Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/1/3230312e3134302e3234382e302f32322d3332203d3e203631363936.roa
File:                     3230312e3134302e3234382e302f32322d3332203d3e203631363936.roa (raw, json)
Hash identifier:          X0ewEJGuzRz0V+fbC46TbwdcI8gRiukxKiyvtcCpHSE=
Subject key identifier:   84:C4:CB:11:70:0E:46:49:4F:60:68:5A:69:69:91:5C:51:CA:F9:74
Certificate issuer:       /CN=E099E1E55270BB43965A6A8864FD6A4E4581BB1E
Certificate serial:       0701EA2F62F814845BCFF0DFD1673281F53DFA
Authority key identifier: E0:99:E1:E5:52:70:BB:43:96:5A:6A:88:64:FD:6A:4E:45:81:BB:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E099E1E55270BB43965A6A8864FD6A4E4581BB1E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/1/3230312e3134302e3234382e302f32322d3332203d3e203631363936.roa
Signing time:             Thu 04 Apr 2024 19:39:59 +0000
ROA not before:           Thu 04 Apr 2024 19:34:59 +0000
ROA not after:            Thu 03 Apr 2025 19:39:59 +0000
asID:                     61696
IP address blocks:        201.140.248.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/1/E099E1E55270BB43965A6A8864FD6A4E4581BB1E.crl
                          rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/1/E099E1E55270BB43965A6A8864FD6A4E4581BB1E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E099E1E55270BB43965A6A8864FD6A4E4581BB1E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:01:ea:2f:62:f8:14:84:5b:cf:f0:df:d1:67:32:81:f5:3d:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E099E1E55270BB43965A6A8864FD6A4E4581BB1E
        Validity
            Not Before: Apr  4 19:34:59 2024 GMT
            Not After : Apr  3 19:39:59 2025 GMT
        Subject: CN=84C4CB11700E46494F60685A6969915C51CAF974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6d:77:9d:02:c6:84:e7:66:1c:f9:6a:a6:94:
                    bb:05:92:42:55:ab:b9:fa:48:06:19:8e:fa:60:21:
                    ec:15:2d:14:6f:0f:ec:fb:43:70:95:78:2d:a1:76:
                    66:14:38:08:19:88:a5:2e:a1:c8:eb:f4:c8:0e:b4:
                    c0:47:8a:d6:ed:f0:ce:c3:06:7e:39:9d:a0:0d:85:
                    cf:4b:63:1a:52:bf:35:12:40:bd:b8:1c:45:2b:f9:
                    ec:88:6e:70:f6:a8:48:65:18:98:f0:52:ff:cd:3b:
                    ba:9a:7e:68:94:87:e9:80:da:a4:a4:9c:24:88:c6:
                    09:3b:49:7d:f3:f1:41:b7:2e:05:04:a9:4c:4d:09:
                    92:bf:8e:e3:72:e9:ae:bf:54:aa:2e:58:02:9c:ea:
                    58:36:f5:bc:53:77:14:95:a5:c6:16:40:a1:e4:40:
                    27:ff:25:08:77:22:5a:0a:ff:dc:10:9b:ba:3a:da:
                    f4:95:2c:d9:38:ee:16:ae:6c:05:f7:b9:b9:e2:cd:
                    66:98:ce:6b:49:61:f6:38:56:ae:82:f4:be:a3:16:
                    9b:a4:ba:9d:c9:5a:89:fd:5d:96:41:51:45:6c:d3:
                    44:77:fa:78:29:95:06:4c:69:5d:3d:dc:25:0f:02:
                    bf:64:d5:76:14:be:ff:7f:95:73:31:42:1d:4a:61:
                    9c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:C4:CB:11:70:0E:46:49:4F:60:68:5A:69:69:91:5C:51:CA:F9:74
            X509v3 Authority Key Identifier:
                keyid:E0:99:E1:E5:52:70:BB:43:96:5A:6A:88:64:FD:6A:4E:45:81:BB:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/1/E099E1E55270BB43965A6A8864FD6A4E4581BB1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E099E1E55270BB43965A6A8864FD6A4E4581BB1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/1/3230312e3134302e3234382e302f32322d3332203d3e203631363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.140.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:dd:36:67:43:d0:39:b8:c5:1b:86:c8:d0:28:ee:8c:81:65:
         f3:dd:97:84:17:6a:9a:60:14:99:04:e0:f2:c2:e3:c4:1e:d8:
         0c:df:f7:0b:ec:1e:7c:b1:a5:32:f5:c6:2d:2e:ce:6b:65:5e:
         1e:0d:ea:8c:70:9b:89:8d:da:20:87:43:13:20:26:ed:de:03:
         83:98:58:68:3a:53:99:7a:1b:28:70:22:eb:ad:2e:fc:d3:1a:
         3f:45:11:73:1a:8b:4a:7b:09:59:af:1c:1e:53:9a:f0:b4:2d:
         df:d4:1c:ab:f8:75:b7:5a:a9:27:2b:42:09:77:52:a8:89:60:
         67:bb:29:b9:b5:03:97:ed:cf:61:58:f6:cb:a2:33:3a:0b:d0:
         31:4a:91:7f:a4:5d:a3:f2:f4:8b:62:d0:f8:1e:25:62:b0:52:
         43:f5:fc:8c:07:88:95:86:77:80:40:57:d5:92:2d:b7:0e:8f:
         82:0e:03:98:5e:f3:38:2d:01:1b:e1:54:6c:a9:7c:cd:a1:a6:
         1b:b3:a9:dd:cc:bb:e7:df:72:50:6f:c0:c2:93:cb:41:f5:fc:
         ab:a9:ae:92:a5:7d:c1:80:e1:c1:eb:79:30:d9:b1:35:a4:f8:
         dc:9a:25:b7:8c:9f:a4:df:68:35:08:0f:5a:06:52:60:b5:5a:
         fd:2c:26:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 06:32:00 2024 by rpki-client on console-fra.rpki-client.org