Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e3133322e3137362e302f32302d3230203d3e2032373136.roa
File:                     3230302e3133322e3137362e302f32302d3230203d3e2032373136.roa (raw, json)
Hash identifier:          yDrTjvGdG9GWfYvT9J+HhLA7zkvpx6UEZP199Ys6Q4o=
Subject key identifier:   EC:F7:C1:EC:E3:D1:1D:57:FF:21:B3:61:B1:50:68:77:1A:9B:1E:1F
Certificate issuer:       /CN=D54C376960A26972A0B767BDA084048DFFE3673E
Certificate serial:       7E14227F027777873805D166935EDE8BC37B3BFE
Authority key identifier: D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e3133322e3137362e302f32302d3230203d3e2032373136.roa
Signing time:             Wed 03 Apr 2024 18:30:29 +0000
ROA not before:           Wed 03 Apr 2024 18:25:29 +0000
ROA not after:            Wed 02 Apr 2025 18:30:29 +0000
asID:                     2716
IP address blocks:        200.132.176.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl
                          rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:14:22:7f:02:77:77:87:38:05:d1:66:93:5e:de:8b:c3:7b:3b:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54C376960A26972A0B767BDA084048DFFE3673E
        Validity
            Not Before: Apr  3 18:25:29 2024 GMT
            Not After : Apr  2 18:30:29 2025 GMT
        Subject: CN=3082010A0282010100C7083E0D4DD6535DB27322C950A21FEE06B2D945B667E27E6B3DE92C078664F1A2EAA2D1DE18BAEB65A0F350E3C837814496BDC5DEAB2CE44C0C52E14103CA5896728510AA7AF436BEF04F0B2D01C32C5DD2B4EE17D228B3E3A1229136606B949AF94B4AC83E7C8B9A9D4E85F9693189B8120065FD66BEB7043C69A0293739332BC542476AB05191009D3098C36EBF932488EF2BC60FC56C055E924577BFCD9F6C0CB83F8CBA37A4993A10323854F66421D7B3FD5FC185F33A1F9FA92D394A0780EF99CE46BC8747D27232B3B95C71C44BF99F6A35D68921FA365A2F581DB14BE60DB727AAB0D17ED1C8E6253E1B5C6E611F780232932A2B9BA75DD56C57F5190203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:08:3e:0d:4d:d6:53:5d:b2:73:22:c9:50:a2:
                    1f:ee:06:b2:d9:45:b6:67:e2:7e:6b:3d:e9:2c:07:
                    86:64:f1:a2:ea:a2:d1:de:18:ba:eb:65:a0:f3:50:
                    e3:c8:37:81:44:96:bd:c5:de:ab:2c:e4:4c:0c:52:
                    e1:41:03:ca:58:96:72:85:10:aa:7a:f4:36:be:f0:
                    4f:0b:2d:01:c3:2c:5d:d2:b4:ee:17:d2:28:b3:e3:
                    a1:22:91:36:60:6b:94:9a:f9:4b:4a:c8:3e:7c:8b:
                    9a:9d:4e:85:f9:69:31:89:b8:12:00:65:fd:66:be:
                    b7:04:3c:69:a0:29:37:39:33:2b:c5:42:47:6a:b0:
                    51:91:00:9d:30:98:c3:6e:bf:93:24:88:ef:2b:c6:
                    0f:c5:6c:05:5e:92:45:77:bf:cd:9f:6c:0c:b8:3f:
                    8c:ba:37:a4:99:3a:10:32:38:54:f6:64:21:d7:b3:
                    fd:5f:c1:85:f3:3a:1f:9f:a9:2d:39:4a:07:80:ef:
                    99:ce:46:bc:87:47:d2:72:32:b3:b9:5c:71:c4:4b:
                    f9:9f:6a:35:d6:89:21:fa:36:5a:2f:58:1d:b1:4b:
                    e6:0d:b7:27:aa:b0:d1:7e:d1:c8:e6:25:3e:1b:5c:
                    6e:61:1f:78:02:32:93:2a:2b:9b:a7:5d:d5:6c:57:
                    f5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:F7:C1:EC:E3:D1:1D:57:FF:21:B3:61:B1:50:68:77:1A:9B:1E:1F
            X509v3 Authority Key Identifier:
                keyid:D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e3133322e3137362e302f32302d3230203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.132.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         76:57:b7:e8:69:37:df:f7:cc:8c:64:c6:c2:b3:23:46:d3:fd:
         42:72:00:20:3a:06:4e:5f:0f:5a:7b:cf:44:ac:37:76:0c:b7:
         3f:37:6b:6c:1c:19:54:5e:09:56:e2:3f:c2:01:d4:fd:1d:36:
         1f:44:d2:47:0c:a6:4b:86:7e:a4:65:34:49:5f:62:0c:c8:28:
         2e:b6:24:36:a9:13:ae:74:71:08:0e:97:33:4e:fc:56:4d:aa:
         d3:8a:00:ed:6c:59:69:67:c7:5b:9c:e4:d2:11:ac:00:a9:98:
         d9:b9:ab:61:f2:3e:63:4a:e6:0c:18:05:18:72:2c:11:b5:36:
         e4:8a:30:93:0b:9e:56:96:4e:59:34:ed:39:36:c9:bb:84:13:
         fe:79:94:c4:af:f1:5d:25:dd:11:bc:43:bc:25:14:75:87:a7:
         39:98:5d:98:f0:7e:89:04:4d:6f:ff:41:b2:ee:05:4e:81:79:
         8f:ae:5e:eb:c6:5d:3e:cc:9d:44:e5:94:74:85:af:18:83:3a:
         00:6c:5b:9b:08:19:d4:3b:97:41:ce:ba:d3:98:99:9a:46:cd:
         84:02:88:15:9b:97:24:30:ce:3b:32:61:93:35:13:63:22:57:
         30:e3:91:8b:ca:61:94:43:54:b3:41:7a:2c:57:bc:2d:4a:fb:
         ea:43:de:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:38 2024 by rpki-client on console-ams.rpki-client.org