Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/2/3230302e302e36342e302f32342d3234203d3e20323731313830.roa
File:                     3230302e302e36342e302f32342d3234203d3e20323731313830.roa (raw, json)
Hash identifier:          O2PvaX8MStIPfCaUBD+VMkNIQYW2aayK5GId4ojGLwc=
Subject key identifier:   1E:84:57:F7:6A:D4:10:EC:49:58:E9:A3:07:48:10:B5:80:38:27:4C
Certificate issuer:       /CN=A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D
Certificate serial:       5A35148FF712BCA253D2EF8C53CE985B3965CE5F
Authority key identifier: A8:BA:F5:6D:A9:19:0A:5B:F5:A9:6D:F8:EA:B0:FD:B9:0D:3F:37:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/2/3230302e302e36342e302f32342d3234203d3e20323731313830.roa
Signing time:             Mon 23 Sep 2024 18:51:59 +0000
ROA not before:           Mon 23 Sep 2024 18:46:59 +0000
ROA not after:            Mon 22 Sep 2025 18:51:59 +0000
asID:                     271180
IP address blocks:        200.0.64.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/2/A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D.crl
                          rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/2/A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:10:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:35:14:8f:f7:12:bc:a2:53:d2:ef:8c:53:ce:98:5b:39:65:ce:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D
        Validity
            Not Before: Sep 23 18:46:59 2024 GMT
            Not After : Sep 22 18:51:59 2025 GMT
        Subject: CN=1E8457F76AD410EC4958E9A3074810B58038274C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:29:86:ed:35:6c:89:49:a9:30:00:fe:b9:04:
                    dd:2e:3c:74:45:46:bc:a9:75:29:5b:55:d8:1b:cc:
                    8f:ea:f7:ee:64:ed:67:1c:d4:01:b9:f0:4d:ae:e7:
                    ed:54:b9:e2:f7:ed:55:ac:e7:f8:eb:fe:04:0b:94:
                    dd:16:b7:ba:14:d4:03:ed:68:20:01:22:fd:80:7f:
                    58:0d:97:40:6b:8d:b3:4d:5b:69:f2:71:7c:b9:dd:
                    68:ab:cb:01:ba:d0:7e:c9:7e:94:b1:10:e3:6e:14:
                    4f:5c:68:fe:97:24:fb:4c:97:14:09:c1:9b:f3:d0:
                    e6:2a:a7:06:19:18:d5:e9:22:88:ba:8e:8f:d9:8e:
                    8b:49:cc:22:d6:5f:a3:3c:c0:9c:1a:9c:83:27:63:
                    6a:c8:1c:1b:d0:61:dd:df:0b:4e:86:8a:39:d6:7e:
                    cd:ab:52:91:76:1f:93:0a:4d:3f:39:dc:fc:cf:82:
                    0a:9b:5c:05:d2:65:06:31:2f:b8:98:0a:d7:91:3b:
                    78:a3:71:4a:2c:41:e8:cd:de:ce:a7:84:85:f9:ee:
                    d4:0e:79:0b:ea:82:eb:d4:34:24:30:8c:51:4a:2f:
                    f6:e6:61:1a:39:58:3f:f4:8b:df:3d:4f:57:61:73:
                    0c:95:d7:4e:ba:0d:54:c7:bb:6a:6f:34:12:9a:5b:
                    7e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:84:57:F7:6A:D4:10:EC:49:58:E9:A3:07:48:10:B5:80:38:27:4C
            X509v3 Authority Key Identifier:
                keyid:A8:BA:F5:6D:A9:19:0A:5B:F5:A9:6D:F8:EA:B0:FD:B9:0D:3F:37:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/2/A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/2/3230302e302e36342e302f32342d3234203d3e20323731313830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:80:9f:d7:33:6d:37:db:a2:bf:61:79:b0:3f:07:1a:b0:9b:
         a8:2d:c0:56:1e:03:89:0d:cf:35:db:95:f6:f8:c4:a6:07:0b:
         4b:03:4f:6d:ae:48:29:40:10:01:f6:72:47:f9:61:d4:83:a0:
         9b:fc:41:62:97:0f:1a:33:78:91:51:4b:79:aa:af:15:8a:74:
         79:95:11:ab:30:a5:be:4c:f7:ca:e0:9b:b8:40:18:0f:04:93:
         4f:5f:9d:f6:78:33:55:ae:c4:26:30:c7:66:c0:49:77:98:0c:
         05:7a:cf:d4:7e:1d:d3:0e:ea:06:53:1c:75:49:df:42:a5:54:
         cd:2d:d2:52:c6:9f:ec:89:7b:03:cb:c6:ea:86:55:9a:a5:a3:
         f7:57:a1:f2:ba:ef:2f:c1:a7:4f:b8:8f:9d:cd:68:86:5b:25:
         3b:13:f7:56:bf:6f:e6:d7:bb:10:4f:ab:af:2e:b4:be:a1:e6:
         4f:d1:27:59:7e:a8:4f:20:60:fa:81:eb:1e:8c:e8:48:2e:d4:
         85:12:c3:3f:a1:6e:e9:2d:c7:af:18:de:ba:72:75:f8:63:19:
         6f:21:bf:e3:b3:78:c7:82:18:04:11:50:52:0b:38:2f:7b:ef:
         d3:1d:62:92:e4:20:59:5c:af:ce:de:ee:ed:48:f5:cf:5f:03:
         e7:52:57:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:08 2024 by rpki-client on console-ams.rpki-client.org