Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/3230302e3232392e38342e302f32322d3332203d3e203631373735.roa
File:                     3230302e3232392e38342e302f32322d3332203d3e203631373735.roa (raw, json)
Hash identifier:          bpuGcSyuJRj1DF+BKAIpUM75T7kk22krJbkb2cyEeiI=
Subject key identifier:   21:8B:39:B9:91:6A:DE:01:3D:B7:5B:9B:54:A2:D8:BF:48:E5:A4:91
Certificate issuer:       /CN=2A4DF9097F97664A00A318EFAE22DC1036E91B5C
Certificate serial:       502668AB8325F3BE5CD510424F4379DFF498120C
Authority key identifier: 2A:4D:F9:09:7F:97:66:4A:00:A3:18:EF:AE:22:DC:10:36:E9:1B:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/3230302e3232392e38342e302f32322d3332203d3e203631373735.roa
Signing time:             Thu 04 Apr 2024 20:47:02 +0000
ROA not before:           Thu 04 Apr 2024 20:42:02 +0000
ROA not after:            Thu 03 Apr 2025 20:47:02 +0000
asID:                     61775
IP address blocks:        200.229.84.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.crl
                          rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:16:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:26:68:ab:83:25:f3:be:5c:d5:10:42:4f:43:79:df:f4:98:12:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A4DF9097F97664A00A318EFAE22DC1036E91B5C
        Validity
            Not Before: Apr  4 20:42:02 2024 GMT
            Not After : Apr  3 20:47:02 2025 GMT
        Subject: CN=218B39B9916ADE013DB75B9B54A2D8BF48E5A491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:43:dc:c3:4b:42:37:3d:8f:34:8d:65:fe:10:
                    01:28:df:31:6a:46:62:54:27:31:c0:39:d4:f6:54:
                    13:ed:05:f5:6f:9d:59:f3:91:85:f0:75:9c:63:f6:
                    42:54:3d:ca:06:8a:92:f6:ea:5d:59:86:c0:ff:d0:
                    2b:1b:8f:72:9e:4b:5d:46:2b:11:7c:c7:9f:25:d7:
                    d0:36:89:b1:2e:d6:e5:31:7c:d4:45:b2:81:76:bb:
                    b9:78:bc:8a:59:e5:27:8f:5b:61:28:32:36:a0:0b:
                    02:54:6c:75:0b:9b:af:9f:b2:c9:8f:f5:5f:75:0c:
                    e9:ad:07:fb:6b:9e:70:1e:5a:ff:2f:2f:e2:85:2e:
                    d5:8d:74:63:23:b8:d4:90:11:22:72:54:08:b3:11:
                    70:d1:32:15:dc:08:37:c8:52:47:e1:e0:79:6b:59:
                    cb:a4:4f:a4:5c:4b:10:00:f3:a5:d6:01:f0:5e:20:
                    4d:96:0e:dd:45:f2:bc:6b:3b:7a:fb:ab:83:4e:11:
                    78:5e:bb:f3:79:61:11:da:14:99:e7:69:a8:8d:67:
                    b1:9f:cd:3d:4b:99:a1:37:e2:5b:22:48:40:a3:f4:
                    d9:c3:87:3d:b0:dd:5e:3b:a1:ac:12:ad:a4:1a:9e:
                    94:f4:df:d6:d6:11:85:6f:be:3c:d7:d5:14:9f:5c:
                    91:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:8B:39:B9:91:6A:DE:01:3D:B7:5B:9B:54:A2:D8:BF:48:E5:A4:91
            X509v3 Authority Key Identifier:
                keyid:2A:4D:F9:09:7F:97:66:4A:00:A3:18:EF:AE:22:DC:10:36:E9:1B:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/3230302e3232392e38342e302f32322d3332203d3e203631373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c7:aa:ca:52:41:7d:65:21:b8:ad:11:a3:9c:11:51:6b:15:2f:
         04:d5:95:b7:4b:4a:ae:d6:43:98:b5:09:46:67:06:1a:de:71:
         99:85:ae:08:d6:da:bc:68:bb:a3:44:62:49:bd:54:02:b1:fb:
         a4:84:5c:8b:e8:5e:9b:c5:e9:61:74:0e:6c:cf:b7:07:c8:e0:
         84:ec:ad:ec:bc:25:0e:65:c0:7e:75:86:3f:a7:34:85:c8:bd:
         8a:26:ab:7c:91:b0:31:fa:e6:5e:c7:82:21:8b:e7:79:7a:18:
         f1:05:39:01:60:6f:c0:e0:9f:64:c9:0a:27:6d:2e:d7:f4:6f:
         bf:22:51:61:1b:02:36:93:45:36:3a:3b:70:b7:6f:a2:32:11:
         54:c5:4a:b0:0a:4b:9a:4f:75:4e:3a:7f:50:ca:66:6c:d8:d2:
         93:df:79:62:b1:7b:c9:03:b3:82:3c:0e:70:7f:59:24:a7:51:
         eb:97:92:88:b0:3d:12:db:08:0b:9f:5b:e7:c8:77:25:ef:3f:
         e5:40:2a:a8:24:97:36:d8:0d:01:80:cc:86:f8:03:0c:d8:4c:
         e4:de:37:db:6f:94:71:8b:2e:7c:44:b8:88:a1:7a:bf:d8:5c:
         a8:61:b3:ca:ea:ad:bf:09:3a:40:51:eb:3b:18:a0:2f:80:d3:
         20:21:78:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:40 2024 by rpki-client on console-fra.rpki-client.org