Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/3230312e33332e3134342e302f32302d3234203d3e203131393933.roa
File:                     3230312e33332e3134342e302f32302d3234203d3e203131393933.roa (raw, json)
Hash identifier:          CjUIEtpnww7hu0vYzCPSWJHcalt8PqrLLgARdWKBil0=
Subject key identifier:   75:E6:D1:E7:91:62:4C:34:0F:8D:68:CE:A0:64:8C:78:2A:07:2F:BF
Certificate issuer:       /CN=6321913B8F265DB266263684C1BC420640061E1A
Certificate serial:       5DC3B99990D520A9C052AF8F33FF6DE6B012778F
Authority key identifier: 63:21:91:3B:8F:26:5D:B2:66:26:36:84:C1:BC:42:06:40:06:1E:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6321913B8F265DB266263684C1BC420640061E1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/3230312e33332e3134342e302f32302d3234203d3e203131393933.roa
Signing time:             Thu 04 Apr 2024 06:05:07 +0000
ROA not before:           Thu 04 Apr 2024 06:00:07 +0000
ROA not after:            Thu 03 Apr 2025 06:05:07 +0000
asID:                     11993
IP address blocks:        201.33.144.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/6321913B8F265DB266263684C1BC420640061E1A.crl
                          rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/6321913B8F265DB266263684C1BC420640061E1A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6321913B8F265DB266263684C1BC420640061E1A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:c3:b9:99:90:d5:20:a9:c0:52:af:8f:33:ff:6d:e6:b0:12:77:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6321913B8F265DB266263684C1BC420640061E1A
        Validity
            Not Before: Apr  4 06:00:07 2024 GMT
            Not After : Apr  3 06:05:07 2025 GMT
        Subject: CN=75E6D1E791624C340F8D68CEA0648C782A072FBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:14:2d:90:aa:09:5f:3a:33:ce:91:2a:b8:e5:
                    76:b3:71:a9:92:80:ae:cb:bb:ef:18:61:fb:28:2d:
                    ba:41:2d:c1:80:34:6f:1d:18:b9:56:f1:df:65:74:
                    ee:28:42:bf:17:26:79:be:d6:c0:61:de:97:b4:d3:
                    76:06:82:d3:d2:80:f1:bd:28:6f:bb:55:08:ca:43:
                    d5:da:68:6e:d9:13:06:d6:3b:de:18:3d:71:e5:2e:
                    9d:23:f4:ae:f1:a2:2b:e7:cd:5a:8e:d2:1a:43:88:
                    8a:57:f4:ec:6d:50:7b:09:73:0c:8c:fc:5f:32:82:
                    01:0a:5f:28:ea:e9:70:1a:d1:3c:a3:1b:03:55:13:
                    5a:e0:67:57:53:46:de:83:a9:9f:90:31:f6:9d:93:
                    9e:84:d4:57:73:44:5c:22:dd:8b:9a:29:d0:39:2b:
                    a3:1d:3c:3d:15:75:1d:f7:bc:04:96:00:15:cb:59:
                    c9:85:44:aa:af:ea:78:14:16:fb:61:c0:3f:4a:5f:
                    0b:7e:54:4c:a5:79:61:5c:19:57:58:a3:23:19:db:
                    ed:47:72:1f:ad:77:79:76:4c:38:45:6e:ee:c6:0b:
                    be:ce:5f:13:1c:67:d6:6c:b5:6f:3b:e9:ea:85:3e:
                    05:2e:8e:68:58:67:ca:0f:0c:18:0c:6f:8b:3c:81:
                    30:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E6:D1:E7:91:62:4C:34:0F:8D:68:CE:A0:64:8C:78:2A:07:2F:BF
            X509v3 Authority Key Identifier:
                keyid:63:21:91:3B:8F:26:5D:B2:66:26:36:84:C1:BC:42:06:40:06:1E:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/6321913B8F265DB266263684C1BC420640061E1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6321913B8F265DB266263684C1BC420640061E1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/3230312e33332e3134342e302f32302d3234203d3e203131393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.33.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         19:a3:6f:47:4b:d0:8b:03:9c:f2:e0:00:5b:6e:f3:6a:09:56:
         46:b9:5e:61:40:cf:c9:40:4f:7f:f5:80:62:ea:86:55:e4:ec:
         f5:ba:46:ca:db:84:9d:77:ce:d3:2c:c2:d9:87:06:85:00:ee:
         5e:a9:1f:06:24:a8:3b:77:ff:9c:99:ea:43:b1:62:d1:9d:0e:
         6f:bd:0a:ce:15:a5:af:b2:47:e9:0d:c8:65:a8:31:d6:8e:4d:
         8e:ca:d9:97:80:92:70:59:42:de:61:c0:df:b5:cd:02:ff:0f:
         24:91:26:98:55:66:21:13:bb:5d:44:b9:61:e4:fd:45:c4:db:
         8c:e3:1d:42:07:fc:fc:a3:80:fd:f6:6b:b5:fc:8d:92:84:53:
         d7:e1:8c:8a:0c:8d:39:ed:07:cd:fe:5a:57:a4:15:9f:d5:61:
         58:51:92:06:4c:d5:b1:97:09:16:3c:00:0a:42:08:41:a2:8a:
         02:83:a3:d6:2a:f6:8f:d4:5e:3c:2d:80:28:ac:e8:76:b8:72:
         70:18:f6:50:7c:1c:e2:8a:7f:87:22:0c:f9:3a:0d:76:4e:7b:
         44:b7:c8:56:cf:37:27:41:82:32:2c:ef:d7:15:93:9d:30:a2:
         fb:66:02:92:59:b8:6e:87:b3:61:95:73:c5:7f:51:75:36:e0:
         7f:cb:8d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:08 2024 by rpki-client on console-fra.rpki-client.org