Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2cPtcDQGWGem1rgyqomM7k1KigumvXPzjf3GqBueYnEE/1/3230312e3135392e3132302e302f32322d3234203d3e203631383132.roa
File:                     3230312e3135392e3132302e302f32322d3234203d3e203631383132.roa (raw, json)
Hash identifier:          YN5Piz6tZp2oAxMHMpNiYvkw6OVhsnm0OCutXirmVHE=
Subject key identifier:   6C:AA:23:1E:97:3D:F6:D5:AC:30:2E:DB:12:18:AC:FA:94:2E:54:C0
Certificate issuer:       /CN=30CB0F58B1D79A759D914AF97BA1287C39FE9DFD
Certificate serial:       56EB1FC1EA51CD965450D5C4B88D09E96207AFB3
Authority key identifier: 30:CB:0F:58:B1:D7:9A:75:9D:91:4A:F9:7B:A1:28:7C:39:FE:9D:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30CB0F58B1D79A759D914AF97BA1287C39FE9DFD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2cPtcDQGWGem1rgyqomM7k1KigumvXPzjf3GqBueYnEE/1/3230312e3135392e3132302e302f32322d3234203d3e203631383132.roa
Signing time:             Thu 04 Apr 2024 12:38:09 +0000
ROA not before:           Thu 04 Apr 2024 12:33:09 +0000
ROA not after:            Thu 03 Apr 2025 12:38:09 +0000
asID:                     61812
IP address blocks:        201.159.120.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2cPtcDQGWGem1rgyqomM7k1KigumvXPzjf3GqBueYnEE/1/30CB0F58B1D79A759D914AF97BA1287C39FE9DFD.crl
                          rsync://rpki-repo.registro.br/repo/2cPtcDQGWGem1rgyqomM7k1KigumvXPzjf3GqBueYnEE/1/30CB0F58B1D79A759D914AF97BA1287C39FE9DFD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30CB0F58B1D79A759D914AF97BA1287C39FE9DFD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 12:33:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:eb:1f:c1:ea:51:cd:96:54:50:d5:c4:b8:8d:09:e9:62:07:af:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30CB0F58B1D79A759D914AF97BA1287C39FE9DFD
        Validity
            Not Before: Apr  4 12:33:09 2024 GMT
            Not After : Apr  3 12:38:09 2025 GMT
        Subject: CN=6CAA231E973DF6D5AC302EDB1218ACFA942E54C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2c:dc:d1:f9:2f:1f:87:0d:c3:6b:2a:8e:cb:
                    e8:38:01:d2:f2:7d:37:98:de:52:9d:59:39:e0:9e:
                    58:ae:fd:66:90:d9:24:1b:28:12:c1:61:6c:56:c1:
                    02:68:d9:85:15:63:17:5a:4c:11:08:c9:72:dd:6e:
                    0b:c7:d5:45:0b:c0:e9:cd:05:d1:b0:aa:c6:61:66:
                    dc:3b:6c:4b:63:6a:72:31:e6:22:96:16:b9:11:7a:
                    47:51:a7:1e:73:fe:70:f3:ef:61:e7:3e:16:60:9f:
                    1a:5f:ad:34:85:23:1b:db:76:f6:27:2f:c1:7c:15:
                    2c:2d:45:6d:5f:ef:2b:c6:b7:f0:6e:57:7b:87:63:
                    1a:ff:8e:d6:5f:cf:57:88:04:b9:e1:33:17:07:ef:
                    62:12:d7:14:40:e1:9a:d8:ed:21:bc:80:dd:88:a3:
                    df:e0:c8:ce:d5:11:18:da:31:d0:51:42:70:63:be:
                    ec:ae:7d:7e:b6:aa:ae:b7:d0:49:64:12:cb:7a:ae:
                    47:a4:8f:fd:db:60:04:af:60:29:0c:e8:bb:4d:b6:
                    1b:f9:51:53:1a:2c:8b:ef:51:5a:4d:c0:ef:f3:b7:
                    de:18:b5:39:89:03:0d:b5:6f:33:3a:76:f6:f1:0b:
                    9c:e7:50:eb:6b:09:2b:c6:7d:d8:89:96:23:55:63:
                    be:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:AA:23:1E:97:3D:F6:D5:AC:30:2E:DB:12:18:AC:FA:94:2E:54:C0
            X509v3 Authority Key Identifier:
                keyid:30:CB:0F:58:B1:D7:9A:75:9D:91:4A:F9:7B:A1:28:7C:39:FE:9D:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2cPtcDQGWGem1rgyqomM7k1KigumvXPzjf3GqBueYnEE/1/30CB0F58B1D79A759D914AF97BA1287C39FE9DFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30CB0F58B1D79A759D914AF97BA1287C39FE9DFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2cPtcDQGWGem1rgyqomM7k1KigumvXPzjf3GqBueYnEE/1/3230312e3135392e3132302e302f32322d3234203d3e203631383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:0b:c7:15:bf:9d:c5:93:bc:6d:79:e7:f1:2a:74:ac:ab:81:
         d9:2e:c0:c5:76:e9:a5:07:04:aa:b1:cb:8e:49:2c:9e:a0:0b:
         dd:5c:ff:6a:db:71:95:8b:f2:70:c0:04:86:3e:5f:d5:fa:3e:
         ab:d0:8b:08:32:cc:51:2f:d6:b4:7b:94:b1:47:c7:ec:25:cd:
         84:08:40:46:da:cd:24:9c:6a:90:c0:8b:41:81:4c:f5:3e:b2:
         20:d0:7e:65:0b:2d:8c:e5:49:2d:bb:66:e2:e0:2e:a9:4b:85:
         cb:b3:ed:90:40:7a:e7:20:55:fe:37:3c:c2:0f:33:5f:3d:65:
         90:f1:e6:06:4f:f8:a8:93:25:b4:c9:91:6b:79:3d:66:57:dd:
         f8:1b:95:93:e8:f5:41:d9:1d:5c:68:b2:0f:fe:ac:ce:4f:41:
         50:28:a3:d4:f8:de:68:35:67:ed:95:eb:21:1e:6c:90:6c:47:
         2e:d4:8b:7b:e4:5a:bc:3a:e1:4d:d7:b2:1b:aa:ab:95:9a:47:
         5b:bb:0c:a3:55:63:7a:4b:9c:d4:79:5b:c9:d8:a8:03:24:5c:
         bc:c9:8d:d5:6f:98:6b:08:33:7f:21:3b:1f:ce:1e:51:4a:b3:
         6d:80:0b:c1:30:21:f0:23:79:f1:76:d0:59:bd:3d:bc:a0:c1:
         02:06:d0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 14:26:48 2024 by rpki-client on console-ams.rpki-client.org