Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e31372e3136302e302f32302d3230203d3e2032373136.roa
File:                     3230302e31372e3136302e302f32302d3230203d3e2032373136.roa (raw, json)
Hash identifier:          WQUpBI8hWJn1hksn/drXlyium3Gij5GPz6SGUF+tRkI=
Subject key identifier:   BB:B7:E6:D4:76:4A:46:6D:78:53:AF:F4:AA:46:1B:92:1A:9C:97:61
Certificate issuer:       /CN=D54C376960A26972A0B767BDA084048DFFE3673E
Certificate serial:       2E3BE8ED78B0BFFDE7D9B263F7429A9FD1C0A317
Authority key identifier: D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e31372e3136302e302f32302d3230203d3e2032373136.roa
Signing time:             Wed 03 Apr 2024 18:30:29 +0000
ROA not before:           Wed 03 Apr 2024 18:25:29 +0000
ROA not after:            Wed 02 Apr 2025 18:30:29 +0000
asID:                     2716
IP address blocks:        200.17.160.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl
                          rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:3b:e8:ed:78:b0:bf:fd:e7:d9:b2:63:f7:42:9a:9f:d1:c0:a3:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54C376960A26972A0B767BDA084048DFFE3673E
        Validity
            Not Before: Apr  3 18:25:29 2024 GMT
            Not After : Apr  2 18:30:29 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e4:7c:eb:01:e3:7b:de:5b:7e:62:fd:6d:9f:
                    cf:c2:0c:b9:cd:67:b0:57:c5:ab:98:4e:e9:21:5d:
                    d1:f6:e0:63:ec:a2:a3:a0:3f:9e:66:96:28:d7:84:
                    4e:f1:e4:f2:f1:50:4b:af:5d:ce:8c:c8:1d:8f:48:
                    fd:6d:ea:08:64:0f:3a:aa:86:bc:55:9c:ad:96:41:
                    52:67:1d:49:f2:b0:fe:9d:46:98:c8:e2:18:5f:5d:
                    b9:4c:3f:42:91:17:74:4f:3e:f1:35:ce:d6:7a:e4:
                    ad:7d:e6:75:16:b2:f6:33:1f:dc:72:c4:29:7b:6b:
                    fa:99:af:73:f1:b4:a9:c5:5d:73:38:4e:ed:ca:09:
                    e0:69:54:db:bd:14:1b:94:b7:8c:e1:ec:0e:d9:73:
                    67:9d:c7:b4:74:de:ae:ac:51:44:4e:6f:b7:40:43:
                    b4:db:58:85:7a:ec:d8:07:7f:f2:cc:bd:1b:09:08:
                    94:36:d3:2a:fa:4d:9a:53:00:8b:98:54:ed:55:c9:
                    9f:b7:2d:02:8f:be:94:a1:48:56:c3:cb:51:6e:89:
                    81:91:75:6e:c2:ca:90:1f:b2:04:2d:5d:66:b2:c3:
                    6a:7e:99:92:22:cb:3e:8b:9d:4d:f2:b1:01:2f:95:
                    a4:74:21:34:f4:1b:58:6f:9d:b5:21:d2:f4:f2:43:
                    ce:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:B7:E6:D4:76:4A:46:6D:78:53:AF:F4:AA:46:1B:92:1A:9C:97:61
            X509v3 Authority Key Identifier:
                keyid:D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e31372e3136302e302f32302d3230203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.17.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         81:aa:4c:04:6b:48:14:5b:9a:83:a5:03:2f:af:77:92:0d:e2:
         27:b5:77:78:e5:68:34:61:29:8f:36:95:bf:9a:8c:ee:10:26:
         0a:2a:c0:72:be:fa:f3:dc:ec:0c:fd:08:7c:dc:5f:6b:71:f7:
         41:78:b6:96:22:af:bd:14:e3:5f:28:23:cf:2c:33:b9:b1:6d:
         3a:8f:3b:7b:21:b4:94:0c:01:73:8d:7d:c6:6f:69:17:60:be:
         10:80:e8:18:96:4f:fc:18:f8:45:35:ad:70:8a:ae:ac:4a:06:
         3b:56:bb:fb:23:f1:87:9e:98:a1:d7:40:29:21:14:19:57:98:
         2e:4b:e7:cc:9e:03:b3:ae:56:1a:3e:bf:d3:e2:e5:f2:40:22:
         9c:bf:b5:2f:68:e5:29:dc:bc:03:81:6b:f4:eb:af:39:4d:f0:
         c8:16:0d:94:29:80:bb:fc:9c:e8:79:7a:be:92:19:48:c2:25:
         cd:d3:b2:ef:af:9a:af:34:36:f7:9b:9d:be:b1:2e:23:8b:6d:
         7c:ab:44:af:91:18:b4:80:67:7b:a6:de:1d:2d:03:6a:87:12:
         90:4c:fe:c4:2b:bc:f8:37:76:67:61:32:fa:29:2f:c8:7e:57:
         c2:86:3a:f3:c8:de:d0:c0:77:69:74:ce:60:85:ff:45:20:dc:
         49:4a:07:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:33 2024 by rpki-client on console-fra.rpki-client.org