Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/3230302e3231382e3235342e302f32332d3233203d3e203238353934.roa
File:                     3230302e3231382e3235342e302f32332d3233203d3e203238353934.roa (raw, json)
Hash identifier:          3dEh3KxyhEiIBOYLBY2gaB4ZkA6k72z7e5BknSFAbIc=
Subject key identifier:   B4:2A:CA:B9:92:FD:87:0E:7E:5A:18:A2:81:DE:A9:85:7D:6E:57:AD
Certificate issuer:       /CN=9C0B0F9C917C39C4E0A392991B6A86E0D4917406
Certificate serial:       0AED900A118E282834E153FFF5FB9B66D7A89072
Authority key identifier: 9C:0B:0F:9C:91:7C:39:C4:E0:A3:92:99:1B:6A:86:E0:D4:91:74:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/3230302e3231382e3235342e302f32332d3233203d3e203238353934.roa
Signing time:             Thu 04 Apr 2024 00:53:37 +0000
ROA not before:           Thu 04 Apr 2024 00:48:37 +0000
ROA not after:            Thu 03 Apr 2025 00:53:37 +0000
asID:                     28594
IP address blocks:        200.218.254.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.crl
                          rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:ed:90:0a:11:8e:28:28:34:e1:53:ff:f5:fb:9b:66:d7:a8:90:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C0B0F9C917C39C4E0A392991B6A86E0D4917406
        Validity
            Not Before: Apr  4 00:48:37 2024 GMT
            Not After : Apr  3 00:53:37 2025 GMT
        Subject: CN=B42ACAB992FD870E7E5A18A281DEA9857D6E57AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:92:1d:3b:36:94:59:3d:66:73:73:37:34:61:
                    82:e0:18:4c:b7:59:83:45:cf:5f:f6:d3:f7:bb:1c:
                    49:d0:3e:39:da:5d:1e:cb:18:e6:71:84:ef:3c:07:
                    e0:21:9d:0e:5c:3a:af:b0:eb:bc:d9:55:a2:2c:b8:
                    0a:0d:de:8c:6d:fe:31:34:de:db:3f:30:2a:cf:c5:
                    23:a5:f4:eb:1d:82:3d:17:83:d1:e4:88:81:67:78:
                    58:4e:02:c1:68:7d:11:34:1e:a7:37:c9:9f:0e:2d:
                    16:78:bb:59:37:56:58:f4:5c:7d:6b:3f:cf:5d:d2:
                    eb:28:6e:3d:01:92:a6:04:4b:c1:0e:40:f0:70:8a:
                    4a:5d:02:bb:7d:11:a3:d5:c1:c1:cc:5b:0d:ca:e5:
                    20:8c:d2:21:b6:c5:f3:ef:34:fc:ba:56:06:24:e6:
                    4a:ba:fb:db:ff:3a:dc:59:d2:e6:3e:43:04:93:41:
                    e3:20:05:5d:c8:a8:88:b5:a5:e8:8e:4e:c5:2c:12:
                    34:28:40:e2:44:e6:3d:26:4d:1f:cb:1d:f3:49:ea:
                    9f:08:c6:44:1d:80:37:a7:0e:02:f7:55:54:92:c0:
                    78:cb:48:1f:2f:33:5f:3e:d0:23:9c:8b:cf:6c:7a:
                    d4:d5:e1:7e:81:2f:94:a2:da:27:2a:2d:85:4f:8c:
                    c6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:2A:CA:B9:92:FD:87:0E:7E:5A:18:A2:81:DE:A9:85:7D:6E:57:AD
            X509v3 Authority Key Identifier:
                keyid:9C:0B:0F:9C:91:7C:39:C4:E0:A3:92:99:1B:6A:86:E0:D4:91:74:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/3230302e3231382e3235342e302f32332d3233203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b4:2a:a8:77:b4:74:ec:05:fd:09:aa:72:85:96:18:42:9c:ce:
         d5:be:1e:8b:9a:03:15:fc:15:51:44:39:9b:e1:29:ca:28:15:
         74:d7:e7:89:2e:d9:5b:9d:f4:82:43:db:8f:a7:95:fd:53:e9:
         67:aa:14:fc:06:06:75:dd:77:e6:bd:c7:d4:25:06:a1:a1:2a:
         35:1a:d5:c1:05:d2:86:d6:97:d6:54:18:6c:a6:f0:01:7e:92:
         2f:39:68:95:de:e4:31:1a:6f:d7:34:19:5e:b2:cb:55:35:df:
         06:f3:5b:5c:4c:1a:7f:d9:56:cf:09:bc:18:93:e5:7a:dd:62:
         52:ad:92:1c:cd:35:cd:e1:ff:11:61:13:ac:f2:df:45:89:0f:
         eb:3b:db:4b:14:85:2c:c4:eb:d6:a6:aa:34:71:71:33:b2:8b:
         7a:67:ca:a9:14:af:52:75:70:3a:98:a8:1f:fe:59:53:ce:c8:
         9d:4b:fb:8d:9c:d9:ec:cf:ea:c6:ea:b8:e6:c2:84:23:8a:55:
         d3:c7:a7:00:27:37:6d:12:92:79:be:4f:a5:ad:7b:80:59:05:
         eb:16:a5:6d:25:58:b5:f8:ad:5e:76:47:d6:3a:36:04:8c:c1:
         29:9d:a7:f9:46:17:4b:dd:87:2b:9b:f0:e1:0d:36:b2:72:2b:
         8e:fa:02:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:15 2024 by rpki-client on console-fra.rpki-client.org