Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e3133322e302e302f31362d3136203d3e2032373136.roa
File:                     3230302e3133322e302e302f31362d3136203d3e2032373136.roa (raw, json)
Hash identifier:          1uDz5pdqgyRyF6Azs37z6mmSILLnZ6IxQFselFf9zMk=
Subject key identifier:   26:96:B0:37:94:C1:32:E8:EB:58:E2:FA:E9:AD:08:A8:55:D5:A1:8F
Certificate issuer:       /CN=D54C376960A26972A0B767BDA084048DFFE3673E
Certificate serial:       77F8932295B5B21EE6C42262B528D5610CB10A43
Authority key identifier: D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e3133322e302e302f31362d3136203d3e2032373136.roa
Signing time:             Wed 03 Apr 2024 18:30:29 +0000
ROA not before:           Wed 03 Apr 2024 18:25:29 +0000
ROA not after:            Wed 02 Apr 2025 18:30:29 +0000
asID:                     2716
IP address blocks:        200.132.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl
                          rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:f8:93:22:95:b5:b2:1e:e6:c4:22:62:b5:28:d5:61:0c:b1:0a:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54C376960A26972A0B767BDA084048DFFE3673E
        Validity
            Not Before: Apr  3 18:25:29 2024 GMT
            Not After : Apr  2 18:30:29 2025 GMT
        Subject: CN=3082010A0282010100B0120E03929D8B368A3AA11A87265A5E074B70F79E69972FDEB18326979743A80BA1C1325E526D7D41EED103A6A5B369323C37828620BC993CA7FE96F3B031A5E2445E7B99DF9446C320870CFF25BCDD291366B99383EE51BFA2B25D48FFF6EB63A7675AD05563A8A544396A49B1D0EB530216B89C11F8894750B8732B6FCA16B12C70A55DC70CBEA0D3D2FC2A1A7C2A25D0E8FEABD7881940B90BDACA268EECB1E14326082D48E3C3F44B6C7AF41E1AFE610024C86C19982E2B3A7CE45BDA29D232F7AE97031A1EDAA351A86245A8A15EB35A6AFFBEC57FD63D2319C1FE42092A8635DC80E426C96B79B1A2870CC4B187EBA28181CDD7AC0488C499C1A2A13F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:12:0e:03:92:9d:8b:36:8a:3a:a1:1a:87:26:
                    5a:5e:07:4b:70:f7:9e:69:97:2f:de:b1:83:26:97:
                    97:43:a8:0b:a1:c1:32:5e:52:6d:7d:41:ee:d1:03:
                    a6:a5:b3:69:32:3c:37:82:86:20:bc:99:3c:a7:fe:
                    96:f3:b0:31:a5:e2:44:5e:7b:99:df:94:46:c3:20:
                    87:0c:ff:25:bc:dd:29:13:66:b9:93:83:ee:51:bf:
                    a2:b2:5d:48:ff:f6:eb:63:a7:67:5a:d0:55:63:a8:
                    a5:44:39:6a:49:b1:d0:eb:53:02:16:b8:9c:11:f8:
                    89:47:50:b8:73:2b:6f:ca:16:b1:2c:70:a5:5d:c7:
                    0c:be:a0:d3:d2:fc:2a:1a:7c:2a:25:d0:e8:fe:ab:
                    d7:88:19:40:b9:0b:da:ca:26:8e:ec:b1:e1:43:26:
                    08:2d:48:e3:c3:f4:4b:6c:7a:f4:1e:1a:fe:61:00:
                    24:c8:6c:19:98:2e:2b:3a:7c:e4:5b:da:29:d2:32:
                    f7:ae:97:03:1a:1e:da:a3:51:a8:62:45:a8:a1:5e:
                    b3:5a:6a:ff:be:c5:7f:d6:3d:23:19:c1:fe:42:09:
                    2a:86:35:dc:80:e4:26:c9:6b:79:b1:a2:87:0c:c4:
                    b1:87:eb:a2:81:81:cd:d7:ac:04:88:c4:99:c1:a2:
                    a1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:96:B0:37:94:C1:32:E8:EB:58:E2:FA:E9:AD:08:A8:55:D5:A1:8F
            X509v3 Authority Key Identifier:
                keyid:D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e3133322e302e302f31362d3136203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.132.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         be:6d:b9:01:76:fa:45:f3:9e:da:04:2d:cf:80:1a:43:bc:bc:
         70:62:f6:6c:4c:02:1e:58:a3:44:0a:2f:57:37:3c:7e:75:4b:
         43:c2:99:a6:b1:5e:d3:89:5f:b7:d9:6b:06:be:a6:bc:a1:27:
         df:7d:ea:09:71:4e:24:88:b0:e2:50:3e:f1:c3:57:86:3a:8b:
         5f:9c:1b:79:bc:6f:35:c3:aa:4b:92:a4:43:bf:67:32:5c:05:
         0c:68:66:4c:67:c7:0d:7a:95:9e:db:30:33:ba:6a:f1:6b:b0:
         65:c0:39:c4:aa:c4:64:81:a7:95:11:89:05:29:ca:9c:5d:c7:
         d5:24:42:fa:30:a1:5e:8c:cb:f9:b1:c8:7e:92:bb:9a:ba:0f:
         71:fe:43:d3:dd:c5:b8:c1:35:fd:0c:42:73:28:f4:59:3b:09:
         94:1a:45:aa:db:84:c7:d6:80:81:b1:df:51:b6:02:85:8b:f8:
         b5:39:3f:b1:25:68:de:23:7f:ac:a3:e4:7d:a0:5c:44:87:a3:
         d9:85:24:30:09:66:08:12:41:65:5b:3f:05:64:1b:bf:be:a9:
         e7:09:d5:7c:b9:1f:1f:c5:4e:98:03:5c:8d:4c:2e:7e:a0:71:
         a1:f4:c9:75:ad:d1:f9:e5:d6:b5:c8:94:33:42:ea:41:37:24:
         25:39:58:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:38 2024 by rpki-client on console-ams.rpki-client.org