Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/3230312e39342e3139322e302f31382d3234203d3e203232363839.roa
File:                     3230312e39342e3139322e302f31382d3234203d3e203232363839.roa (raw, json)
Hash identifier:          hEpF/5AJvjTTLoc1jlEYzvAMWpkNx5AnpJ7xJ76SBDQ=
Subject key identifier:   6F:5D:54:57:80:32:5E:DE:F0:A7:55:E5:AD:47:A3:74:52:E6:8D:B9
Certificate issuer:       /CN=B6DD0286E17B756E91475332E495995F85C36F08
Certificate serial:       1E206092C04B5DDB1C0442B8D1CDDA5C27ADEBBC
Authority key identifier: B6:DD:02:86:E1:7B:75:6E:91:47:53:32:E4:95:99:5F:85:C3:6F:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DD0286E17B756E91475332E495995F85C36F08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/3230312e39342e3139322e302f31382d3234203d3e203232363839.roa
Signing time:             Fri 05 Apr 2024 01:35:15 +0000
ROA not before:           Fri 05 Apr 2024 01:30:15 +0000
ROA not after:            Fri 04 Apr 2025 01:35:15 +0000
asID:                     22689
IP address blocks:        201.94.192.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/B6DD0286E17B756E91475332E495995F85C36F08.crl
                          rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/B6DD0286E17B756E91475332E495995F85C36F08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DD0286E17B756E91475332E495995F85C36F08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:29:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:20:60:92:c0:4b:5d:db:1c:04:42:b8:d1:cd:da:5c:27:ad:eb:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6DD0286E17B756E91475332E495995F85C36F08
        Validity
            Not Before: Apr  5 01:30:15 2024 GMT
            Not After : Apr  4 01:35:15 2025 GMT
        Subject: CN=6F5D545780325EDEF0A755E5AD47A37452E68DB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5e:64:18:10:78:61:bc:8e:13:4f:53:71:a8:
                    a2:4e:2a:13:94:8a:2d:60:7c:2c:0f:61:4f:54:62:
                    b7:a9:ab:11:9f:1f:23:73:87:31:61:6a:db:04:54:
                    5e:d3:3e:66:c8:db:6b:65:da:21:31:3f:6b:44:8e:
                    63:f4:9e:52:0d:5e:f1:3d:ab:28:ad:0e:e9:8a:c6:
                    76:b4:54:ac:d4:35:66:24:dc:ea:b4:80:76:d1:33:
                    70:22:85:68:35:03:b4:cf:c3:f7:51:d3:32:31:5b:
                    a0:2d:8a:19:b5:11:e5:43:5d:3b:ad:96:0c:d8:81:
                    84:c0:6d:02:23:9e:56:62:b0:10:34:c8:ec:62:5a:
                    56:21:8c:d5:30:ff:56:e0:2e:20:df:40:f8:cd:61:
                    f2:55:a7:4a:d1:80:1f:31:3c:77:7f:93:b0:94:f5:
                    d1:f5:33:5e:51:cb:78:2f:e6:a4:41:09:7c:d8:0c:
                    00:99:c5:88:e3:b3:52:50:07:95:9b:64:32:4b:d4:
                    28:f7:8b:e2:c1:ec:6b:c9:a6:71:d4:71:be:88:d9:
                    d2:c7:74:01:6e:c4:7b:83:62:b9:e9:12:9e:2d:1e:
                    42:84:e4:67:7b:af:90:fe:1b:98:6f:1d:9f:f1:79:
                    bb:73:57:54:3f:c4:6d:9f:b0:59:78:49:3f:cd:eb:
                    b4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:5D:54:57:80:32:5E:DE:F0:A7:55:E5:AD:47:A3:74:52:E6:8D:B9
            X509v3 Authority Key Identifier:
                keyid:B6:DD:02:86:E1:7B:75:6E:91:47:53:32:E4:95:99:5F:85:C3:6F:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/B6DD0286E17B756E91475332E495995F85C36F08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DD0286E17B756E91475332E495995F85C36F08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/3230312e39342e3139322e302f31382d3234203d3e203232363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.94.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         4e:60:e8:36:10:7b:87:70:d7:9c:31:e3:19:96:4f:2c:46:20:
         55:8e:69:2c:31:7b:d7:54:14:8a:f1:82:83:b9:9a:f8:b0:e1:
         fb:c8:b6:3f:2d:67:9d:06:e9:a6:ac:0d:18:f8:a9:64:be:93:
         4e:7f:d8:13:67:f1:43:67:d0:46:08:4c:38:ab:0f:26:5d:2f:
         2f:66:c1:4d:4c:e1:f1:b5:ac:ff:37:c9:bf:f0:69:4c:c0:92:
         6b:7d:71:43:22:02:3b:c9:8c:34:6b:e3:d0:a9:f0:2b:a7:42:
         b6:4a:9d:56:80:f6:f9:fe:05:da:d7:39:c9:d3:2a:53:b8:3c:
         6f:01:d5:b5:4e:ae:b0:96:94:33:28:d5:25:b8:8b:5b:2d:2d:
         36:16:27:ed:dc:93:bc:fd:3c:0a:76:6a:79:5f:2a:0d:fa:11:
         a3:fe:35:f1:fe:10:b4:a9:2e:c2:16:cd:e6:ea:c3:5f:d2:d1:
         1b:5d:29:16:4e:13:ad:6b:b7:98:eb:1a:6b:f3:e2:a4:16:19:
         c3:99:14:32:e8:1a:76:dd:84:fe:5e:af:aa:c3:b9:18:17:73:
         57:23:bf:e9:0f:ae:40:7a:41:71:6d:32:b6:63:cc:b4:5c:f2:
         21:8d:4b:83:51:5c:fb:18:4b:72:03:fd:77:b3:81:6f:8f:bb:
         74:ba:54:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:08 2024 by rpki-client on console-fra.rpki-client.org