Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e3133322e38362e302f32332d3234203d3e2032373136.roa
File:                     3230302e3133322e38362e302f32332d3234203d3e2032373136.roa (raw, json)
Hash identifier:          ATWx+FTsuBmntfBHN4s42o723qgKTHViT7kkq7fxcNQ=
Subject key identifier:   6D:2B:C3:43:E6:AB:A8:3C:4E:3E:01:C3:64:39:A6:75:7D:55:9B:7A
Certificate issuer:       /CN=D54C376960A26972A0B767BDA084048DFFE3673E
Certificate serial:       41035CF4C50DFE809BB5535F8C8E0E445CF6CE9D
Authority key identifier: D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e3133322e38362e302f32332d3234203d3e2032373136.roa
Signing time:             Wed 21 Aug 2024 14:59:41 +0000
ROA not before:           Wed 21 Aug 2024 14:54:41 +0000
ROA not after:            Wed 20 Aug 2025 14:59:41 +0000
asID:                     2716
IP address blocks:        200.132.86.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl
                          rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:03:5c:f4:c5:0d:fe:80:9b:b5:53:5f:8c:8e:0e:44:5c:f6:ce:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54C376960A26972A0B767BDA084048DFFE3673E
        Validity
            Not Before: Aug 21 14:54:41 2024 GMT
            Not After : Aug 20 14:59:41 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a8:c5:c3:e0:a9:23:6f:49:02:95:e8:61:10:
                    e1:6c:2c:82:f3:8e:30:76:94:a2:98:ee:e5:68:b6:
                    c2:f9:2b:c0:95:f5:76:44:0a:60:fd:41:97:b8:5d:
                    3b:f6:9e:90:ee:ec:26:45:31:2e:73:52:93:ac:b4:
                    90:a8:f2:83:94:ed:dc:78:0c:44:83:20:02:79:7f:
                    69:33:75:7b:86:72:a9:73:f7:01:2a:cc:1a:b9:65:
                    8c:b4:0d:8d:74:f2:6f:6c:60:bf:8b:a7:ea:8d:e9:
                    97:dd:1c:97:aa:e8:e8:6b:87:04:80:5e:01:ff:3f:
                    71:9c:f2:1e:b1:ef:aa:0b:b5:9e:01:a8:96:4f:fc:
                    bc:05:88:d0:95:b5:91:a2:7a:ab:b6:d6:09:59:14:
                    78:c7:d1:04:7e:34:a5:e5:d5:8b:61:9c:3a:e7:a7:
                    74:6a:50:87:ca:a7:f2:ab:59:b8:7b:fa:49:aa:92:
                    5a:14:9e:42:98:a9:e4:69:6b:5c:08:b1:3a:d2:7f:
                    36:5a:f7:3b:56:ba:0b:cc:3c:44:41:9f:27:f8:ee:
                    c6:e2:d5:2e:00:2e:d0:45:3c:2e:bb:40:48:22:3a:
                    32:40:b1:d7:58:85:02:12:e4:24:8c:f0:da:46:26:
                    c5:82:7c:6d:c0:93:e2:cc:83:f1:5e:69:cc:6b:3d:
                    88:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:2B:C3:43:E6:AB:A8:3C:4E:3E:01:C3:64:39:A6:75:7D:55:9B:7A
            X509v3 Authority Key Identifier:
                keyid:D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e3133322e38362e302f32332d3234203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.132.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:f1:75:6a:ba:f2:85:45:d3:c7:74:4b:24:09:6c:4b:b8:ba:
         ce:b4:81:ff:b9:39:ca:9d:65:01:1f:5e:e1:c4:5b:64:41:70:
         5b:06:2d:0d:f7:61:7f:ba:26:83:3a:12:bb:0b:81:fd:a9:53:
         b6:bc:60:74:2c:0b:c1:21:56:54:b3:b3:8a:57:a6:3a:a7:af:
         74:92:7a:c6:76:0a:39:4a:ea:0f:c8:f3:b1:0f:de:06:b8:d0:
         8b:b5:3b:04:41:15:75:5e:e8:36:44:46:ca:3b:9e:65:85:4e:
         46:20:4c:8d:a9:92:b5:3d:5f:b3:9f:e5:3b:37:13:bb:61:81:
         dc:91:0f:92:dd:00:1b:11:fa:6b:a5:21:a9:8d:87:55:a4:bd:
         42:2b:8f:58:e6:62:0f:00:d7:e2:8b:59:03:cb:b3:c7:74:39:
         72:32:79:35:02:f1:3c:13:ea:74:62:91:a9:e1:77:33:36:ac:
         28:b2:1c:01:64:21:f4:d8:ab:dc:ac:8c:3c:06:a2:17:10:b6:
         b2:1d:76:1b:f8:93:33:f2:3a:b9:c5:07:63:81:7b:a8:ab:e5:
         41:95:85:41:ff:4b:8d:91:56:d7:22:bd:38:0c:ad:b5:c6:89:
         ad:04:16:d0:0d:9c:87:9a:5d:e6:20:40:d6:58:be:a7:76:78:
         bd:f0:a5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:33 2024 by rpki-client on console-fra.rpki-client.org