Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NtsbuNVLC34VsJihSmvZ6QSpYJ2xF1RiCzAdzWQtvr6/0/3230312e33332e3232342e302f32302d3234203d3e203238323835.roa
File:                     3230312e33332e3232342e302f32302d3234203d3e203238323835.roa (raw, json)
Hash identifier:          PuM6KefHGzu93wZN9l5seJP5qYQ5EEuqCCTJo3yj9jo=
Subject key identifier:   A7:78:06:DF:53:40:50:51:81:8A:14:DA:F5:9D:65:E4:B9:9E:B9:17
Certificate issuer:       /CN=18304E37E7B30DCE85765ECFC90E798EBF358498
Certificate serial:       6A79C1C799D3B21641875210B999F2C3614234CB
Authority key identifier: 18:30:4E:37:E7:B3:0D:CE:85:76:5E:CF:C9:0E:79:8E:BF:35:84:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18304E37E7B30DCE85765ECFC90E798EBF358498.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NtsbuNVLC34VsJihSmvZ6QSpYJ2xF1RiCzAdzWQtvr6/0/3230312e33332e3232342e302f32302d3234203d3e203238323835.roa
Signing time:             Thu 04 Apr 2024 17:46:46 +0000
ROA not before:           Thu 04 Apr 2024 17:41:46 +0000
ROA not after:            Thu 03 Apr 2025 17:46:46 +0000
asID:                     28285
IP address blocks:        201.33.224.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7NtsbuNVLC34VsJihSmvZ6QSpYJ2xF1RiCzAdzWQtvr6/0/18304E37E7B30DCE85765ECFC90E798EBF358498.crl
                          rsync://rpki-repo.registro.br/repo/7NtsbuNVLC34VsJihSmvZ6QSpYJ2xF1RiCzAdzWQtvr6/0/18304E37E7B30DCE85765ECFC90E798EBF358498.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18304E37E7B30DCE85765ECFC90E798EBF358498.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 23:10:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:79:c1:c7:99:d3:b2:16:41:87:52:10:b9:99:f2:c3:61:42:34:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18304E37E7B30DCE85765ECFC90E798EBF358498
        Validity
            Not Before: Apr  4 17:41:46 2024 GMT
            Not After : Apr  3 17:46:46 2025 GMT
        Subject: CN=A77806DF53405051818A14DAF59D65E4B99EB917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:58:2d:dd:4b:fe:14:86:66:80:ad:56:2a:60:
                    5c:40:ee:25:75:84:33:dc:16:68:c4:28:1e:9b:03:
                    cd:3a:85:63:7e:e7:4a:d6:7f:2b:db:55:ed:88:94:
                    3a:33:bf:ba:e6:62:28:9d:fe:43:e2:d3:d6:61:c6:
                    34:45:4d:d1:b7:10:8a:22:98:05:e7:e9:61:87:67:
                    52:f2:07:68:fb:7a:7a:52:53:e6:a4:18:97:e9:03:
                    da:80:6a:b6:66:d5:35:bc:4e:f1:05:ad:67:db:10:
                    68:66:3b:73:94:db:5f:be:e4:af:b2:2f:1f:9b:21:
                    2b:24:9d:f3:97:42:2f:71:3e:9d:4f:bd:03:83:8f:
                    1b:46:dc:c6:b1:62:49:b1:8d:a6:aa:9c:d8:ef:32:
                    cb:c9:a9:23:e4:e3:c2:b3:1a:c3:17:49:4a:17:40:
                    84:e5:9d:90:2e:b7:1c:2f:72:d8:f6:6c:2f:ac:1d:
                    0f:0c:05:1e:dc:59:a5:4e:08:af:36:cb:1c:3c:26:
                    d1:86:9e:14:ee:3e:82:8a:7e:3f:fc:b2:90:6c:e8:
                    68:fb:f3:0e:25:8a:12:ad:ee:25:a0:e0:62:f6:64:
                    10:c7:ea:0f:14:f2:e2:97:52:3b:56:d9:b5:65:24:
                    71:16:f9:2b:6f:24:24:e2:04:3a:18:b1:22:1e:7a:
                    f6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:78:06:DF:53:40:50:51:81:8A:14:DA:F5:9D:65:E4:B9:9E:B9:17
            X509v3 Authority Key Identifier:
                keyid:18:30:4E:37:E7:B3:0D:CE:85:76:5E:CF:C9:0E:79:8E:BF:35:84:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NtsbuNVLC34VsJihSmvZ6QSpYJ2xF1RiCzAdzWQtvr6/0/18304E37E7B30DCE85765ECFC90E798EBF358498.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18304E37E7B30DCE85765ECFC90E798EBF358498.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NtsbuNVLC34VsJihSmvZ6QSpYJ2xF1RiCzAdzWQtvr6/0/3230312e33332e3232342e302f32302d3234203d3e203238323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.33.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         99:f0:32:2b:03:59:9c:f9:cb:c5:90:35:03:1c:95:0a:62:bf:
         0c:86:3f:fe:b0:d6:ad:1a:01:b2:2c:ac:48:b7:05:20:0e:67:
         3f:33:28:8a:88:9c:f7:d2:3a:f4:39:f3:af:92:6d:fb:99:df:
         e6:97:b9:9e:ec:58:50:79:70:d1:da:e5:83:5b:7e:02:1e:bf:
         66:bb:6d:35:af:2f:33:55:39:21:df:24:e0:26:a4:32:33:4a:
         7e:47:1d:74:de:b4:ec:d3:bb:d6:63:6c:97:f7:04:6f:34:cb:
         fa:b0:c6:6b:65:21:39:69:6b:31:b3:d7:78:8c:8c:48:78:57:
         63:54:fd:ad:3a:23:54:32:56:ac:e4:5b:85:aa:92:0e:12:84:
         d5:2f:40:16:09:7c:1a:10:2c:56:fc:59:15:a3:c2:c2:5d:68:
         1a:82:6d:97:49:3b:64:53:50:99:d7:5e:47:db:28:64:51:b4:
         8f:6c:2c:a6:da:4b:0d:08:99:87:06:b8:46:74:44:ac:85:55:
         6c:4d:6c:18:03:e8:90:51:88:6f:c7:c4:40:9b:3c:66:ab:48:
         3e:84:65:cc:e2:76:8a:0d:bc:ff:cd:7b:49:f3:d7:18:cf:96:
         89:90:5d:0b:01:12:c3:81:b8:64:4d:20:e1:f1:3c:c4:97:76:
         8b:c1:80:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:29:43 2024 by rpki-client on console-fra.rpki-client.org