Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/3230312e35342e36342e302f31382d3234203d3e203232363839.roa
File:                     3230312e35342e36342e302f31382d3234203d3e203232363839.roa (raw, json)
Hash identifier:          aqhs6Lgo10iHfo6pezqqdGEuu9hsqiceFHhYyyvBx+4=
Subject key identifier:   67:3F:C0:AD:CE:4B:64:0B:14:B6:2A:EC:21:EE:44:D7:A7:04:7C:B7
Certificate issuer:       /CN=B6DD0286E17B756E91475332E495995F85C36F08
Certificate serial:       76079EFDF4CFB74923094FE574C42F9000D89850
Authority key identifier: B6:DD:02:86:E1:7B:75:6E:91:47:53:32:E4:95:99:5F:85:C3:6F:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DD0286E17B756E91475332E495995F85C36F08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/3230312e35342e36342e302f31382d3234203d3e203232363839.roa
Signing time:             Fri 05 Apr 2024 01:35:14 +0000
ROA not before:           Fri 05 Apr 2024 01:30:14 +0000
ROA not after:            Fri 04 Apr 2025 01:35:14 +0000
asID:                     22689
IP address blocks:        201.54.64.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/B6DD0286E17B756E91475332E495995F85C36F08.crl
                          rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/B6DD0286E17B756E91475332E495995F85C36F08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DD0286E17B756E91475332E495995F85C36F08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:07:9e:fd:f4:cf:b7:49:23:09:4f:e5:74:c4:2f:90:00:d8:98:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6DD0286E17B756E91475332E495995F85C36F08
        Validity
            Not Before: Apr  5 01:30:14 2024 GMT
            Not After : Apr  4 01:35:14 2025 GMT
        Subject: CN=673FC0ADCE4B640B14B62AEC21EE44D7A7047CB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:83:26:98:59:15:19:54:3d:39:83:8a:cc:47:
                    dc:76:df:0a:41:72:a1:7c:c9:f7:f8:c5:88:f4:32:
                    e6:69:2e:a3:34:ec:bd:32:d8:95:c8:5a:f1:c7:86:
                    ce:92:ee:d6:57:e7:49:b3:38:53:72:48:db:60:42:
                    d3:b3:fd:37:7e:28:ee:f2:df:45:16:35:bc:32:9f:
                    75:ae:93:2a:fd:68:75:af:c4:a7:d6:0c:b8:07:2c:
                    13:2e:f0:03:0b:eb:02:d1:3c:b4:3f:cc:da:cf:8b:
                    78:ae:76:0d:ad:ff:ac:f0:cf:de:d5:7e:25:ef:56:
                    93:23:9a:7c:55:8b:8f:ab:a6:73:84:4e:df:d8:f0:
                    41:a7:ee:22:b3:6e:93:4e:a8:83:f3:dc:40:1e:5f:
                    cd:27:a5:aa:25:97:7c:81:8c:36:8a:e4:5c:5f:16:
                    4e:56:bc:57:68:9d:98:ed:6c:4d:d7:d9:42:cb:c2:
                    87:10:61:bb:eb:a0:5a:88:14:e5:ef:4b:70:27:54:
                    46:00:e1:3b:c1:2e:00:91:92:49:34:68:77:d7:0e:
                    af:ab:2f:7c:0c:3e:5b:79:f2:b1:9a:ea:a9:3e:07:
                    38:7c:01:17:be:4d:52:b8:54:b1:ec:e9:56:87:85:
                    d9:ba:f3:31:f1:56:32:cf:d5:be:b9:6e:cc:58:dc:
                    e4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:3F:C0:AD:CE:4B:64:0B:14:B6:2A:EC:21:EE:44:D7:A7:04:7C:B7
            X509v3 Authority Key Identifier:
                keyid:B6:DD:02:86:E1:7B:75:6E:91:47:53:32:E4:95:99:5F:85:C3:6F:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/B6DD0286E17B756E91475332E495995F85C36F08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DD0286E17B756E91475332E495995F85C36F08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/3230312e35342e36342e302f31382d3234203d3e203232363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.54.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         8f:ab:50:39:a9:b9:6f:35:64:b6:d6:4b:ab:a6:ee:d1:ff:13:
         18:32:a1:6e:4a:fc:13:f6:a6:72:19:0a:f1:58:47:fb:0c:b0:
         87:4e:b1:84:2b:18:3f:e7:e1:28:d6:55:66:c9:95:87:19:bf:
         56:0a:f8:38:d6:90:48:2d:1f:b6:63:bb:d9:07:b1:8a:ce:3d:
         98:c9:b5:27:bd:ba:88:f7:44:67:ec:3e:aa:e9:1c:93:dd:f6:
         7e:85:92:ef:78:6b:5b:c3:d2:28:b3:ec:79:b3:c8:a0:0c:2e:
         81:9a:56:6c:2f:12:0a:0d:1c:cb:e5:00:30:b6:4e:60:0b:8e:
         2d:e3:b7:4b:56:e9:56:95:6b:af:f1:7a:55:a2:60:af:54:5e:
         8b:b3:b7:89:9c:ae:d4:f3:1e:50:e2:ad:5b:92:d9:52:94:02:
         12:56:56:75:57:37:f2:cd:a1:3f:4d:17:fd:47:79:b1:ee:7b:
         7e:e3:a5:8e:10:0e:4b:26:ec:1c:40:99:a4:c8:25:71:63:6b:
         9d:c0:a2:ab:e3:d8:f3:73:02:96:da:ae:36:43:5e:df:b2:70:
         0c:4c:0d:3a:a3:28:98:72:b4:70:14:be:e1:03:12:26:bd:ec:
         a4:17:b3:fe:85:11:d4:f6:59:7c:56:06:63:3d:3f:3f:7d:39:
         28:b7:53:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:50:59 2024 by rpki-client on console-ams.rpki-client.org