Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/3230302e37312e36342e302f32332d3233203d3e20323636313931.roa
File:                     3230302e37312e36342e302f32332d3233203d3e20323636313931.roa (raw, json)
Hash identifier:          mkpwO2pN45LBYOSuW61Ay3lduvb8HBKz6IRcI7NHpaM=
Subject key identifier:   48:64:5D:6C:62:B4:A3:12:DE:DF:8C:D9:D4:0D:D8:1C:B2:8D:FE:4F
Certificate issuer:       /CN=221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA
Certificate serial:       32167170557D56A7AFF43330EADB945D145C8BE3
Authority key identifier: 22:13:38:E9:0C:9C:D3:7D:ED:85:B4:40:9F:CA:B7:BF:4F:5F:E3:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/3230302e37312e36342e302f32332d3233203d3e20323636313931.roa
Signing time:             Wed 03 Apr 2024 18:30:54 +0000
ROA not before:           Wed 03 Apr 2024 18:25:54 +0000
ROA not after:            Wed 02 Apr 2025 18:30:54 +0000
asID:                     266191
IP address blocks:        200.71.64.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.crl
                          rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 18:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:16:71:70:55:7d:56:a7:af:f4:33:30:ea:db:94:5d:14:5c:8b:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA
        Validity
            Not Before: Apr  3 18:25:54 2024 GMT
            Not After : Apr  2 18:30:54 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f6:cd:76:41:c4:92:55:e6:73:ae:51:ec:8f:
                    da:3d:21:81:96:c5:a9:31:49:5b:af:7d:25:a8:fb:
                    ec:09:25:ee:3b:b7:de:5c:50:4a:67:f2:ab:98:a1:
                    29:93:b3:2a:a1:5e:d4:78:15:de:c8:54:6c:07:1a:
                    00:54:ae:67:ea:a2:7c:07:02:c6:a8:a6:54:35:c9:
                    9a:16:8c:7e:c2:3d:60:d4:98:13:80:ad:aa:d8:c8:
                    8b:86:7c:a2:a4:92:35:f3:e4:43:2d:4a:53:4d:e9:
                    69:ba:f2:1e:27:3b:50:65:4e:82:6f:12:ea:60:dd:
                    35:ee:75:8b:76:07:8a:97:c3:dd:36:d7:09:7c:c5:
                    b1:81:14:0b:b4:ff:ef:56:53:7e:b5:d4:05:48:dc:
                    77:ef:c6:29:9c:be:58:2e:f6:1e:d1:f8:81:04:0f:
                    90:e2:e8:86:5b:52:63:ac:26:59:2a:24:ea:d3:61:
                    b4:08:81:ec:3f:5f:65:5a:3a:a3:1b:b9:d2:47:c3:
                    cf:58:fd:f5:21:41:fa:8d:72:66:aa:58:00:6e:b1:
                    dd:3c:1a:ed:06:59:19:e3:51:6d:2b:5b:25:78:37:
                    c7:5a:63:2f:a9:95:51:0e:fa:00:21:4a:94:cb:fe:
                    39:f7:6c:20:b0:61:a8:9b:16:a4:fc:87:ff:89:96:
                    80:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:64:5D:6C:62:B4:A3:12:DE:DF:8C:D9:D4:0D:D8:1C:B2:8D:FE:4F
            X509v3 Authority Key Identifier:
                keyid:22:13:38:E9:0C:9C:D3:7D:ED:85:B4:40:9F:CA:B7:BF:4F:5F:E3:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/3230302e37312e36342e302f32332d3233203d3e20323636313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:b6:62:92:56:fc:8f:ff:29:78:04:89:80:0a:54:df:09:ba:
         b9:76:71:33:69:92:14:33:de:9c:98:85:80:1b:32:15:1a:48:
         05:50:58:9e:11:61:40:da:77:df:61:6a:5a:b1:bd:bc:e8:89:
         71:a7:c1:65:02:d5:5c:e8:ef:2d:ad:af:c8:7e:5e:61:eb:d2:
         2d:9d:8e:b2:79:81:b8:21:a0:7f:54:8d:df:b1:9a:bc:ca:41:
         8a:b5:84:49:e6:2c:e1:ab:6b:28:0b:76:84:19:8b:28:33:34:
         df:bc:39:e2:d1:77:13:fa:48:b4:60:40:52:68:9b:0b:d9:4c:
         61:19:b0:75:bc:a1:ce:bc:67:44:90:a7:3e:da:c1:f2:e6:53:
         87:9d:e7:af:a4:87:a6:8a:ca:07:00:11:c1:91:c7:b9:4e:2a:
         09:cf:5a:32:bb:1d:f9:74:2d:4c:43:7b:34:ee:0b:7c:b2:34:
         a9:05:54:8f:5f:af:4a:9b:48:88:b1:f0:15:3d:85:fe:dd:f8:
         c4:5b:ac:4c:23:c8:be:71:1d:d0:4e:c1:64:a5:4a:94:4d:ca:
         97:83:7c:64:5e:ee:84:a6:d0:f1:c6:0b:2e:3b:d9:82:c8:99:
         c9:a1:0b:12:e3:df:4b:71:18:61:d4:19:ae:97:aa:08:5b:91:
         94:98:8e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:31:37 2024 by rpki-client on console-ams.rpki-client.org