Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/3230302e33392e36342e302f31392d3234203d3e203533303436.roa
File:                     3230302e33392e36342e302f31392d3234203d3e203533303436.roa (raw, json)
Hash identifier:          MRcXyI0TlEOfi1NedYnXkpGkWPAoWDvVPDKiC67WdWk=
Subject key identifier:   E2:28:0B:52:36:8E:82:BC:B8:AF:23:FF:83:65:9A:B3:B3:E7:80:2B
Certificate issuer:       /CN=CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3
Certificate serial:       3626DA7723E92053216CBA980AB5B78A76348984
Authority key identifier: CE:68:7B:DF:D3:E8:EB:AC:E7:EE:1E:A8:4F:7F:C1:BB:27:8B:3C:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/3230302e33392e36342e302f31392d3234203d3e203533303436.roa
Signing time:             Tue 04 Jun 2024 14:34:01 +0000
ROA not before:           Tue 04 Jun 2024 14:29:01 +0000
ROA not after:            Tue 03 Jun 2025 14:34:01 +0000
asID:                     53046
IP address blocks:        200.39.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.crl
                          rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 12:05:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:26:da:77:23:e9:20:53:21:6c:ba:98:0a:b5:b7:8a:76:34:89:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3
        Validity
            Not Before: Jun  4 14:29:01 2024 GMT
            Not After : Jun  3 14:34:01 2025 GMT
        Subject: CN=E2280B52368E82BCB8AF23FF83659AB3B3E7802B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f5:56:44:80:d8:ab:cd:9d:59:39:d6:5f:8e:
                    88:15:c5:d7:f2:0f:97:91:dd:34:aa:69:9e:e2:77:
                    9e:d8:56:b5:3b:31:b8:f6:5e:4d:e2:a8:56:1e:f9:
                    a2:62:96:aa:5f:dc:10:7a:e2:5c:a9:12:c7:66:0c:
                    60:51:c3:c2:33:c9:4e:19:c8:0a:52:60:87:b9:49:
                    77:3a:b5:cf:88:fb:e7:db:05:79:a2:40:6b:cf:9c:
                    d2:bc:cb:c4:84:53:86:f6:92:de:e2:c3:d8:9b:0c:
                    2e:21:e0:2a:c8:b5:f5:44:1e:99:0e:e6:11:dc:02:
                    77:a8:de:1b:19:ac:73:e5:ee:dc:4b:d1:1f:79:01:
                    84:67:18:25:28:46:13:d4:d7:dc:b2:42:a7:23:84:
                    f1:78:02:3e:f8:05:af:ea:65:63:62:19:35:ab:82:
                    4d:26:3b:87:4a:34:94:e2:98:08:9f:2b:03:ca:f7:
                    0c:73:f5:9e:fc:21:52:f0:3f:3b:89:3d:58:92:5f:
                    aa:77:27:65:62:55:df:c3:82:9c:ec:0e:33:71:8a:
                    56:ed:e4:cf:73:93:91:55:de:ab:3b:1f:69:b5:b2:
                    b6:8d:d8:9a:00:79:b0:2c:9a:a6:e7:b3:16:32:79:
                    61:2b:c7:32:bd:0f:a9:82:f3:a1:08:29:01:9c:62:
                    0c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:28:0B:52:36:8E:82:BC:B8:AF:23:FF:83:65:9A:B3:B3:E7:80:2B
            X509v3 Authority Key Identifier:
                keyid:CE:68:7B:DF:D3:E8:EB:AC:E7:EE:1E:A8:4F:7F:C1:BB:27:8B:3C:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/3230302e33392e36342e302f31392d3234203d3e203533303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9c:a8:74:e2:c9:60:0d:37:11:b9:e8:47:ae:2b:19:e3:df:66:
         fe:02:22:36:f6:57:c2:cd:a1:87:0d:f5:b5:3f:b5:da:02:c7:
         17:b9:47:23:cd:62:bf:94:d9:cb:ba:f4:91:03:1f:fc:dc:6d:
         a1:6f:40:1d:b5:0e:63:e2:a6:ce:48:f8:b3:bd:e1:c2:1d:af:
         99:cf:4e:d4:da:5d:a6:1d:74:4a:41:f0:bb:46:8e:1a:8b:de:
         22:3c:2f:f4:f5:4d:f1:8b:84:9a:3d:b8:8b:83:71:d6:34:c7:
         22:63:fa:6c:4a:d9:d7:d6:9d:2c:f5:9d:59:c6:4e:66:e3:a3:
         dc:03:f3:4d:5f:c1:04:f8:58:dd:fc:66:29:71:d4:15:3a:9b:
         ba:39:f3:89:34:2f:4e:4a:50:b0:9e:03:2c:63:02:a7:06:33:
         76:4f:44:22:3e:dc:3a:c8:bb:6c:d1:6f:9e:46:eb:6a:dc:17:
         36:48:71:5d:65:96:c8:e1:ce:90:86:a9:5d:94:05:37:a9:04:
         38:8b:e7:2e:22:a4:ee:10:a1:9d:e7:d7:61:9e:dd:c0:82:d2:
         de:86:49:e1:7d:67:f4:47:47:8c:83:08:50:cd:6b:5a:d9:69:
         96:5b:a2:97:9d:59:17:cf:cb:61:00:36:01:d4:75:4d:4f:74:
         65:20:24:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:54:55 2025 by rpki-client