Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/3230302e3230322e3132382e302f31382d3138203d3e203131303937.roa
File:                     3230302e3230322e3132382e302f31382d3138203d3e203131303937.roa (raw, json)
Hash identifier:          OkutLj4e7JyHVW2LGlPUP0jIifoIUOZgjO7Y2YcXVhU=
Subject key identifier:   43:E6:F6:9A:4B:AF:4A:BF:E4:21:97:98:76:17:6D:2A:ED:25:DB:BA
Certificate issuer:       /CN=BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C
Certificate serial:       60E040CEEC8C734B750AEB6684C27DB2B5F44162
Authority key identifier: BC:61:E6:D5:F8:50:C8:FF:71:4F:E8:34:B7:A2:E7:1D:62:AB:BC:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/3230302e3230322e3132382e302f31382d3138203d3e203131303937.roa
Signing time:             Tue 03 Sep 2024 18:32:40 +0000
ROA not before:           Tue 03 Sep 2024 18:27:40 +0000
ROA not after:            Tue 02 Sep 2025 18:32:40 +0000
asID:                     11097
IP address blocks:        200.202.128.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C.crl
                          rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:e0:40:ce:ec:8c:73:4b:75:0a:eb:66:84:c2:7d:b2:b5:f4:41:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C
        Validity
            Not Before: Sep  3 18:27:40 2024 GMT
            Not After : Sep  2 18:32:40 2025 GMT
        Subject: CN=43E6F69A4BAF4ABFE421979876176D2AED25DBBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e5:03:a5:dd:fd:23:09:15:a3:34:05:b6:f4:
                    80:22:46:7c:1a:61:da:57:c0:15:f3:c9:fc:fb:7f:
                    19:29:c3:79:f4:6b:bc:96:3b:3f:66:88:e7:48:b0:
                    4c:6d:0f:87:8c:c0:35:3a:5e:1f:89:6c:9d:a1:02:
                    91:8d:99:1a:cc:99:2c:d2:7d:fe:64:a8:4b:fa:95:
                    d4:21:f8:dc:8b:e5:86:93:8b:60:e7:c8:38:e3:99:
                    ee:9c:10:d3:57:c5:2e:43:23:d6:7d:4a:3c:60:ac:
                    7f:79:1b:e3:7e:e0:a5:82:ea:9f:2a:92:39:c3:4e:
                    f9:37:e8:91:a2:fd:a0:c2:ce:0f:e7:94:28:e7:01:
                    a4:5f:82:2b:1f:e1:dd:ef:c8:de:ce:a6:b5:3f:b0:
                    60:d2:68:55:c6:d7:4e:1e:df:fd:28:c1:fe:87:27:
                    e8:57:f6:dd:c2:e1:e4:97:b7:36:2f:39:9e:4f:a8:
                    fb:b0:09:e4:b8:51:ca:ef:d4:ef:f4:7b:a9:07:95:
                    f6:b5:71:a8:a8:8a:1f:13:88:ff:f0:cc:5c:38:9e:
                    b1:e9:80:f8:fa:ec:f8:59:68:e5:ce:54:b6:2f:21:
                    6c:35:e0:ee:71:c3:b3:3f:43:84:e0:6c:e4:4c:93:
                    e3:e1:2b:00:df:61:25:d7:59:f1:b7:84:35:3d:bb:
                    6b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:E6:F6:9A:4B:AF:4A:BF:E4:21:97:98:76:17:6D:2A:ED:25:DB:BA
            X509v3 Authority Key Identifier:
                keyid:BC:61:E6:D5:F8:50:C8:FF:71:4F:E8:34:B7:A2:E7:1D:62:AB:BC:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/3230302e3230322e3132382e302f31382d3138203d3e203131303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.202.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         01:90:a1:57:bd:32:b9:d3:52:b7:d7:34:94:8a:62:cd:5e:11:
         d2:55:67:0c:5c:83:1d:82:8e:67:1e:02:50:0f:c3:25:99:98:
         56:2f:e9:48:e3:6d:6c:43:68:65:8a:d2:ed:be:a3:ae:6e:26:
         d7:93:74:98:ac:14:ed:b9:fd:c3:ed:13:48:a3:ea:81:0a:d2:
         0c:66:3d:87:9d:75:83:da:af:77:d1:bb:db:70:ff:9f:4b:76:
         59:4f:57:52:e4:70:a0:87:ae:b9:92:cd:1b:94:f7:ad:45:d4:
         81:12:67:97:cb:02:fa:ec:7c:09:55:64:c9:fc:94:ef:cb:e7:
         c2:56:82:e8:84:af:ea:47:30:72:2e:5d:20:97:33:5e:ff:50:
         75:f3:ed:31:eb:a1:88:1b:08:79:58:25:b9:0f:61:e2:d1:0c:
         a8:c1:8e:6c:f7:ca:db:6c:72:2f:8b:41:d7:4f:be:6e:3f:58:
         bb:55:94:4c:18:35:82:2c:55:78:f3:ec:27:ef:2e:29:e9:34:
         ca:f2:b7:73:f0:bd:1e:58:da:64:d6:0b:66:6d:de:30:db:40:
         8f:fa:ee:87:a8:8c:fd:d3:43:72:ab:b6:3a:ec:ce:96:d2:b7:
         0f:32:df:92:6c:ac:af:96:5e:cc:a4:06:a3:33:7f:87:71:3d:
         94:6f:f1:92
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYOBAzuyMc0t1CutmhMJ9srX0QWIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkM2MUU2RDVGODUwQzhGRjcxNEZFODM0QjdBMkU3MUQ2
MkFCQkM1QzAeFw0yNDA5MDMxODI3NDBaFw0yNTA5MDIxODMyNDBaMDMxMTAvBgNV
BAMTKDQzRTZGNjlBNEJBRjRBQkZFNDIxOTc5ODc2MTc2RDJBRUQyNURCQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk5QOl3f0jCRWjNAW29IAiRnwa
YdpXwBXzyfz7fxkpw3n0a7yWOz9miOdIsExtD4eMwDU6Xh+JbJ2hApGNmRrMmSzS
ff5kqEv6ldQh+NyL5YaTi2DnyDjjme6cENNXxS5DI9Z9SjxgrH95G+N+4KWC6p8q
kjnDTvk36JGi/aDCzg/nlCjnAaRfgisf4d3vyN7OprU/sGDSaFXG104e3/0owf6H
J+hX9t3C4eSXtzYvOZ5PqPuwCeS4Ucrv1O/0e6kHlfa1caioih8TiP/wzFw4nrHp
gPj67PhZaOXOVLYvIWw14O5xw7M/Q4TgbORMk+PhKwDfYSXXWfG3hDU9u2tXAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUQ+b2mkuvSr/kIZeYdhdtKu0l27owHwYDVR0j
BBgwFoAUvGHm1fhQyP9xT+g0t6LnHWKrvFwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFoybm9zVVFQYnRtQkp4V0d4RkVmMUozM1p4VTZZak5TY3NOZFAxdVBp
ZWUvMC9CQzYxRTZENUY4NTBDOEZGNzE0RkU4MzRCN0EyRTcxRDYyQUJCQzVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JDNjFFNkQ1Rjg1MEM4RkY3
MTRGRTgzNEI3QTJFNzFENjJBQkJDNUMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRaMm5vc1VRUGJ0bUJKeFdHeEZFZjFKMzNaeFU2WWpOU2NzTmRQMXVQaWVlLzAv
MzIzMDMwMmUzMjMwMzIyZTMxMzIzODJlMzAyZjMxMzgyZDMxMzgyMDNkM2UyMDMx
MzEzMDM5Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAbIyoAwDQYJKoZIhvcNAQELBQADggEBAAGQoVe9
MrnTUrfXNJSKYs1eEdJVZwxcgx2CjmceAlAPwyWZmFYv6UjjbWxDaGWK0u2+o65u
JteTdJisFO25/cPtE0ij6oEK0gxmPYeddYPar3fRu9tw/59LdllPV1LkcKCHrrmS
zRuU961F1IESZ5fLAvrsfAlVZMn8lO/L58JWguiEr+pHMHIuXSCXM17/UHXz7THr
oYgbCHlYJbkPYeLRDKjBjmz3yttsci+LQddPvm4/WLtVlEwYNYIsVXjz7CfvLinp
NMryt3PwvR5Y2mTWC2Zt3jDbQI/67oeojP3TQ3KrtjrszpbStw8y35JsrK+WXsyk
BqMzf4dxPZRv8ZI=
-----END CERTIFICATE-----
Generated at Sat Nov 23 07:29:58 2024 by rpki-client on console-fra.rpki-client.org