Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uoef8oNQrTCLDFNvGuTPY9sqXxK9XXbH4BmwAk11e7b/1/3230302e3138372e39362e302f32322d3234203d3e20323730363832.roa
File:                     3230302e3138372e39362e302f32322d3234203d3e20323730363832.roa (raw, json)
Hash identifier:          16lZ6cEsPd2OkwhqqvRewdJIzEZbNqe2ahZUssnI3sI=
Subject key identifier:   15:93:05:81:42:A3:7F:FD:D6:E4:8B:BB:1D:3C:BA:53:05:68:46:94
Certificate issuer:       /CN=FFC6D87C33255DE718EF9A38A927C4C09C5A2A27
Certificate serial:       77157B7880027EA2F7C55088AB81C02DBD2F78A8
Authority key identifier: FF:C6:D8:7C:33:25:5D:E7:18:EF:9A:38:A9:27:C4:C0:9C:5A:2A:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFC6D87C33255DE718EF9A38A927C4C09C5A2A27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uoef8oNQrTCLDFNvGuTPY9sqXxK9XXbH4BmwAk11e7b/1/3230302e3138372e39362e302f32322d3234203d3e20323730363832.roa
Signing time:             Thu 04 Apr 2024 21:14:29 +0000
ROA not before:           Thu 04 Apr 2024 21:09:29 +0000
ROA not after:            Thu 03 Apr 2025 21:14:29 +0000
asID:                     270682
IP address blocks:        200.187.96.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uoef8oNQrTCLDFNvGuTPY9sqXxK9XXbH4BmwAk11e7b/1/FFC6D87C33255DE718EF9A38A927C4C09C5A2A27.crl
                          rsync://rpki-repo.registro.br/repo/5uoef8oNQrTCLDFNvGuTPY9sqXxK9XXbH4BmwAk11e7b/1/FFC6D87C33255DE718EF9A38A927C4C09C5A2A27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFC6D87C33255DE718EF9A38A927C4C09C5A2A27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:15:7b:78:80:02:7e:a2:f7:c5:50:88:ab:81:c0:2d:bd:2f:78:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFC6D87C33255DE718EF9A38A927C4C09C5A2A27
        Validity
            Not Before: Apr  4 21:09:29 2024 GMT
            Not After : Apr  3 21:14:29 2025 GMT
        Subject: CN=1593058142A37FFDD6E48BBB1D3CBA5305684694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c3:70:48:cc:7e:20:f0:97:f9:10:70:fb:86:
                    71:6d:47:90:a9:4e:09:b2:82:ba:fd:4f:55:6f:7a:
                    07:12:cc:b1:5a:e5:aa:07:49:e3:42:4b:a2:a2:b0:
                    2a:41:44:36:07:5b:29:e1:93:1e:64:f5:82:08:bb:
                    12:ed:1e:3a:65:b4:c0:68:fd:05:d7:9f:6e:18:a3:
                    75:55:49:74:27:0f:bf:89:7a:24:da:84:d0:27:3b:
                    cf:95:86:54:9a:64:1c:38:94:6a:9f:ae:dd:bb:70:
                    6e:c1:be:11:c1:7e:65:3a:4e:70:d2:0a:d8:af:97:
                    20:2d:ac:91:f8:52:66:28:bd:33:38:3c:da:dc:61:
                    9c:dd:cd:e1:6d:cf:9e:aa:f7:8b:5e:b6:66:d0:ba:
                    2f:ea:b8:68:4c:af:04:cb:bd:e7:01:39:48:3a:30:
                    69:39:71:b2:70:1a:b8:c7:14:c1:ad:17:20:fe:90:
                    b7:69:75:af:f8:1f:bf:d0:f9:c6:8f:18:73:ca:4e:
                    a9:af:67:9a:45:43:0b:90:5e:09:c3:55:15:be:cf:
                    91:37:9d:ba:b7:c9:2b:e7:90:80:6d:2c:1d:d7:4d:
                    c4:8f:87:b4:52:57:85:56:92:a0:b6:eb:2f:64:6c:
                    be:66:7a:c4:0c:94:f3:66:82:8e:ca:d6:87:ff:bc:
                    d5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:93:05:81:42:A3:7F:FD:D6:E4:8B:BB:1D:3C:BA:53:05:68:46:94
            X509v3 Authority Key Identifier:
                keyid:FF:C6:D8:7C:33:25:5D:E7:18:EF:9A:38:A9:27:C4:C0:9C:5A:2A:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uoef8oNQrTCLDFNvGuTPY9sqXxK9XXbH4BmwAk11e7b/1/FFC6D87C33255DE718EF9A38A927C4C09C5A2A27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFC6D87C33255DE718EF9A38A927C4C09C5A2A27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uoef8oNQrTCLDFNvGuTPY9sqXxK9XXbH4BmwAk11e7b/1/3230302e3138372e39362e302f32322d3234203d3e20323730363832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.187.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:b2:1a:fb:ee:df:d8:f0:38:ab:b1:5c:7d:de:54:ed:ee:29:
         5b:b6:0b:48:51:17:a5:f9:1c:f6:d9:7b:76:16:1b:a6:03:9c:
         aa:05:81:a2:13:d3:f1:af:b0:66:94:26:3a:db:d6:5a:eb:fa:
         2d:5c:cf:72:81:ca:4b:cf:f0:be:80:a0:4a:73:bb:f4:ab:27:
         20:39:7e:30:cb:7d:67:cf:15:8a:7c:70:d4:26:3f:17:e9:53:
         4f:ea:94:34:ef:83:b8:a6:3f:1f:13:db:f3:d9:e6:40:ff:a6:
         a7:52:db:09:b3:bf:18:a1:45:89:1f:04:ac:03:c7:e5:c1:33:
         01:45:e4:bf:cc:70:34:44:92:ef:36:a0:b0:ac:12:76:7e:ba:
         b1:ae:05:a6:b9:5f:f8:06:de:15:41:45:3f:ff:4b:a0:03:18:
         24:8d:a2:bd:76:0a:66:e3:05:6b:9f:cb:61:7d:73:01:ae:6e:
         37:35:a0:b7:62:56:e3:70:4f:01:cd:01:38:31:a7:c2:71:e0:
         42:c9:3f:f3:0f:5b:ca:56:f7:54:2d:05:1b:53:29:1c:6e:40:
         c0:f1:6f:e5:27:66:ba:3d:81:84:4d:ba:1a:43:77:90:a9:ce:
         f3:50:f4:cc:83:0f:87:19:48:4f:c7:58:96:f9:4e:5a:e5:a0:
         2c:3d:4f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:04 2024 by rpki-client on console-fra.rpki-client.org