Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e3133322e3137362e302f32302d3230203d3e20323638373434.roa
File:                     3230302e3133322e3137362e302f32302d3230203d3e20323638373434.roa (raw, json)
Hash identifier:          uiJ3ie/WWPgOaVFMjnM1PSAB9wnx09r6sJlIXzooOfw=
Subject key identifier:   A6:27:A4:42:EB:74:8E:F7:35:0D:FC:E9:BA:50:8F:ED:6B:41:89:36
Certificate issuer:       /CN=D54C376960A26972A0B767BDA084048DFFE3673E
Certificate serial:       4F9A5D2E93650B22E6D06F6A8E96D6C2C6CB8E28
Authority key identifier: D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e3133322e3137362e302f32302d3230203d3e20323638373434.roa
Signing time:             Wed 03 Apr 2024 18:30:29 +0000
ROA not before:           Wed 03 Apr 2024 18:25:29 +0000
ROA not after:            Wed 02 Apr 2025 18:30:29 +0000
asID:                     268744
IP address blocks:        200.132.176.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl
                          rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:9a:5d:2e:93:65:0b:22:e6:d0:6f:6a:8e:96:d6:c2:c6:cb:8e:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54C376960A26972A0B767BDA084048DFFE3673E
        Validity
            Not Before: Apr  3 18:25:29 2024 GMT
            Not After : Apr  2 18:30:29 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:33:84:b5:f6:c4:8a:f4:c4:b5:57:22:9b:c8:
                    07:a5:3b:20:23:19:15:16:47:52:70:7e:55:70:76:
                    5b:b5:46:2f:41:7b:6a:42:d1:9c:f9:23:93:78:4b:
                    88:87:39:e0:75:06:3f:37:89:eb:c2:8a:cc:6c:4a:
                    92:a7:9a:e5:24:a6:45:d7:53:f1:c7:db:7e:7e:6c:
                    ab:73:42:35:4f:6e:c5:6c:f7:16:93:8a:80:6b:4b:
                    f5:74:f8:5c:ce:48:24:6e:29:9e:b5:35:9e:bc:86:
                    71:b9:d5:c5:67:6c:e0:ac:61:66:ab:04:c1:15:7e:
                    58:7a:32:18:f7:cd:36:84:30:77:f7:8d:ee:6e:3f:
                    45:1d:09:46:05:51:b3:21:2a:b5:22:ac:98:5f:0d:
                    0f:74:3a:4a:4e:8a:70:a5:2c:52:be:01:d8:3d:23:
                    b4:a2:59:e1:02:16:8b:0f:c8:7e:5a:0e:f7:4b:14:
                    1c:13:53:df:7c:26:b1:ac:ee:30:ea:a0:8d:64:e1:
                    af:9b:69:c4:43:d5:a8:36:9a:2c:0a:b2:f9:5e:7a:
                    35:19:5a:d0:56:cc:f9:e6:0b:8a:85:6c:36:08:60:
                    99:b6:4b:c6:ee:2a:45:59:27:83:6d:0d:28:a2:b1:
                    11:73:bb:17:c1:8f:0a:85:89:58:e6:e4:c5:f2:6d:
                    2f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:27:A4:42:EB:74:8E:F7:35:0D:FC:E9:BA:50:8F:ED:6B:41:89:36
            X509v3 Authority Key Identifier:
                keyid:D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e3133322e3137362e302f32302d3230203d3e20323638373434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.132.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         52:6a:35:49:53:85:b2:31:e7:07:c8:2a:33:a5:f3:24:33:4d:
         7b:55:aa:47:46:78:e8:ae:5a:ec:e1:7a:7f:44:6c:9a:75:e0:
         a8:ef:65:c6:5c:91:b2:00:d0:2e:00:90:bf:5f:95:c2:74:fe:
         2b:67:d7:78:90:f9:00:a0:ff:55:4b:b7:cf:b4:bc:02:92:6f:
         fd:18:ff:fb:22:e2:d8:ca:f5:47:5b:da:26:26:09:cf:c5:d1:
         a0:a8:39:b3:48:7a:fc:4e:b9:30:21:a9:79:bc:6d:b9:53:c6:
         3b:a4:8f:c8:46:90:e0:30:05:1d:93:e5:39:23:f1:81:93:2b:
         77:df:df:10:c6:33:2c:40:87:21:b8:bb:56:78:f7:75:f4:b1:
         b7:eb:e4:c1:7c:cb:1a:2e:8c:0f:3d:17:68:03:0f:3a:91:10:
         ff:1d:fa:69:f5:8b:5f:1f:57:d0:77:20:93:b7:c2:d5:63:20:
         96:a3:16:45:71:b4:6b:e3:f1:b8:26:3c:59:d9:0f:52:b0:5b:
         94:eb:27:ee:e6:4c:15:60:9d:e5:2c:ab:c9:03:02:3a:8e:a5:
         07:40:3d:f4:1d:b7:62:c3:db:64:12:0c:fd:08:2d:e6:d1:de:
         85:43:0d:1e:df:4c:c5:fb:54:51:c9:e4:c9:51:65:61:e2:c8:
         d5:77:35:d8
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUT5pdLpNlCyLm0G9qjpbWwsbLjigwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDU0QzM3Njk2MEEyNjk3MkEwQjc2N0JEQTA4NDA0OERG
RkUzNjczRTAeFw0yNDA0MDMxODI1MjlaFw0yNTA0MDIxODMwMjlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjYzMzg0QjVGNkM0OEFGNEM0
QjU1NzIyOUJDODA3QTUzQjIwMjMxOTE1MTY0NzUyNzA3RTU1NzA3NjVCQjU0NjJG
NDE3QjZBNDJEMTlDRjkyMzkzNzg0Qjg4ODczOUUwNzUwNjNGMzc4OUVCQzI4QUND
NkM0QTkyQTc5QUU1MjRBNjQ1RDc1M0YxQzdEQjdFN0U2Q0FCNzM0MjM1NEY2RUM1
NkNGNzE2OTM4QTgwNkI0QkY1NzRGODVDQ0U0ODI0NkUyOTlFQjUzNTlFQkM4Njcx
QjlENUM1Njc2Q0UwQUM2MTY2QUIwNEMxMTU3RTU4N0EzMjE4RjdDRDM2ODQzMDc3
Rjc4REVFNkUzRjQ1MUQwOTQ2MDU1MUIzMjEyQUI1MjJBQzk4NUYwRDBGNzQzQTRB
NEU4QTcwQTUyQzUyQkUwMUQ4M0QyM0I0QTI1OUUxMDIxNjhCMEZDODdFNUEwRUY3
NEIxNDFDMTM1M0RGN0MyNkIxQUNFRTMwRUFBMDhENjRFMUFGOUI2OUM0NDNENUE4
MzY5QTJDMEFCMkY5NUU3QTM1MTk1QUQwNTZDQ0Y5RTYwQjhBODU2QzM2MDg2MDk5
QjY0QkM2RUUyQTQ1NTkyNzgzNkQwRDI4QTJCMTExNzNCQjE3QzE4RjBBODU4OTU4
RTZFNEM1RjI2RDJGQkQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAtjOEtfbEivTEtVcim8gHpTsgIxkVFkdScH5VcHZbtUYvQXtqQtGc
+SOTeEuIhzngdQY/N4nrworMbEqSp5rlJKZF11Pxx9t+fmyrc0I1T27FbPcWk4qA
a0v1dPhczkgkbimetTWevIZxudXFZ2zgrGFmqwTBFX5YejIY9802hDB3943ubj9F
HQlGBVGzISq1IqyYXw0PdDpKTopwpSxSvgHYPSO0olnhAhaLD8h+Wg73SxQcE1Pf
fCaxrO4w6qCNZOGvm2nEQ9WoNposCrL5Xno1GVrQVsz55guKhWw2CGCZtkvG7ipF
WSeDbQ0oorERc7sXwY8KhYlY5uTF8m0vvQIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FKYnpELrdI73NQ386bpQj+1rQYk2MB8GA1UdIwQYMBaAFNVMN2lgomlyoLdnvaCE
BI3/42c+MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhFYjRBR2pmTlk5emQ3
dEJtd2hUWExUSnlGRkFGelVGcVBnZUhVQ04xU3dhLzEvRDU0QzM3Njk2MEEyNjk3
MkEwQjc2N0JEQTA4NDA0OERGRkUzNjczRS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9ENTRDMzc2OTYwQTI2OTcyQTBCNzY3QkRBMDg0MDQ4REZGRTM2
NzNFLmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84RWI0QUdqZk5ZOXpkN3RCbXdo
VFhMVEp5RkZBRnpVRnFQZ2VIVUNOMVN3YS8xLzMyMzAzMDJlMzEzMzMyMmUzMTM3
MzYyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzMjM2MzgzNzM0MzQucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BATIhLAwDQYJKoZIhvcNAQELBQADggEBAFJqNUlThbIx5wfIKjOl8yQzTXtVqkdG
eOiuWuzhen9EbJp14KjvZcZckbIA0C4AkL9flcJ0/itn13iQ+QCg/1VLt8+0vAKS
b/0Y//si4tjK9Udb2iYmCc/F0aCoObNIevxOuTAhqXm8bblTxjukj8hGkOAwBR2T
5Tkj8YGTK3ff3xDGMyxAhyG4u1Z493X0sbfr5MF8yxoujA89F2gDDzqREP8d+mn1
i18fV9B3IJO3wtVjIJajFkVxtGvj8bgmPFnZD1KwW5TrJ+7mTBVgneUsq8kDAjqO
pQdAPfQdt2LD22QSDP0ILebR3oVDDR7fTMX7VFHJ5MlRZWHiyNV3Ndg=
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:38 2024 by rpki-client on console-ams.rpki-client.org