Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e3133322e35392e302f32342d3234203d3e2032373136.roa
File:                     3230302e3133322e35392e302f32342d3234203d3e2032373136.roa (raw, json)
Hash identifier:          Tkz5OL3guAuQ9R4rUAqrV4sJdeA18R/jk5GjLz2KosE=
Subject key identifier:   2F:87:0E:C1:AD:22:9F:AD:9B:12:65:F2:08:6E:34:F7:0C:C7:70:C5
Certificate issuer:       /CN=D54C376960A26972A0B767BDA084048DFFE3673E
Certificate serial:       1BFC43CF75DE8A1D515DB284F9958B5F77D54EFE
Authority key identifier: D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e3133322e35392e302f32342d3234203d3e2032373136.roa
Signing time:             Wed 03 Apr 2024 18:30:31 +0000
ROA not before:           Wed 03 Apr 2024 18:25:31 +0000
ROA not after:            Wed 02 Apr 2025 18:30:31 +0000
asID:                     2716
IP address blocks:        200.132.59.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl
                          rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:fc:43:cf:75:de:8a:1d:51:5d:b2:84:f9:95:8b:5f:77:d5:4e:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54C376960A26972A0B767BDA084048DFFE3673E
        Validity
            Not Before: Apr  3 18:25:31 2024 GMT
            Not After : Apr  2 18:30:31 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e5:37:28:1a:9b:37:63:df:c7:4a:7c:cd:71:
                    ce:55:2c:59:84:b3:1a:31:e2:dc:09:ec:7b:61:25:
                    70:c5:6f:42:a2:4a:f6:75:63:2f:6c:95:22:23:5f:
                    dc:01:ce:fe:6d:18:b5:50:3b:47:65:ce:1a:cf:d0:
                    c6:80:e2:fc:4f:2b:78:da:21:b9:9f:46:6f:58:58:
                    09:df:04:98:72:bf:cc:c7:9e:b4:f7:b2:69:d5:f6:
                    5f:89:36:b6:8e:c1:42:da:32:65:0a:5e:43:a0:2b:
                    75:44:fc:ec:6d:e5:6f:6a:ed:0a:71:1f:e0:9d:b8:
                    9e:b8:03:c5:d8:dc:96:59:9c:06:a0:83:e8:e6:ab:
                    0a:03:52:4d:13:90:9a:c9:88:71:42:7c:d0:c4:51:
                    e6:9e:92:3d:ed:9d:79:bc:7f:b8:1a:7e:90:5e:93:
                    fe:e4:c4:f4:43:01:0c:1d:cd:a1:86:bc:c9:5e:e4:
                    06:c1:c9:c1:9a:4a:e3:85:68:e6:92:38:31:65:b8:
                    bd:4a:7f:eb:37:17:30:f5:2a:c7:87:b0:75:27:d2:
                    1f:39:7c:86:fe:2d:5f:33:c3:ed:5b:ad:31:d0:02:
                    6c:73:a4:a6:8a:7a:b5:f1:d5:43:b5:8b:bd:f7:e6:
                    40:b8:43:ec:83:e2:d2:f0:2f:14:11:f6:6e:83:28:
                    1f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:87:0E:C1:AD:22:9F:AD:9B:12:65:F2:08:6E:34:F7:0C:C7:70:C5
            X509v3 Authority Key Identifier:
                keyid:D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e3133322e35392e302f32342d3234203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.132.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:1a:f5:9e:5b:d2:11:ee:78:5b:77:39:86:37:e4:d7:30:e0:
         a8:48:67:8c:c1:f4:99:25:50:60:4b:af:4e:ab:4b:df:f9:0f:
         63:fc:6b:f4:8f:38:e9:61:13:dd:96:ba:96:e3:3b:30:d4:50:
         0f:c4:bb:31:5e:6a:8e:1b:2d:55:09:e3:34:84:ad:f6:77:52:
         a3:53:eb:71:73:d1:35:11:d4:01:6b:57:3b:e6:a2:ad:b8:de:
         18:df:81:88:e7:09:35:cb:f3:96:32:e9:2c:b9:51:05:ec:e7:
         bc:2f:a3:cc:c8:1b:cf:0e:b3:0c:a9:35:34:e0:0e:02:0f:07:
         8f:a9:e4:c0:9b:39:53:5a:31:74:c9:e6:04:2f:aa:56:66:f6:
         96:fe:00:a7:4a:50:23:23:7c:48:06:8c:e4:93:e3:0a:0e:7b:
         7a:65:d9:6e:1c:ed:bc:dd:30:74:e2:96:96:c0:2b:87:43:3f:
         93:2f:81:36:a2:31:9d:23:af:c5:26:67:c7:fd:5b:30:f2:27:
         6e:04:3e:17:37:a6:fc:22:c2:1f:ef:9d:20:26:c9:87:cf:1d:
         14:ac:af:54:6d:e0:fb:03:3f:fd:d0:e0:04:9b:fe:32:ae:41:
         62:2d:55:ff:50:ae:25:cb:44:0f:9b:a7:b4:1a:ba:37:a9:b5:
         93:71:08:3f
-----BEGIN CERTIFICATE-----
MIIHPzCCBiegAwIBAgIUG/xDz3Xeih1RXbKE+ZWLX3fVTv4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDU0QzM3Njk2MEEyNjk3MkEwQjc2N0JEQTA4NDA0OERG
RkUzNjczRTAeFw0yNDA0MDMxODI1MzFaFw0yNTA0MDIxODMwMzFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzVFNTM3MjgxQTlCMzc2M0RG
Qzc0QTdDQ0Q3MUNFNTUyQzU5ODRCMzFBMzFFMkRDMDlFQzdCNjEyNTcwQzU2RjQy
QTI0QUY2NzU2MzJGNkM5NTIyMjM1RkRDMDFDRUZFNkQxOEI1NTAzQjQ3NjVDRTFB
Q0ZEMEM2ODBFMkZDNEYyQjc4REEyMUI5OUY0NjZGNTg1ODA5REYwNDk4NzJCRkND
Qzc5RUI0RjdCMjY5RDVGNjVGODkzNkI2OEVDMTQyREEzMjY1MEE1RTQzQTAyQjc1
NDRGQ0VDNkRFNTZGNkFFRDBBNzExRkUwOURCODlFQjgwM0M1RDhEQzk2NTk5QzA2
QTA4M0U4RTZBQjBBMDM1MjREMTM5MDlBQzk4ODcxNDI3Q0QwQzQ1MUU2OUU5MjNE
RUQ5RDc5QkM3RkI4MUE3RTkwNUU5M0ZFRTRDNEY0NDMwMTBDMURDREExODZCQ0M5
NUVFNDA2QzFDOUMxOUE0QUUzODU2OEU2OTIzODMxNjVCOEJENEE3RkVCMzcxNzMw
RjUyQUM3ODdCMDc1MjdEMjFGMzk3Qzg2RkUyRDVGMzNDM0VENUJBRDMxRDAwMjZD
NzNBNEE2OEE3QUI1RjFENTQzQjU4QkJERjdFNjQwQjg0M0VDODNFMkQyRjAyRjE0
MTFGNjZFODMyODFGMzcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxeU3KBqbN2Pfx0p8zXHOVSxZhLMaMeLcCex7YSVwxW9Cokr2dWMv
bJUiI1/cAc7+bRi1UDtHZc4az9DGgOL8Tyt42iG5n0ZvWFgJ3wSYcr/Mx56097Jp
1fZfiTa2jsFC2jJlCl5DoCt1RPzsbeVvau0KcR/gnbieuAPF2NyWWZwGoIPo5qsK
A1JNE5CayYhxQnzQxFHmnpI97Z15vH+4Gn6QXpP+5MT0QwEMHc2hhrzJXuQGwcnB
mkrjhWjmkjgxZbi9Sn/rNxcw9SrHh7B1J9IfOXyG/i1fM8PtW60x0AJsc6Sminq1
8dVDtYu99+ZAuEPsg+LS8C8UEfZugygfNwIDAQABo4ICTTCCAkkwHQYDVR0OBBYE
FC+HDsGtIp+tmxJl8ghuNPcMx3DFMB8GA1UdIwQYMBaAFNVMN2lgomlyoLdnvaCE
BI3/42c+MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhFYjRBR2pmTlk5emQ3
dEJtd2hUWExUSnlGRkFGelVGcVBnZUhVQ04xU3dhLzEvRDU0QzM3Njk2MEEyNjk3
MkEwQjc2N0JEQTA4NDA0OERGRkUzNjczRS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9ENTRDMzc2OTYwQTI2OTcyQTBCNzY3QkRBMDg0MDQ4REZGRTM2
NzNFLmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84RWI0QUdqZk5ZOXpkN3RCbXdo
VFhMVEp5RkZBRnpVRnFQZ2VIVUNOMVN3YS8xLzMyMzAzMDJlMzEzMzMyMmUzNTM5
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMxMzYucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADIhDsw
DQYJKoZIhvcNAQELBQADggEBAIMa9Z5b0hHueFt3OYY35Ncw4KhIZ4zB9JklUGBL
r06rS9/5D2P8a/SPOOlhE92WupbjOzDUUA/EuzFeao4bLVUJ4zSErfZ3UqNT63Fz
0TUR1AFrVzvmoq243hjfgYjnCTXL85Yy6Sy5UQXs57wvo8zIG88OswypNTTgDgIP
B4+p5MCbOVNaMXTJ5gQvqlZm9pb+AKdKUCMjfEgGjOST4woOe3pl2W4c7bzdMHTi
lpbAK4dDP5MvgTaiMZ0jr8UmZ8f9WzDyJ24EPhc3pvwiwh/vnSAmyYfPHRSsr1Rt
4PsDP/3Q4ASb/jKuQWItVf9QriXLRA+bp7QaujeptZNxCD8=
-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:33 2024 by rpki-client on console-fra.rpki-client.org