Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3230302e3232302e3135322e302f32312d3234203d3e203238353736.roa
File:                     3230302e3232302e3135322e302f32312d3234203d3e203238353736.roa (raw, json)
Hash identifier:          wjBjbi/Np3Xi+AdbMB2H2i9Ln28jF5mZGZebW8N1BYc=
Subject key identifier:   5B:1B:6D:3C:C9:1F:CA:B2:62:8F:10:29:10:4E:72:16:44:49:45:A3
Certificate issuer:       /CN=BD1E87C8514998E362292741C70F693178FDD20E
Certificate serial:       34D11069123B4A28D6DB56BCF613FF5C52C95DCA
Authority key identifier: BD:1E:87:C8:51:49:98:E3:62:29:27:41:C7:0F:69:31:78:FD:D2:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3230302e3232302e3135322e302f32312d3234203d3e203238353736.roa
Signing time:             Fri 24 May 2024 22:32:37 +0000
ROA not before:           Fri 24 May 2024 22:27:37 +0000
ROA not after:            Fri 23 May 2025 22:32:37 +0000
asID:                     28576
IP address blocks:        200.220.152.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.crl
                          rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 05:13:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:d1:10:69:12:3b:4a:28:d6:db:56:bc:f6:13:ff:5c:52:c9:5d:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD1E87C8514998E362292741C70F693178FDD20E
        Validity
            Not Before: May 24 22:27:37 2024 GMT
            Not After : May 23 22:32:37 2025 GMT
        Subject: CN=5B1B6D3CC91FCAB2628F1029104E7216444945A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a0:25:1a:a8:ee:a8:e1:3a:18:45:31:bc:10:
                    61:da:64:db:f8:ce:b8:2a:89:56:1f:bc:79:fc:84:
                    f9:e4:48:8d:28:02:ed:73:86:cb:09:db:43:f8:33:
                    91:90:35:3b:48:ad:e4:4a:b0:86:1c:47:7f:78:29:
                    dd:dc:bc:b3:b4:b5:28:84:87:d2:30:b8:89:8e:b1:
                    25:17:76:4a:78:75:2f:6d:ba:43:7b:18:66:63:71:
                    3c:cd:fb:47:8c:77:b7:57:46:d7:0b:b4:c1:58:70:
                    2e:60:5e:61:be:1a:c5:6e:6f:91:85:2e:45:f5:aa:
                    67:82:9d:6a:ee:57:19:c4:05:51:fb:85:33:2c:df:
                    cb:54:59:fc:1e:80:8c:c6:05:1e:b4:de:1e:a2:01:
                    eb:08:32:96:1b:53:be:91:9e:f6:61:e8:2e:c2:bc:
                    79:35:48:a7:84:ea:29:f0:38:3b:4d:7d:dc:93:5b:
                    23:16:90:8f:1e:a0:32:cc:59:54:87:ce:71:f2:f8:
                    5e:51:54:51:4e:20:c4:72:73:68:06:0a:ee:f8:fc:
                    46:c4:28:a3:5f:e7:e0:dd:b3:fb:67:25:31:12:52:
                    99:b3:fa:2a:e6:a9:c8:52:4b:c8:e7:ce:f5:3e:bf:
                    53:7e:1a:61:4a:f3:e7:f6:21:66:bf:8c:51:11:c8:
                    f0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:1B:6D:3C:C9:1F:CA:B2:62:8F:10:29:10:4E:72:16:44:49:45:A3
            X509v3 Authority Key Identifier:
                keyid:BD:1E:87:C8:51:49:98:E3:62:29:27:41:C7:0F:69:31:78:FD:D2:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3230302e3232302e3135322e302f32312d3234203d3e203238353736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         69:72:8f:e7:b4:52:b1:a5:32:8b:57:cf:f7:58:6d:c5:a4:f7:
         22:60:ee:05:f5:b6:10:05:94:3a:68:5d:bb:95:e7:eb:81:1d:
         fd:05:1b:e9:57:14:49:96:7f:d3:0a:5e:30:1f:5d:cf:e5:ce:
         8e:b7:ec:bf:17:40:b5:61:b1:96:50:e1:8a:83:0e:73:0b:03:
         70:bc:4c:32:c1:d6:49:32:44:72:d1:75:6a:b7:12:26:14:c8:
         ba:6c:3f:31:03:d0:e7:f7:e6:3e:fe:b0:a1:d9:32:09:d4:be:
         4d:64:13:95:c3:d3:37:f2:fe:00:1d:27:55:51:90:75:33:b6:
         12:be:c0:93:53:6d:b8:2b:5a:db:f5:5e:93:52:18:58:14:8d:
         91:9d:18:f2:7d:bd:d4:23:d6:f7:86:ea:fe:eb:eb:44:bf:4b:
         7c:73:61:7d:f8:e8:78:6a:ee:b9:72:76:6c:0f:cd:bf:23:38:
         10:12:d1:e0:b7:16:e3:c3:b5:d7:87:4d:72:91:2a:d8:6a:09:
         cc:b2:bf:94:b7:90:2e:b4:3b:40:db:e0:64:f0:a6:a9:bf:48:
         e8:17:9b:ec:13:8e:b9:6d:3e:6c:af:29:f9:e2:0b:92:50:da:
         33:d7:fb:7b:42:f0:d9:0e:ff:8b:65:46:6e:64:85:58:af:72:
         f4:c0:1c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:38 2024 by rpki-client on console-fra.rpki-client.org