Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e3133322e3234302e302f32312d3231203d3e2032373136.roa
File:                     3230302e3133322e3234302e302f32312d3231203d3e2032373136.roa (raw, json)
Hash identifier:          ABB1vhh+7THlYFI5P7gXtLcwE7O46SnTpC85UGpHjVA=
Subject key identifier:   A0:DC:FC:EE:72:E0:60:2A:C9:B9:5A:00:55:38:E4:7A:3C:DA:D3:24
Certificate issuer:       /CN=D54C376960A26972A0B767BDA084048DFFE3673E
Certificate serial:       4F91A98B6FD3FB4B85281A87BA089DD8E0C466E3
Authority key identifier: D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e3133322e3234302e302f32312d3231203d3e2032373136.roa
Signing time:             Wed 03 Apr 2024 18:30:29 +0000
ROA not before:           Wed 03 Apr 2024 18:25:29 +0000
ROA not after:            Wed 02 Apr 2025 18:30:29 +0000
asID:                     2716
IP address blocks:        200.132.240.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl
                          rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:91:a9:8b:6f:d3:fb:4b:85:28:1a:87:ba:08:9d:d8:e0:c4:66:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54C376960A26972A0B767BDA084048DFFE3673E
        Validity
            Not Before: Apr  3 18:25:29 2024 GMT
            Not After : Apr  2 18:30:29 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0d:c9:6f:57:2a:f6:0f:54:cd:61:d2:47:32:
                    dd:34:37:ee:6c:90:85:81:f9:37:4f:12:78:43:cd:
                    dd:d8:33:69:fc:6b:25:5f:96:8a:eb:51:59:57:a1:
                    75:3c:f4:e6:cd:e5:b1:6f:b4:0f:a8:bc:58:03:2b:
                    5d:50:75:44:52:97:93:71:75:d3:88:19:37:02:08:
                    ad:f4:16:83:9f:fe:19:50:f1:c4:5d:67:da:ae:43:
                    30:4f:0f:db:35:ac:fa:e4:03:28:e5:5e:37:0d:64:
                    23:8a:da:ab:77:1e:40:3e:50:11:28:8e:20:85:86:
                    c1:5d:7e:92:00:af:ec:4e:8b:76:82:3e:1f:18:e0:
                    f0:ed:4f:05:cb:62:99:0b:87:4f:2c:9e:46:40:e0:
                    cd:a7:bf:22:4f:e2:c1:78:0f:21:35:b1:78:2c:d9:
                    31:3d:4c:f3:5e:1d:05:cb:39:23:e7:de:cb:97:fc:
                    00:56:9c:4a:2b:f9:e7:a5:2a:e2:c1:84:b3:6a:14:
                    8c:21:df:be:48:3c:7f:3c:46:ac:0b:58:01:5b:e3:
                    ee:13:2e:19:59:1d:e0:44:d0:09:d8:55:27:e0:7e:
                    fc:51:89:cf:6c:e2:ea:da:e3:4b:e7:5b:0b:cb:54:
                    42:1e:01:ce:0a:8e:01:85:7b:a6:89:5e:a6:95:31:
                    b1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:DC:FC:EE:72:E0:60:2A:C9:B9:5A:00:55:38:E4:7A:3C:DA:D3:24
            X509v3 Authority Key Identifier:
                keyid:D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e3133322e3234302e302f32312d3231203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.132.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         39:5b:79:f6:c0:64:41:5d:80:21:2f:e7:9f:30:4d:3c:85:2f:
         68:aa:89:05:25:5b:4d:75:e0:8f:ef:8e:83:4f:8e:e3:89:c9:
         2e:b1:cb:8a:7b:f0:65:15:d3:91:8e:83:9f:75:fb:63:31:56:
         59:3a:48:60:0b:6d:b4:ca:63:5e:f6:0a:e1:4a:56:5e:01:df:
         3d:af:ea:1f:46:44:4f:1f:c4:ef:a5:f1:47:f7:c6:3d:3c:2a:
         02:c8:d1:98:ad:ee:01:fb:09:67:2a:a1:06:29:48:c8:13:9c:
         ed:f8:96:98:00:fd:1d:57:4f:ec:35:ad:0a:6e:91:43:88:10:
         6e:b9:e2:92:10:79:fa:ac:64:aa:8c:ce:5f:7a:a3:70:5d:75:
         b2:a2:06:aa:a1:57:1e:9c:4e:fd:29:fd:6c:9a:1c:d9:1c:ed:
         c6:6d:ad:12:86:fa:c6:ce:06:02:13:38:e1:46:36:23:26:ad:
         0d:d5:83:3f:c5:e7:ed:eb:26:72:b3:21:a9:18:18:6d:85:03:
         69:a3:51:9b:42:2b:bb:f9:06:65:9c:b6:82:6b:c2:28:84:eb:
         3c:17:52:6d:e6:0b:d7:df:3d:b8:f2:b2:bf:8b:a0:35:84:b7:
         8f:84:bd:3a:0d:d2:a3:1b:36:4f:a6:02:89:f1:b5:46:0a:cc:
         bc:a6:91:39
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUT5Gpi2/T+0uFKBqHugid2ODEZuMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDU0QzM3Njk2MEEyNjk3MkEwQjc2N0JEQTA4NDA0OERG
RkUzNjczRTAeFw0yNDA0MDMxODI1MjlaFw0yNTA0MDIxODMwMjlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzcwREM5NkY1NzJBRjYwRjU0
Q0Q2MUQyNDczMkREMzQzN0VFNkM5MDg1ODFGOTM3NEYxMjc4NDNDRERERDgzMzY5
RkM2QjI1NUY5NjhBRUI1MTU5NTdBMTc1M0NGNEU2Q0RFNUIxNkZCNDBGQThCQzU4
MDMyQjVENTA3NTQ0NTI5NzkzNzE3NUQzODgxOTM3MDIwOEFERjQxNjgzOUZGRTE5
NTBGMUM0NUQ2N0RBQUU0MzMwNEYwRkRCMzVBQ0ZBRTQwMzI4RTU1RTM3MEQ2NDIz
OEFEQUFCNzcxRTQwM0U1MDExMjg4RTIwODU4NkMxNUQ3RTkyMDBBRkVDNEU4Qjc2
ODIzRTFGMThFMEYwRUQ0RjA1Q0I2Mjk5MEI4NzRGMkM5RTQ2NDBFMENEQTdCRjIy
NEZFMkMxNzgwRjIxMzVCMTc4MkNEOTMxM0Q0Q0YzNUUxRDA1Q0IzOTIzRTdERUNC
OTdGQzAwNTY5QzRBMkJGOUU3QTUyQUUyQzE4NEIzNkExNDhDMjFERkJFNDgzQzdG
M0M0NkFDMEI1ODAxNUJFM0VFMTMyRTE5NTkxREUwNDREMDA5RDg1NTI3RTA3RUZD
NTE4OUNGNkNFMkVBREFFMzRCRTc1QjBCQ0I1NDQyMUUwMUNFMEE4RTAxODU3QkE2
ODk1RUE2OTUzMUIxMjMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxw3Jb1cq9g9UzWHSRzLdNDfubJCFgfk3TxJ4Q83d2DNp/GslX5aK
61FZV6F1PPTmzeWxb7QPqLxYAytdUHVEUpeTcXXTiBk3Agit9BaDn/4ZUPHEXWfa
rkMwTw/bNaz65AMo5V43DWQjitqrdx5APlARKI4ghYbBXX6SAK/sTot2gj4fGODw
7U8Fy2KZC4dPLJ5GQODNp78iT+LBeA8hNbF4LNkxPUzzXh0Fyzkj597Ll/wAVpxK
K/nnpSriwYSzahSMId++SDx/PEasC1gBW+PuEy4ZWR3gRNAJ2FUn4H78UYnPbOLq
2uNL51sLy1RCHgHOCo4BhXumiV6mlTGxIwIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FKDc/O5y4GAqyblaAFU45Ho82tMkMB8GA1UdIwQYMBaAFNVMN2lgomlyoLdnvaCE
BI3/42c+MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhFYjRBR2pmTlk5emQ3
dEJtd2hUWExUSnlGRkFGelVGcVBnZUhVQ04xU3dhLzEvRDU0QzM3Njk2MEEyNjk3
MkEwQjc2N0JEQTA4NDA0OERGRkUzNjczRS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9ENTRDMzc2OTYwQTI2OTcyQTBCNzY3QkRBMDg0MDQ4REZGRTM2
NzNFLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84RWI0QUdqZk5ZOXpkN3RCbXdo
VFhMVEp5RkZBRnpVRnFQZ2VIVUNOMVN3YS8xLzMyMzAzMDJlMzEzMzMyMmUzMjM0
MzAyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMjM3MzEzNi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8iE
8DANBgkqhkiG9w0BAQsFAAOCAQEAOVt59sBkQV2AIS/nnzBNPIUvaKqJBSVbTXXg
j++Og0+O44nJLrHLinvwZRXTkY6Dn3X7YzFWWTpIYAtttMpjXvYK4UpWXgHfPa/q
H0ZETx/E76XxR/fGPTwqAsjRmK3uAfsJZyqhBilIyBOc7fiWmAD9HVdP7DWtCm6R
Q4gQbrnikhB5+qxkqozOX3qjcF11sqIGqqFXHpxO/Sn9bJoc2Rztxm2tEob6xs4G
AhM44UY2IyatDdWDP8Xn7esmcrMhqRgYbYUDaaNRm0Iru/kGZZy2gmvCKITrPBdS
beYL1989uPKyv4ugNYS3j4S9Og3Soxs2T6YCifG1RgrMvKaROQ==
-----END CERTIFICATE-----
Generated at Tue Nov 26 08:30:13 2024 by rpki-client on console-ams.rpki-client.org