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaTnimA75AzPmXN7SS36PbzagoFnghVxjiRux2MKEnfC/0/3230312e3135382e35362e302f32322d3234203d3e203631383130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.158.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:c5:d2:97:aa:25:1e:98:48:30:35:79:28:2d:d7:b8:57:78:
         2b:fc:52:7f:76:ba:60:8c:c7:82:ef:1c:dd:fe:dc:23:9b:b5:
         5a:ee:b9:92:77:1e:06:34:f8:12:b3:b9:eb:38:a4:95:42:52:
         44:29:d9:3b:fa:7b:70:59:3c:4a:2c:54:23:81:d5:ad:ba:65:
         89:d8:d6:a3:f7:55:5b:73:7c:71:69:d7:f5:7a:c4:7a:c3:0e:
         64:31:ce:6f:ac:e0:db:5d:6c:e3:eb:b4:e2:1b:cd:42:ff:35:
         91:74:c2:b3:f6:c2:dc:ae:b3:77:24:9a:56:d0:01:c7:45:93:
         10:d4:50:98:9c:61:f1:09:76:9f:09:81:00:df:97:77:29:6a:
         6c:9b:31:bc:14:93:97:69:13:8f:78:b6:fd:e8:23:72:17:10:
         85:0a:70:3a:0f:93:9c:98:83:28:c8:da:c1:bc:09:1b:cc:a1:
         de:79:cf:b0:eb:97:ed:bf:b0:7e:49:e8:8e:fa:95:a3:93:5c:
         61:69:ca:af:97:a5:8d:b3:e6:84:4b:68:76:db:d4:a8:23:d9:
         94:c8:b6:0f:a8:35:33:99:fd:b5:86:7f:ab:e8:d8:3d:14:03:
         fc:e5:c3:ae:48:71:bd:db:9e:02:b0:89:49:c2:29:b7:51:b7:
         8b:5e:9e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 06:35:54 2024 by rpki-client on console-ams.rpki-client.org