Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5HtXJVQF4SKYzuYoc3pVQNRyDz9VEtfaPCSRxYxyxomi/0/3230302e31342e3132302e302f32322d3332203d3e20323730353733.roa
File:                     3230302e31342e3132302e302f32322d3332203d3e20323730353733.roa (raw, json)
Hash identifier:          R3bYxB4yN3oC/bG6ccKLZXaf1YgZS94vJpyuyDRVfgY=
Subject key identifier:   9C:09:CE:69:B7:04:8C:91:5E:1E:7B:67:55:26:47:3C:7F:83:9E:6E
Certificate issuer:       /CN=EB3DDB9DA271DDC34000AF73E9188813B8EE650A
Certificate serial:       386507452B2988DFCBB29DBA775EB9C65F149415
Authority key identifier: EB:3D:DB:9D:A2:71:DD:C3:40:00:AF:73:E9:18:88:13:B8:EE:65:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB3DDB9DA271DDC34000AF73E9188813B8EE650A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5HtXJVQF4SKYzuYoc3pVQNRyDz9VEtfaPCSRxYxyxomi/0/3230302e31342e3132302e302f32322d3332203d3e20323730353733.roa
Signing time:             Thu 17 Oct 2024 15:12:06 +0000
ROA not before:           Thu 17 Oct 2024 15:07:06 +0000
ROA not after:            Thu 16 Oct 2025 15:12:06 +0000
asID:                     270573
IP address blocks:        200.14.120.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5HtXJVQF4SKYzuYoc3pVQNRyDz9VEtfaPCSRxYxyxomi/0/EB3DDB9DA271DDC34000AF73E9188813B8EE650A.crl
                          rsync://rpki-repo.registro.br/repo/5HtXJVQF4SKYzuYoc3pVQNRyDz9VEtfaPCSRxYxyxomi/0/EB3DDB9DA271DDC34000AF73E9188813B8EE650A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB3DDB9DA271DDC34000AF73E9188813B8EE650A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 18:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:65:07:45:2b:29:88:df:cb:b2:9d:ba:77:5e:b9:c6:5f:14:94:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB3DDB9DA271DDC34000AF73E9188813B8EE650A
        Validity
            Not Before: Oct 17 15:07:06 2024 GMT
            Not After : Oct 16 15:12:06 2025 GMT
        Subject: CN=9C09CE69B7048C915E1E7B675526473C7F839E6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fe:d1:7d:7f:45:14:4b:af:84:c6:11:ca:46:
                    6b:e4:6d:55:29:2e:66:7c:1f:ed:de:44:6a:6b:d4:
                    98:3a:16:02:be:bb:af:71:ef:5c:cb:81:8d:0e:4d:
                    a9:96:ff:36:ed:13:87:3b:2c:ef:02:e7:37:53:ef:
                    ed:cc:12:bb:68:98:ad:01:04:ee:9f:fd:18:03:d7:
                    2f:ab:2d:19:0c:32:0a:ab:0d:75:eb:3b:c1:b3:bb:
                    c9:0c:53:9b:60:28:7e:05:c8:d6:44:f0:09:d1:49:
                    a1:12:36:fe:b3:ab:1b:06:d4:56:a1:4d:34:3d:68:
                    07:78:67:e6:7f:af:37:fa:56:fd:e4:92:d2:a4:b3:
                    54:d2:64:f6:8a:be:c3:41:7c:7b:30:f0:84:27:63:
                    0c:e8:a4:22:f4:42:dc:1c:17:95:e8:c9:f4:2f:ea:
                    9b:2e:b2:5c:20:93:d1:14:16:be:49:8a:73:5a:7d:
                    73:00:51:f0:e7:9e:7a:bf:28:b7:e4:46:55:7e:9c:
                    d5:54:3c:34:b7:a5:6b:bb:b2:8c:fe:19:7b:d7:c0:
                    45:41:47:ae:22:a2:c2:e2:72:af:93:f4:f1:7a:74:
                    4d:18:00:44:ac:d1:8e:ac:21:2f:05:8d:54:32:2f:
                    a3:2a:15:e5:8c:69:a3:b2:da:7c:0b:94:10:1a:9a:
                    10:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:09:CE:69:B7:04:8C:91:5E:1E:7B:67:55:26:47:3C:7F:83:9E:6E
            X509v3 Authority Key Identifier:
                keyid:EB:3D:DB:9D:A2:71:DD:C3:40:00:AF:73:E9:18:88:13:B8:EE:65:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5HtXJVQF4SKYzuYoc3pVQNRyDz9VEtfaPCSRxYxyxomi/0/EB3DDB9DA271DDC34000AF73E9188813B8EE650A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB3DDB9DA271DDC34000AF73E9188813B8EE650A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5HtXJVQF4SKYzuYoc3pVQNRyDz9VEtfaPCSRxYxyxomi/0/3230302e31342e3132302e302f32322d3332203d3e20323730353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:19:37:73:f9:c7:db:a4:63:80:86:20:2e:02:31:f3:c0:86:
         97:e3:85:55:cb:a6:03:d8:77:57:10:05:db:38:c0:37:7b:4e:
         44:ca:43:05:7f:5c:b2:a5:17:e6:e8:1f:93:f0:43:3b:07:e4:
         5a:f2:bd:cc:74:6e:79:a1:c9:80:96:bc:bc:f7:6f:ed:d5:fd:
         36:b6:33:e6:4f:70:cb:ab:1f:f2:24:55:93:8c:04:b3:9d:66:
         e0:df:12:46:b8:ed:46:a7:19:08:e9:3b:d8:67:d6:c2:c2:77:
         fb:47:74:d0:a7:16:91:79:a3:03:de:98:c2:99:5b:05:57:7e:
         94:6e:db:bd:82:b2:45:05:4a:4a:80:0e:76:dd:8f:ec:ec:53:
         0c:6c:cb:10:43:ca:2b:7b:58:29:75:d9:1e:15:8e:89:15:a8:
         e1:b7:38:99:04:5e:2f:55:03:d8:46:f9:9c:56:c1:dc:83:a2:
         06:b9:8c:96:6c:1f:af:89:d4:d6:a2:9b:61:0e:34:e5:fb:d9:
         6e:98:6e:b6:aa:71:c1:4f:44:58:99:8a:94:e7:84:3f:91:61:
         a0:fc:94:2c:41:68:c8:73:ea:37:da:dc:f2:59:85:65:0a:01:
         bc:cd:a1:17:f7:16:5a:93:4a:f9:ed:d5:5d:94:8f:dc:d9:51:
         8e:f0:27:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:31:50 2024 by rpki-client on console-fra.rpki-client.org