Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e3133322e322e302f32342d3234203d3e2032373136.roa
File:                     3230302e3133322e322e302f32342d3234203d3e2032373136.roa (raw, json)
Hash identifier:          ZMCSKiREWkVfI7YE/nHSCPoBgYA/GzC7Rowr7V4N0d4=
Subject key identifier:   25:12:29:69:21:41:DE:34:65:06:F0:B9:D5:2C:F3:0D:CC:7F:B2:84
Certificate issuer:       /CN=D54C376960A26972A0B767BDA084048DFFE3673E
Certificate serial:       63850C8D80D7096D8FC7EE1EB5B44D552D2013CF
Authority key identifier: D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e3133322e322e302f32342d3234203d3e2032373136.roa
Signing time:             Wed 03 Apr 2024 18:30:29 +0000
ROA not before:           Wed 03 Apr 2024 18:25:29 +0000
ROA not after:            Wed 02 Apr 2025 18:30:29 +0000
asID:                     2716
IP address blocks:        200.132.2.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl
                          rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:85:0c:8d:80:d7:09:6d:8f:c7:ee:1e:b5:b4:4d:55:2d:20:13:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54C376960A26972A0B767BDA084048DFFE3673E
        Validity
            Not Before: Apr  3 18:25:29 2024 GMT
            Not After : Apr  2 18:30:29 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:73:28:77:17:33:fb:d5:b2:fd:44:e2:34:db:
                    3f:2a:c6:bd:54:b5:5d:35:44:af:34:3f:33:3e:eb:
                    08:d5:6e:45:97:7a:20:28:04:9c:16:8e:2e:6c:44:
                    35:e7:34:dc:d4:48:d9:bc:6f:31:b5:06:db:c7:c7:
                    19:22:ee:df:61:09:ba:ad:a0:cd:f4:80:55:f0:f4:
                    40:6b:d9:92:a6:b5:62:4c:db:21:bb:01:be:5a:0d:
                    78:b4:b9:b4:e7:32:6f:d0:b1:fa:69:a7:e8:44:3a:
                    aa:37:ae:8c:09:1c:bd:0e:6a:b4:4d:52:d9:78:a8:
                    15:1f:c3:cc:33:cd:08:91:12:35:3c:bd:08:03:db:
                    9e:c7:99:cf:42:79:61:c5:f1:e7:28:d0:70:9e:35:
                    27:16:e4:fd:a1:2c:36:55:af:df:7f:bc:ce:a6:c3:
                    1f:60:13:95:e7:2b:66:0b:6a:50:f3:7c:c1:66:96:
                    34:fc:b2:25:ec:4b:ae:ff:69:f5:c8:33:ec:61:c9:
                    5e:d4:6e:13:f0:85:b0:e5:89:6c:4f:1d:be:e1:e7:
                    ce:92:79:e1:1d:d7:10:85:43:07:7d:d1:68:df:e6:
                    bd:92:5b:55:02:d5:cb:79:24:bc:4c:a5:c1:a1:c6:
                    a3:98:3d:be:55:17:f9:92:d9:04:f5:35:68:e9:fa:
                    d7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:12:29:69:21:41:DE:34:65:06:F0:B9:D5:2C:F3:0D:CC:7F:B2:84
            X509v3 Authority Key Identifier:
                keyid:D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e3133322e322e302f32342d3234203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.132.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:6f:cd:bf:ec:59:2a:c4:a7:54:9b:e2:89:c8:0c:ab:53:23:
         44:38:47:53:f4:86:10:6c:fc:da:4c:90:7d:57:9c:7e:7e:b0:
         ae:4b:e6:50:de:59:c5:ef:bb:96:7e:e0:70:c4:47:b9:dd:eb:
         5f:40:60:ca:e7:bc:f5:1d:03:8b:55:d2:d9:c8:48:3c:78:2e:
         29:49:94:a9:58:63:72:7c:e1:d5:64:5a:98:5a:8a:86:f0:bb:
         17:1a:cb:ba:83:1e:ae:ae:9b:61:ee:b8:50:ac:8f:a6:49:8c:
         0d:6e:32:59:69:0d:10:f7:00:66:b3:5a:cb:9d:e4:c9:4d:05:
         c8:22:29:c4:d5:e0:fa:bc:22:8a:77:2d:a0:12:ab:ce:8e:ba:
         dd:8d:4c:b6:2a:3a:4f:90:35:5e:df:0d:05:9a:8a:6d:53:68:
         83:5a:fb:8b:d0:a2:8a:ee:9a:d2:40:26:a7:24:33:22:28:b3:
         48:39:53:3c:bc:8e:58:8f:ac:89:73:48:db:f8:e0:4a:ab:07:
         a2:67:4b:15:ee:b3:39:4a:ba:cc:6b:6d:6f:10:23:e1:0d:21:
         b3:f7:83:ea:08:36:cf:5f:40:17:21:99:9a:35:52:43:b5:28:
         2e:ab:8d:2b:45:81:7d:f2:46:e1:c3:c8:f3:5a:80:ea:ba:b9:
         48:82:08:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:38 2024 by rpki-client on console-ams.rpki-client.org