Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e3133322e3136382e302f32342d3234203d3e2032373136.roa
File:                     3230302e3133322e3136382e302f32342d3234203d3e2032373136.roa (raw, json)
Hash identifier:          RBCfd6UD/w2qSjMtKynSUz4eYtoTZcTr/ZB5vcoT2kc=
Subject key identifier:   B6:94:7A:50:BC:D7:5F:30:08:5E:08:0B:F2:8B:93:21:3A:14:45:5F
Certificate issuer:       /CN=D54C376960A26972A0B767BDA084048DFFE3673E
Certificate serial:       7A27E32CB887FD0948D0A449E6339C11111ECCD3
Authority key identifier: D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e3133322e3136382e302f32342d3234203d3e2032373136.roa
Signing time:             Wed 03 Apr 2024 18:30:29 +0000
ROA not before:           Wed 03 Apr 2024 18:25:29 +0000
ROA not after:            Wed 02 Apr 2025 18:30:29 +0000
asID:                     2716
IP address blocks:        200.132.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl
                          rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:27:e3:2c:b8:87:fd:09:48:d0:a4:49:e6:33:9c:11:11:1e:cc:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54C376960A26972A0B767BDA084048DFFE3673E
        Validity
            Not Before: Apr  3 18:25:29 2024 GMT
            Not After : Apr  2 18:30:29 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ae:66:22:4b:de:35:20:8a:20:63:66:44:63:
                    76:23:c2:95:a9:a6:90:ec:a3:f7:08:48:34:33:f6:
                    24:33:1b:23:b0:73:a8:fe:76:9a:23:04:3b:62:a2:
                    51:7d:66:1a:e7:12:d0:c5:9a:63:cb:a7:27:dc:09:
                    63:89:b6:af:10:3d:eb:02:39:05:d4:20:e6:bd:70:
                    e8:5d:0f:5e:12:6e:b2:61:25:d4:6e:ce:a1:6b:f4:
                    17:c5:36:72:db:10:e3:fb:6a:d5:32:21:f2:57:85:
                    b0:46:b8:14:cc:27:08:1e:15:3f:04:cc:35:93:a8:
                    f6:f8:81:c3:e0:1f:63:5b:f1:c7:93:e6:b7:11:6e:
                    3f:ed:93:0c:6d:a0:cc:67:f7:29:ea:7c:79:67:82:
                    ed:85:1a:d4:68:5e:b2:be:8b:e8:35:31:2f:de:7f:
                    f0:9d:d0:c8:00:b7:16:d3:d1:f7:66:3c:ac:c7:56:
                    f2:d9:33:8e:ba:a7:a6:58:f2:13:82:98:c6:b2:15:
                    49:54:44:ea:87:35:ae:0c:18:98:87:46:42:7b:5d:
                    9e:72:b4:34:6a:a1:2f:b5:f0:25:a6:75:b6:66:fe:
                    a1:42:87:1d:72:48:99:bb:cb:5b:37:e8:78:6e:ed:
                    cf:96:97:3f:af:1d:3d:82:17:a1:69:87:ea:9b:d3:
                    70:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:94:7A:50:BC:D7:5F:30:08:5E:08:0B:F2:8B:93:21:3A:14:45:5F
            X509v3 Authority Key Identifier:
                keyid:D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e3133322e3136382e302f32342d3234203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.132.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:2d:1c:3e:81:4f:2c:ba:ef:cd:21:41:65:94:9f:c2:07:55:
         cd:cd:e9:e3:b2:e1:79:aa:cf:44:eb:02:7c:4c:35:60:e6:50:
         16:44:b2:04:e6:b8:e4:35:8f:7b:61:e2:cf:bc:78:eb:60:2e:
         0b:8a:99:b2:27:9b:06:fe:d3:5d:b9:07:42:ad:06:95:bf:e6:
         a5:a3:ef:9b:55:61:6e:00:7c:3e:f1:db:e0:e6:94:d3:89:50:
         51:47:a9:15:1a:b1:56:f1:ca:e8:27:96:b9:4b:44:e8:c9:02:
         81:f2:4e:c9:7e:6e:1e:69:6d:80:db:9f:77:9b:bc:17:ca:6a:
         ba:1f:74:2f:18:51:3d:1a:aa:eb:73:be:ac:81:82:fa:4c:49:
         d5:e3:84:90:93:43:52:47:1f:bc:71:31:7f:db:42:20:9f:98:
         b8:28:38:0b:4d:57:d9:53:d9:13:09:9c:ea:1b:6c:f3:8a:10:
         91:37:32:80:56:78:22:b1:58:47:fa:0c:4c:28:4b:15:03:9b:
         ec:2b:5e:e3:2c:7b:e2:30:eb:c7:52:0f:0d:75:69:52:02:3c:
         34:47:22:b2:00:c1:8f:b1:f5:f3:4d:49:b0:58:be:36:32:62:
         7d:ab:47:a8:06:63:1b:e6:25:32:92:0a:b5:fe:aa:08:66:9b:
         cf:33:47:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:33 2024 by rpki-client on console-fra.rpki-client.org