Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e3132382e3234302e302f32302d3230203d3e2032373136.roa
File:                     3230302e3132382e3234302e302f32302d3230203d3e2032373136.roa (raw, json)
Hash identifier:          mmHFGeMzg+cdSyJ1Ic9f+D+UfqWLc4+gJD1kl3f7u/w=
Subject key identifier:   6D:D5:FC:CB:02:A3:49:FD:B5:F0:8A:1D:C8:BF:65:C4:14:9D:5C:9F
Certificate issuer:       /CN=D54C376960A26972A0B767BDA084048DFFE3673E
Certificate serial:       1BE3A8CFDAF09586CB9C3378DCEA3C9B133207FF
Authority key identifier: D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e3132382e3234302e302f32302d3230203d3e2032373136.roa
Signing time:             Wed 03 Apr 2024 18:30:30 +0000
ROA not before:           Wed 03 Apr 2024 18:25:30 +0000
ROA not after:            Wed 02 Apr 2025 18:30:30 +0000
asID:                     2716
IP address blocks:        200.128.240.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl
                          rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:e3:a8:cf:da:f0:95:86:cb:9c:33:78:dc:ea:3c:9b:13:32:07:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54C376960A26972A0B767BDA084048DFFE3673E
        Validity
            Not Before: Apr  3 18:25:30 2024 GMT
            Not After : Apr  2 18:30:30 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:77:a8:c3:10:1f:a0:f6:e7:2c:31:94:c4:c4:
                    f8:44:8c:c3:9b:84:03:54:26:aa:16:e6:ab:d7:d9:
                    46:53:eb:68:57:c3:b1:f5:f8:5d:f9:ad:a6:0e:38:
                    29:93:cc:1a:e0:80:12:8a:62:b7:62:cc:9b:42:c2:
                    86:21:0a:c0:cc:d3:99:bb:ae:ec:bd:f6:65:41:aa:
                    ea:29:a5:ed:70:88:d2:ca:4c:a6:ae:3a:11:90:da:
                    3e:fd:59:3e:1c:ac:45:63:51:08:93:dc:22:3a:cc:
                    78:f0:32:8b:d7:5d:97:94:e3:1c:fa:1d:c2:03:4f:
                    5a:93:eb:17:0b:d9:f3:2c:f7:30:23:3e:d3:95:0d:
                    27:a7:58:6c:cd:af:d7:fe:b8:1e:8b:44:6c:ed:e5:
                    88:38:95:e8:e5:48:1a:d5:f1:56:52:75:42:39:e5:
                    d6:27:da:a1:fa:27:03:8f:51:ee:cd:69:87:0f:41:
                    a5:3a:46:0c:03:d4:8b:f5:ba:96:c9:0b:65:ba:34:
                    cc:36:26:94:b1:57:61:44:0f:78:fc:d2:d8:16:16:
                    09:fc:8d:7a:13:97:a4:ef:71:32:0b:26:13:db:eb:
                    09:91:ed:12:ce:25:e5:60:60:76:59:17:b3:9a:26:
                    ab:cc:c6:1e:dd:60:f1:63:68:66:5b:ea:37:af:aa:
                    64:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D5:FC:CB:02:A3:49:FD:B5:F0:8A:1D:C8:BF:65:C4:14:9D:5C:9F
            X509v3 Authority Key Identifier:
                keyid:D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e3132382e3234302e302f32302d3230203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.128.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         13:7d:a9:e7:d8:ec:53:f6:b4:eb:7f:7c:c9:45:eb:e9:8b:66:
         28:1f:69:ab:2a:43:cc:0d:cd:0b:81:77:df:43:fc:1a:60:9d:
         e2:5f:c3:60:ed:35:ca:4c:17:96:bf:c7:0e:3b:4c:fe:f9:3f:
         ac:de:76:73:c0:1d:e2:19:80:aa:92:f8:38:9a:19:a8:cb:2b:
         35:7c:2e:6e:f0:23:dc:54:f6:2e:49:d9:a0:5e:aa:d5:47:c1:
         43:d5:6e:a2:19:56:ca:95:2c:77:9f:11:88:d8:7b:a5:78:b4:
         be:c0:58:8e:c1:97:a1:b1:40:1a:85:5e:0c:2c:37:87:b6:48:
         af:6f:40:b2:e2:1a:8f:7a:7c:b3:1f:6a:91:18:77:f4:bf:6a:
         ad:c1:92:65:e0:7b:bf:89:01:e0:dc:7a:1a:fb:60:43:fa:ef:
         d8:8d:c5:96:db:c9:55:a2:3c:3e:a9:d9:96:a3:45:3b:dd:11:
         b3:ac:d3:be:f4:1d:e9:37:81:dc:f0:82:f1:8e:ac:9a:f0:8a:
         d2:b3:9b:74:e7:df:1d:09:f7:1c:49:42:03:92:50:e1:63:50:
         cf:3b:32:19:c9:c0:20:11:16:38:a1:69:0a:26:d2:60:db:8c:
         d5:4a:1f:9e:c3:af:0f:11:35:61:76:fa:af:25:9f:2c:97:ac:
         ea:f4:13:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 00:37:41 2024 by rpki-client on console-fra.rpki-client.org