Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4niNMbKxUFqTvuiNomjnEYU2VgEVtYEDaMS7H23Sgqg8/1/3230312e3133302e32302e302f32322d3234203d3e203631383232.roa
File:                     3230312e3133302e32302e302f32322d3234203d3e203631383232.roa (raw, json)
Hash identifier:          vDmTEvumASCHc/EB7sliO2U0isK6VRPFm7rrgiWAF4s=
Subject key identifier:   0E:89:68:6A:F5:B6:B4:2B:09:52:B4:1F:D4:13:68:12:0F:E7:38:36
Certificate issuer:       /CN=D83644536B842CD15686D699796D2336D6F94682
Certificate serial:       43FA1AF77FB51D0A24B9FFFC7ADC34C66290A218
Authority key identifier: D8:36:44:53:6B:84:2C:D1:56:86:D6:99:79:6D:23:36:D6:F9:46:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83644536B842CD15686D699796D2336D6F94682.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4niNMbKxUFqTvuiNomjnEYU2VgEVtYEDaMS7H23Sgqg8/1/3230312e3133302e32302e302f32322d3234203d3e203631383232.roa
Signing time:             Wed 03 Apr 2024 18:32:34 +0000
ROA not before:           Wed 03 Apr 2024 18:27:34 +0000
ROA not after:            Wed 02 Apr 2025 18:32:34 +0000
asID:                     61822
IP address blocks:        201.130.20.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4niNMbKxUFqTvuiNomjnEYU2VgEVtYEDaMS7H23Sgqg8/1/D83644536B842CD15686D699796D2336D6F94682.crl
                          rsync://rpki-repo.registro.br/repo/4niNMbKxUFqTvuiNomjnEYU2VgEVtYEDaMS7H23Sgqg8/1/D83644536B842CD15686D699796D2336D6F94682.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83644536B842CD15686D699796D2336D6F94682.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:fa:1a:f7:7f:b5:1d:0a:24:b9:ff:fc:7a:dc:34:c6:62:90:a2:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D83644536B842CD15686D699796D2336D6F94682
        Validity
            Not Before: Apr  3 18:27:34 2024 GMT
            Not After : Apr  2 18:32:34 2025 GMT
        Subject: CN=3082010A0282010100A55BA5DF5C45783B784A3B08E4FA23354DFFB7424CB3CC25459BB7430ED03968A1DDBA2C15867878424BA0EF4EF40A457972C57C1837DD35A1FD8932B4AFD6E339742A36CF0BDE1B5CB0D0A30AEF40F3390262D4B328BFB104B621EECE871DFE6E4349EBE7AB8A73A51A13AECBA56EFF50B8511F212E1102324CF991827BCFC0E267C01C87364317ED112AC5E3AA8F708D0A432BF1B4492B4A96D658D480275EF304C7B6460114CB190AF18DEF3D0A15AB00602C98657B87F2FF521F9F58EB8F3A13D27DD43F8828F97917D6F172D020CE7F5AD559341CD68372746FEAEC619BAC3D858C90C3C86B150CB022B3BA4D31C97A9818D4527C35B5EFD3E80D96111B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5b:a5:df:5c:45:78:3b:78:4a:3b:08:e4:fa:
                    23:35:4d:ff:b7:42:4c:b3:cc:25:45:9b:b7:43:0e:
                    d0:39:68:a1:dd:ba:2c:15:86:78:78:42:4b:a0:ef:
                    4e:f4:0a:45:79:72:c5:7c:18:37:dd:35:a1:fd:89:
                    32:b4:af:d6:e3:39:74:2a:36:cf:0b:de:1b:5c:b0:
                    d0:a3:0a:ef:40:f3:39:02:62:d4:b3:28:bf:b1:04:
                    b6:21:ee:ce:87:1d:fe:6e:43:49:eb:e7:ab:8a:73:
                    a5:1a:13:ae:cb:a5:6e:ff:50:b8:51:1f:21:2e:11:
                    02:32:4c:f9:91:82:7b:cf:c0:e2:67:c0:1c:87:36:
                    43:17:ed:11:2a:c5:e3:aa:8f:70:8d:0a:43:2b:f1:
                    b4:49:2b:4a:96:d6:58:d4:80:27:5e:f3:04:c7:b6:
                    46:01:14:cb:19:0a:f1:8d:ef:3d:0a:15:ab:00:60:
                    2c:98:65:7b:87:f2:ff:52:1f:9f:58:eb:8f:3a:13:
                    d2:7d:d4:3f:88:28:f9:79:17:d6:f1:72:d0:20:ce:
                    7f:5a:d5:59:34:1c:d6:83:72:74:6f:ea:ec:61:9b:
                    ac:3d:85:8c:90:c3:c8:6b:15:0c:b0:22:b3:ba:4d:
                    31:c9:7a:98:18:d4:52:7c:35:b5:ef:d3:e8:0d:96:
                    11:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:89:68:6A:F5:B6:B4:2B:09:52:B4:1F:D4:13:68:12:0F:E7:38:36
            X509v3 Authority Key Identifier:
                keyid:D8:36:44:53:6B:84:2C:D1:56:86:D6:99:79:6D:23:36:D6:F9:46:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4niNMbKxUFqTvuiNomjnEYU2VgEVtYEDaMS7H23Sgqg8/1/D83644536B842CD15686D699796D2336D6F94682.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83644536B842CD15686D699796D2336D6F94682.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4niNMbKxUFqTvuiNomjnEYU2VgEVtYEDaMS7H23Sgqg8/1/3230312e3133302e32302e302f32322d3234203d3e203631383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.130.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:f8:72:b6:67:42:a9:90:44:81:bc:84:97:82:06:f2:d3:a2:
         d4:a1:19:54:2c:06:08:1a:13:86:a0:05:6c:f9:cc:3b:b1:7e:
         01:eb:99:aa:27:60:c1:83:34:1f:76:60:21:93:35:c8:7e:50:
         12:02:5e:bf:d2:63:bb:28:98:ae:74:9f:98:7d:ed:1f:21:8b:
         28:1a:6c:54:16:db:47:ba:39:e6:34:f5:23:f1:fd:f0:0e:09:
         d3:1e:83:2e:b0:2e:6a:f5:fb:f8:dd:42:75:a6:65:36:79:22:
         ca:44:00:d9:38:7c:11:31:f9:77:95:c5:23:61:bd:d7:f5:87:
         21:51:25:87:80:b0:88:9f:69:71:8f:f5:87:01:7a:9a:e1:9c:
         a1:7d:96:7d:fb:b0:ae:be:f2:95:28:28:b1:f9:94:c2:70:48:
         8b:47:7a:91:6b:e8:d5:ee:0c:a7:d3:34:c2:ac:dd:64:3b:03:
         8d:f9:82:d0:4b:be:15:c3:29:9c:b5:b2:ad:7d:9d:b4:1f:89:
         75:91:8b:21:81:f6:41:77:5a:22:9b:10:cb:26:22:6b:70:c1:
         a3:e7:ba:28:7b:83:be:02:f0:fb:08:3c:a1:6f:f8:a8:68:35:
         64:f0:56:0f:03:d0:da:42:96:08:f2:3a:05:1f:32:b2:1a:30:
         1f:75:45:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:57 2024 by rpki-client on console-ams.rpki-client.org