Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/3230302e3231382e3234302e302f32332d3233203d3e203238353934.roa
File:                     3230302e3231382e3234302e302f32332d3233203d3e203238353934.roa (raw, json)
Hash identifier:          eEz4YwFssofI0qaaWsfhpI5MT2yizpoCfC9563hFqHc=
Subject key identifier:   84:61:CE:3C:EA:60:65:53:0A:9C:F7:A7:F0:4E:F3:CF:6F:11:CB:D9
Certificate issuer:       /CN=9C0B0F9C917C39C4E0A392991B6A86E0D4917406
Certificate serial:       0AD6FE2AEA9358A6A485550FB7EC7D63A11AF922
Authority key identifier: 9C:0B:0F:9C:91:7C:39:C4:E0:A3:92:99:1B:6A:86:E0:D4:91:74:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/3230302e3231382e3234302e302f32332d3233203d3e203238353934.roa
Signing time:             Thu 04 Apr 2024 00:53:38 +0000
ROA not before:           Thu 04 Apr 2024 00:48:38 +0000
ROA not after:            Thu 03 Apr 2025 00:53:38 +0000
asID:                     28594
IP address blocks:        200.218.240.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.crl
                          rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:d6:fe:2a:ea:93:58:a6:a4:85:55:0f:b7:ec:7d:63:a1:1a:f9:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C0B0F9C917C39C4E0A392991B6A86E0D4917406
        Validity
            Not Before: Apr  4 00:48:38 2024 GMT
            Not After : Apr  3 00:53:38 2025 GMT
        Subject: CN=8461CE3CEA6065530A9CF7A7F04EF3CF6F11CBD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:71:af:d4:58:4d:4b:f6:db:be:9e:76:d8:e7:
                    95:e3:4d:4f:cc:e2:e9:9f:64:a7:fb:61:a7:f2:44:
                    df:e0:a8:c2:3b:19:c8:42:c0:8f:a3:dd:a4:7d:3a:
                    51:03:e7:09:27:af:b0:0a:de:f5:d9:fb:29:70:36:
                    3c:35:76:7e:25:b3:1d:df:ba:61:83:72:88:72:fe:
                    c6:e4:cc:82:5e:b8:21:db:c9:d9:b8:07:05:59:12:
                    ed:57:d5:b8:dd:f0:94:15:1a:ab:52:70:f9:9a:db:
                    d2:a9:1b:31:b8:e5:cd:b0:30:ed:fc:ea:54:99:7e:
                    3b:23:b0:a4:7d:05:bf:8c:e6:91:be:a1:99:33:e2:
                    28:de:94:0c:77:23:9d:21:e4:0e:a3:5d:81:ac:67:
                    03:9f:d7:34:a5:3d:10:dd:70:1c:43:d9:1d:42:df:
                    cb:a5:81:46:c4:e0:7b:1f:79:97:be:26:e3:a8:ec:
                    ab:7e:d0:87:3a:94:79:5c:81:bd:95:a9:64:78:f2:
                    1d:5a:f1:99:38:91:b0:81:e4:97:d6:0b:df:9c:d2:
                    ac:41:79:f7:d3:82:19:dc:2a:1b:9f:74:d0:84:08:
                    da:f0:05:0c:65:2f:75:6f:9f:fc:c7:da:86:0d:a0:
                    ea:2b:25:9c:0a:d0:da:7c:69:30:e5:73:a6:06:72:
                    20:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:61:CE:3C:EA:60:65:53:0A:9C:F7:A7:F0:4E:F3:CF:6F:11:CB:D9
            X509v3 Authority Key Identifier:
                keyid:9C:0B:0F:9C:91:7C:39:C4:E0:A3:92:99:1B:6A:86:E0:D4:91:74:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/3230302e3231382e3234302e302f32332d3233203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:0a:ea:f0:01:17:8b:1f:f5:dc:56:8b:9e:99:02:7e:91:b5:
         82:cd:82:29:b3:9f:90:9a:67:2f:bf:fb:d4:4f:4d:4e:73:40:
         c8:5c:6b:11:94:18:61:1d:a4:a0:c3:68:8b:03:33:e3:ef:db:
         ec:99:aa:e9:c8:4a:b8:2c:a7:9f:0f:e0:ff:8a:3e:64:8b:3d:
         36:b9:c5:d7:19:bb:97:64:da:cd:8a:bd:7c:40:a0:2d:4a:b3:
         82:3c:ee:e8:ce:0f:b5:a9:79:5f:19:a9:65:59:94:cd:06:38:
         50:e0:6c:7c:2a:bb:2e:d0:85:59:4c:7d:dd:70:35:e9:02:44:
         2b:89:a3:46:de:aa:29:55:d0:a7:7e:e4:e2:8c:59:40:dd:96:
         c2:fc:ed:7b:8b:ed:b9:0b:81:cb:c8:c8:66:4e:e9:fa:0e:cf:
         7a:cd:08:3e:1e:12:1f:bf:0a:54:b4:af:ef:90:10:78:7a:33:
         be:6a:3b:83:94:26:db:c7:4b:37:08:d4:05:b4:59:51:a3:07:
         99:43:63:29:f9:91:00:97:6d:58:50:9e:7a:3e:9d:da:52:3a:
         9f:77:43:88:27:22:8c:46:43:52:5d:28:f1:35:8f:5f:56:c6:
         8a:69:fe:21:49:30:69:8d:4a:11:c7:b3:79:a4:c3:37:61:6c:
         11:ea:4b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:15 2024 by rpki-client on console-fra.rpki-client.org