Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/3230312e3135382e31342e302f32342d3234203d3e203631393336.roa
File:                     3230312e3135382e31342e302f32342d3234203d3e203631393336.roa (raw, json)
Hash identifier:          R+Z5o7dr2n6i6n8fdOx4dtoOdaRrSHsm9dIZ14BasC4=
Subject key identifier:   EF:77:1E:1A:93:07:69:DF:2A:FB:A1:46:02:02:4B:37:72:F8:42:7F
Certificate issuer:       /CN=8D0306C23FF564AF54B79D8F98D0DCDDC930B21F
Certificate serial:       18E213D482867A4CD552A19078B53072DBCD1115
Authority key identifier: 8D:03:06:C2:3F:F5:64:AF:54:B7:9D:8F:98:D0:DC:DD:C9:30:B2:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/3230312e3135382e31342e302f32342d3234203d3e203631393336.roa
Signing time:             Thu 18 Apr 2024 14:39:10 +0000
ROA not before:           Thu 18 Apr 2024 14:34:10 +0000
ROA not after:            Thu 17 Apr 2025 14:39:10 +0000
asID:                     61936
IP address blocks:        201.158.14.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.crl
                          rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 13:32:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:e2:13:d4:82:86:7a:4c:d5:52:a1:90:78:b5:30:72:db:cd:11:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D0306C23FF564AF54B79D8F98D0DCDDC930B21F
        Validity
            Not Before: Apr 18 14:34:10 2024 GMT
            Not After : Apr 17 14:39:10 2025 GMT
        Subject: CN=EF771E1A930769DF2AFBA14602024B3772F8427F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d6:32:47:36:81:7a:2a:da:b9:a4:ac:05:c5:
                    09:95:a5:f9:c0:96:7a:b9:c6:81:7c:4e:90:c6:66:
                    07:7f:34:f9:7d:2d:72:9b:72:e5:d6:5d:8c:ec:98:
                    ed:4c:26:80:11:c7:30:d4:bf:d6:a1:4f:6c:7d:f8:
                    bc:1a:22:5d:a7:ec:a2:3a:63:5a:1e:17:0f:e9:88:
                    ea:1a:2e:b2:31:6c:12:c6:79:23:23:f5:a0:ad:2b:
                    61:04:39:6e:d3:d5:10:78:44:41:96:08:8d:70:d1:
                    b1:f9:f4:90:4b:4f:df:6e:9f:43:d0:ab:c6:49:17:
                    00:c2:9c:06:c2:1a:c8:6a:11:02:48:17:3c:23:65:
                    a9:e5:5e:f9:60:cd:51:c7:4b:15:98:0c:44:23:ed:
                    32:8c:e1:9c:b4:2a:3b:2c:e9:3c:c0:5c:e4:44:09:
                    7e:2a:72:42:ae:5c:34:9a:4b:88:6f:98:2a:c8:37:
                    d2:5e:fe:b5:f2:9d:35:65:59:69:a5:33:38:53:a9:
                    a6:8a:9c:8b:06:be:26:68:d3:09:0d:bd:aa:55:cb:
                    21:87:e7:77:d9:15:2b:42:1f:5a:7b:42:ab:e3:9a:
                    39:04:88:5e:81:e4:4d:67:85:be:73:e9:2c:7c:d1:
                    56:47:c7:a5:76:b9:92:4a:70:e1:ef:f2:50:a6:b9:
                    c1:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:77:1E:1A:93:07:69:DF:2A:FB:A1:46:02:02:4B:37:72:F8:42:7F
            X509v3 Authority Key Identifier:
                keyid:8D:03:06:C2:3F:F5:64:AF:54:B7:9D:8F:98:D0:DC:DD:C9:30:B2:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/3230312e3135382e31342e302f32342d3234203d3e203631393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.158.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:01:5b:3a:c6:94:21:8a:ae:6a:f3:c5:5d:94:97:3e:2e:b2:
         4d:2a:2b:7d:24:1f:aa:2d:55:80:42:41:b0:c7:3b:b3:4a:33:
         35:46:5e:62:6e:a7:eb:37:1a:0c:8a:55:6a:52:94:e2:89:07:
         b9:76:ce:58:85:14:fc:4a:23:2a:e7:b3:1b:68:71:b5:65:55:
         a3:12:a3:33:23:63:cd:36:90:ed:97:f0:7a:9c:e9:ed:d9:a0:
         ee:6a:80:ef:cc:60:bf:2a:f1:e7:7a:e3:99:51:eb:44:65:d3:
         92:81:13:8b:4e:72:61:33:98:4f:e1:eb:23:1e:22:82:91:5b:
         ac:16:31:87:aa:39:a9:57:dd:f2:91:c9:b8:49:d4:bc:07:b8:
         ca:be:0a:5e:ba:26:ca:7f:79:0c:ae:ac:af:54:e1:f6:eb:d2:
         26:e8:b2:1e:8a:c4:e6:8f:83:ad:7c:a4:84:df:69:4b:56:99:
         a5:36:cc:31:67:9d:0c:b8:0b:7f:c5:af:7b:eb:c0:d3:47:86:
         40:58:10:52:51:3d:8e:07:2c:1d:97:84:3d:ff:b4:90:4d:6d:
         52:82:fd:98:d5:66:6b:24:1d:cb:92:5f:a6:28:99:af:60:0c:
         76:9b:02:b8:c3:39:0a:47:8b:2a:d5:58:91:01:d7:60:b4:db:
         79:c8:4f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 12:45:07 2024 by rpki-client on console-ams.rpki-client.org