Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/3230302e3135352e33322e302f31392d3234203d3e203232363839.roa
File:                     3230302e3135352e33322e302f31392d3234203d3e203232363839.roa (raw, json)
Hash identifier:          B3C3M7SqfxP1Io33tb3QmHQGXUPqZD1zLEo3C4KQqBI=
Subject key identifier:   18:0F:35:76:E1:15:18:B2:8B:77:01:42:32:D3:40:58:DC:43:4F:E6
Certificate issuer:       /CN=B6DD0286E17B756E91475332E495995F85C36F08
Certificate serial:       612C753C9AA7E5444F7121CEB7F7AD50ADFE232C
Authority key identifier: B6:DD:02:86:E1:7B:75:6E:91:47:53:32:E4:95:99:5F:85:C3:6F:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DD0286E17B756E91475332E495995F85C36F08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/3230302e3135352e33322e302f31392d3234203d3e203232363839.roa
Signing time:             Fri 05 Apr 2024 01:35:15 +0000
ROA not before:           Fri 05 Apr 2024 01:30:15 +0000
ROA not after:            Fri 04 Apr 2025 01:35:15 +0000
asID:                     22689
IP address blocks:        200.155.32.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/B6DD0286E17B756E91475332E495995F85C36F08.crl
                          rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/B6DD0286E17B756E91475332E495995F85C36F08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DD0286E17B756E91475332E495995F85C36F08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:29:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:2c:75:3c:9a:a7:e5:44:4f:71:21:ce:b7:f7:ad:50:ad:fe:23:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6DD0286E17B756E91475332E495995F85C36F08
        Validity
            Not Before: Apr  5 01:30:15 2024 GMT
            Not After : Apr  4 01:35:15 2025 GMT
        Subject: CN=180F3576E11518B28B77014232D34058DC434FE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d2:36:a6:45:2d:d8:20:9f:c7:1c:8a:8a:c0:
                    54:3e:71:ad:c1:f0:2e:0a:ee:53:83:04:ef:1f:25:
                    1d:09:ac:7b:2d:b5:24:7a:e8:ef:85:96:55:32:94:
                    7a:3e:25:f1:15:39:37:de:49:56:3c:8e:72:33:3b:
                    03:d1:59:c4:67:e3:ae:ed:05:63:c3:26:7e:7c:e8:
                    98:a1:72:69:d7:26:4e:fe:81:89:5e:d3:a6:f0:64:
                    ae:32:ed:37:ca:b4:20:5c:1b:c2:4d:2d:67:79:bb:
                    b6:3d:21:6f:e7:26:8d:0b:67:7f:32:9c:70:1f:35:
                    f2:d0:8a:b4:d6:9c:79:65:c1:33:78:f3:e4:36:6b:
                    94:a8:f4:5b:4c:e9:47:f2:42:33:55:c6:83:fb:6c:
                    b8:c5:88:34:69:1b:f3:ba:f9:5d:6b:c7:bc:7f:96:
                    e6:e9:03:f7:53:25:77:4b:80:ac:36:7c:bd:c0:d9:
                    cd:fc:72:db:10:75:41:f0:40:89:66:c1:5d:88:32:
                    76:82:70:81:2c:ea:b1:2f:ad:52:94:8d:0f:f7:2c:
                    e5:42:10:d5:9f:30:05:98:03:93:fc:49:c6:21:9a:
                    52:42:09:2e:e4:f1:5f:2b:5a:c8:6d:fe:b6:67:71:
                    ec:6d:03:24:ad:29:9f:58:6d:da:e8:99:b7:4c:2c:
                    d9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:0F:35:76:E1:15:18:B2:8B:77:01:42:32:D3:40:58:DC:43:4F:E6
            X509v3 Authority Key Identifier:
                keyid:B6:DD:02:86:E1:7B:75:6E:91:47:53:32:E4:95:99:5F:85:C3:6F:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/B6DD0286E17B756E91475332E495995F85C36F08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DD0286E17B756E91475332E495995F85C36F08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/3230302e3135352e33322e302f31392d3234203d3e203232363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.155.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         47:e5:5f:77:60:4a:d1:dd:f0:4b:51:a3:26:57:c4:71:93:9d:
         30:dc:c1:de:64:80:58:7e:06:fc:c2:4f:63:cf:0b:c7:00:88:
         2c:de:36:a9:15:69:61:90:21:ff:39:f7:f6:b2:42:07:4d:e5:
         f8:42:92:33:6a:98:d6:db:5f:1e:74:cd:e1:c1:f2:0a:81:19:
         c5:2a:95:8d:d9:76:34:47:84:17:b6:8a:ce:55:a5:c9:d2:9e:
         17:99:fe:d8:8e:85:9a:4c:2a:c9:ec:e5:18:58:64:aa:fa:ff:
         50:19:d9:72:85:71:31:94:da:60:3d:66:12:c3:67:10:13:81:
         85:b5:d8:1f:3f:c9:92:31:78:5d:f7:1b:77:db:d3:25:97:2b:
         13:79:cf:e7:4d:b7:45:04:33:52:d2:3c:87:97:e1:f3:48:52:
         1c:4c:f7:c9:f4:9c:71:7e:74:3d:38:40:d9:d2:ad:38:c3:dc:
         45:50:84:22:55:ee:c8:52:ac:b4:a0:e0:74:ae:61:f3:53:c3:
         9a:6e:b9:60:aa:7c:4e:26:e2:f2:42:ff:96:d5:f3:4a:24:f5:
         41:02:d5:86:0c:fa:37:8f:48:2a:22:37:e0:e5:83:fa:05:94:
         06:f6:c8:96:a5:20:fa:a4:89:84:94:cf:19:21:0a:35:67:70:
         f5:de:1c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:08 2024 by rpki-client on console-fra.rpki-client.org