Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/3230312e3135302e3132342e302f32342d3234203d3e203631383736.roa
File:                     3230312e3135302e3132342e302f32342d3234203d3e203631383736.roa (raw, json)
Hash identifier:          +N7CDk4KdTJFe6il7z4dhlJ2i/YFPzNwtbNOJsxlIp0=
Subject key identifier:   CD:67:22:1E:E6:F3:2B:E7:0F:D5:BC:08:09:51:54:B8:50:BC:92:31
Certificate issuer:       /CN=4FD2257689EE83DB094839D2005FC336CC9380AC
Certificate serial:       5E64EDCC11F9A3BA1CCEF1EC6144033DAE21F2C7
Authority key identifier: 4F:D2:25:76:89:EE:83:DB:09:48:39:D2:00:5F:C3:36:CC:93:80:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FD2257689EE83DB094839D2005FC336CC9380AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/3230312e3135302e3132342e302f32342d3234203d3e203631383736.roa
Signing time:             Tue 21 Jan 2025 16:49:45 +0000
ROA not before:           Tue 21 Jan 2025 16:44:45 +0000
ROA not after:            Tue 20 Jan 2026 16:49:45 +0000
asID:                     61876
IP address blocks:        201.150.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/4FD2257689EE83DB094839D2005FC336CC9380AC.crl
                          rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/4FD2257689EE83DB094839D2005FC336CC9380AC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FD2257689EE83DB094839D2005FC336CC9380AC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 05:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:64:ed:cc:11:f9:a3:ba:1c:ce:f1:ec:61:44:03:3d:ae:21:f2:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FD2257689EE83DB094839D2005FC336CC9380AC
        Validity
            Not Before: Jan 21 16:44:45 2025 GMT
            Not After : Jan 20 16:49:45 2026 GMT
        Subject: CN=CD67221EE6F32BE70FD5BC08095154B850BC9231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fb:87:36:6e:0f:e2:af:fb:01:ca:16:43:25:
                    88:ec:86:10:80:17:ea:64:88:af:92:5e:e3:63:25:
                    85:93:d9:a2:6a:87:59:f9:87:f2:c7:55:27:e9:8e:
                    8e:50:fa:47:b8:ca:ca:bf:8e:9e:4d:62:97:c6:b6:
                    42:f4:21:ad:de:6b:39:35:de:5d:4a:1f:af:5f:99:
                    44:f2:77:1c:21:b5:73:02:91:b2:24:29:18:c4:4f:
                    2b:ea:3b:c8:28:3a:a4:95:df:f3:16:3a:25:03:e1:
                    d0:fb:f8:91:ca:95:de:46:9b:4e:92:39:f3:07:37:
                    e5:a8:1c:c4:b1:6f:91:26:45:4d:93:9f:2d:04:48:
                    9c:49:5e:ff:d2:7e:e0:2a:40:99:60:e1:11:df:fb:
                    60:57:d7:7a:2c:93:b7:98:f5:22:16:73:ec:65:b2:
                    fa:32:78:d7:b2:a9:e4:53:9f:87:10:80:0d:ee:50:
                    37:59:df:0c:79:35:e1:cd:fb:be:99:16:6b:8e:28:
                    89:1d:0b:c6:25:5e:78:2c:55:7e:7f:56:4a:b3:e1:
                    7a:f5:ed:54:ae:0f:73:3e:bf:57:bb:ef:b5:4d:9f:
                    1f:8d:89:c8:f3:2a:d1:5b:98:3e:65:b7:33:a3:de:
                    5b:98:f7:44:32:0d:db:f4:2d:87:46:f7:75:59:2b:
                    07:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:67:22:1E:E6:F3:2B:E7:0F:D5:BC:08:09:51:54:B8:50:BC:92:31
            X509v3 Authority Key Identifier:
                keyid:4F:D2:25:76:89:EE:83:DB:09:48:39:D2:00:5F:C3:36:CC:93:80:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/4FD2257689EE83DB094839D2005FC336CC9380AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FD2257689EE83DB094839D2005FC336CC9380AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/3230312e3135302e3132342e302f32342d3234203d3e203631383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.150.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:93:a2:38:47:85:5e:c4:e4:32:e3:8d:13:17:ad:66:74:65:
         c6:d1:84:30:e9:3f:06:7b:4a:8b:60:88:af:04:15:f4:7e:12:
         d0:3d:e3:2a:a1:77:fe:7c:75:3d:ac:6c:45:af:a4:8c:04:1b:
         8e:de:c0:ad:66:b1:18:4b:a4:c6:38:44:c4:bb:3c:ea:21:05:
         96:44:47:e1:e9:6b:74:b1:72:07:67:71:41:fd:2a:7e:ba:6d:
         03:a5:e4:b3:e7:af:5a:b7:9d:67:f4:65:fa:7c:68:a5:21:c4:
         6e:76:5f:50:e9:0e:1a:06:b8:13:4c:13:0d:40:8a:cb:24:cb:
         17:4a:fb:f0:b4:74:11:7b:12:77:25:e3:56:b4:1f:38:8d:65:
         46:5d:33:a2:e3:e9:e9:10:10:f2:7b:4a:07:e9:e6:c8:9f:7a:
         f7:c0:c3:41:fb:5b:f8:5e:75:0b:4b:72:b2:7e:78:26:69:9d:
         89:2a:3b:96:6b:53:4d:5e:04:da:84:a9:a8:e2:e0:dc:9a:62:
         37:8e:63:63:7e:95:73:28:f3:a3:a0:bf:3e:5a:be:1f:36:c9:
         b4:20:63:b5:7e:af:10:57:60:18:26:f3:0a:70:67:aa:45:26:
         95:fa:5a:67:38:43:ba:57:36:eb:b9:db:5d:6f:70:21:04:cf:
         ab:81:82:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:50 2025 by rpki-client