Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/3230312e32332e3132382e302f31392d3234203d3e203232363839.roa
File:                     3230312e32332e3132382e302f31392d3234203d3e203232363839.roa (raw, json)
Hash identifier:          p7ezBGOzv7BCCztm9WkBNV6HRVXOonZuimac+H7AIYo=
Subject key identifier:   CB:0F:95:C0:B6:FD:34:E4:7C:2D:44:AA:B5:55:B3:90:BF:2D:E9:55
Certificate issuer:       /CN=B6DD0286E17B756E91475332E495995F85C36F08
Certificate serial:       13180D6CA018418789CBB2ED122FB2690BDD02EA
Authority key identifier: B6:DD:02:86:E1:7B:75:6E:91:47:53:32:E4:95:99:5F:85:C3:6F:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DD0286E17B756E91475332E495995F85C36F08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/3230312e32332e3132382e302f31392d3234203d3e203232363839.roa
Signing time:             Fri 05 Apr 2024 01:35:15 +0000
ROA not before:           Fri 05 Apr 2024 01:30:15 +0000
ROA not after:            Fri 04 Apr 2025 01:35:15 +0000
asID:                     22689
IP address blocks:        201.23.128.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/B6DD0286E17B756E91475332E495995F85C36F08.crl
                          rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/B6DD0286E17B756E91475332E495995F85C36F08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DD0286E17B756E91475332E495995F85C36F08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 16:48:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:18:0d:6c:a0:18:41:87:89:cb:b2:ed:12:2f:b2:69:0b:dd:02:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6DD0286E17B756E91475332E495995F85C36F08
        Validity
            Not Before: Apr  5 01:30:15 2024 GMT
            Not After : Apr  4 01:35:15 2025 GMT
        Subject: CN=CB0F95C0B6FD34E47C2D44AAB555B390BF2DE955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:c0:f7:80:1a:db:57:5c:01:d8:d7:fb:c7:c4:
                    9b:c2:4e:bc:de:0a:5d:d2:b4:b8:36:f7:e8:41:4b:
                    6a:3d:ec:e7:b1:96:53:c8:d8:f0:0e:e4:c0:97:52:
                    cc:09:b1:d3:7e:e3:bd:34:9d:26:d2:05:b4:35:81:
                    a9:d8:15:ef:38:cc:aa:a8:50:3f:1b:6a:3a:94:e3:
                    26:af:dd:fd:2e:ae:55:2c:ca:1f:96:b5:c8:0d:8b:
                    d6:b1:23:0a:26:37:ff:8b:86:2a:72:27:bd:a1:7d:
                    de:33:af:9a:48:fd:ec:23:6b:66:8b:3d:90:68:e2:
                    b0:e4:af:2c:19:bd:0b:12:a1:b6:5a:c7:47:73:78:
                    c6:b8:29:29:77:8e:fb:cb:2b:eb:c6:e2:7a:d9:a1:
                    31:18:f2:8f:f2:db:74:d6:c5:84:30:8b:7e:5c:7c:
                    6b:56:ae:64:53:b6:aa:62:b1:bc:a8:aa:e0:49:aa:
                    41:7a:b0:53:c4:98:58:31:e0:23:95:5f:8c:fb:2e:
                    17:40:90:82:15:97:22:60:57:eb:ea:a1:83:d3:69:
                    0d:8f:8f:c3:d4:d5:b0:6f:28:f9:94:b7:3d:f8:8a:
                    dc:a7:a0:93:f0:09:64:eb:a3:b7:48:2f:e9:48:b9:
                    1a:91:78:a0:67:48:bc:6a:83:37:ab:ad:d3:50:f2:
                    67:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:0F:95:C0:B6:FD:34:E4:7C:2D:44:AA:B5:55:B3:90:BF:2D:E9:55
            X509v3 Authority Key Identifier:
                keyid:B6:DD:02:86:E1:7B:75:6E:91:47:53:32:E4:95:99:5F:85:C3:6F:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/B6DD0286E17B756E91475332E495995F85C36F08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DD0286E17B756E91475332E495995F85C36F08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/3230312e32332e3132382e302f31392d3234203d3e203232363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.23.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         71:d6:64:c5:79:a7:cb:d9:b6:54:72:10:aa:30:a4:5b:ed:90:
         e6:9d:1f:b4:56:56:78:f8:e9:d7:8f:04:a4:59:33:c6:c4:d5:
         5e:0a:6c:96:5d:15:9c:21:5b:35:e2:45:b0:2a:3b:43:24:42:
         ff:d5:b8:14:02:41:b4:61:48:49:3a:58:6e:5e:b2:5b:f7:eb:
         79:da:fb:39:3a:5d:f2:f3:ef:18:0a:3e:d1:bf:5a:66:2e:e5:
         86:f3:23:c6:f1:d5:50:83:d0:3e:9d:1e:50:c2:19:de:3c:52:
         2b:93:8e:79:04:5c:85:96:c7:df:04:99:b5:43:26:13:22:87:
         12:fe:44:61:31:9a:56:ee:6c:ff:31:a4:73:a9:f9:b8:2e:d5:
         6c:3a:44:bb:18:4b:29:2a:33:b7:39:88:ea:81:6d:8f:d7:4c:
         f1:33:d2:ae:5b:70:b0:f7:13:56:36:62:bd:56:3a:27:66:9e:
         eb:6d:a7:e6:d4:07:3d:b3:f7:a9:27:04:c7:1b:ad:92:c1:7a:
         a0:3e:42:ce:c1:cf:36:38:50:a0:91:46:65:ad:e2:b1:ee:21:
         e2:87:54:7b:c4:88:f7:42:03:13:d7:1f:55:a9:37:63:28:94:
         77:b3:ff:d4:a4:0a:b3:f0:ce:dd:48:18:f1:87:23:1c:d2:98:
         39:17:1c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:27:46 2024 by rpki-client on console-fra.rpki-client.org