Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e31372e38332e302f32342d3234203d3e2032373136.roa
File:                     3230302e31372e38332e302f32342d3234203d3e2032373136.roa (raw, json)
Hash identifier:          MpHKdf7BnRzPt8rBOK6S95G2bSIeofZZhra710q89g0=
Subject key identifier:   BA:DE:AE:97:71:27:78:C2:39:E7:DB:40:B8:68:D7:FB:A5:0F:AF:7E
Certificate issuer:       /CN=D54C376960A26972A0B767BDA084048DFFE3673E
Certificate serial:       653E9F483D973F98BC4D3CFEBC41DC219AC6988B
Authority key identifier: D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e31372e38332e302f32342d3234203d3e2032373136.roa
Signing time:             Wed 03 Apr 2024 18:30:28 +0000
ROA not before:           Wed 03 Apr 2024 18:25:28 +0000
ROA not after:            Wed 02 Apr 2025 18:30:28 +0000
asID:                     2716
IP address blocks:        200.17.83.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl
                          rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:3e:9f:48:3d:97:3f:98:bc:4d:3c:fe:bc:41:dc:21:9a:c6:98:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54C376960A26972A0B767BDA084048DFFE3673E
        Validity
            Not Before: Apr  3 18:25:28 2024 GMT
            Not After : Apr  2 18:30:28 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d6:a5:8a:c0:6a:d8:8e:c8:2d:07:a9:77:ee:
                    6a:a7:19:74:1a:ea:28:82:5d:66:52:6c:13:9a:90:
                    45:85:3b:6c:e5:89:6b:9d:d8:af:b5:3b:09:16:52:
                    6e:d5:a3:5e:73:0f:ea:3d:cf:79:48:4a:9e:62:58:
                    f9:3d:1c:20:72:de:fb:7e:ed:ff:60:d6:a9:86:eb:
                    07:f8:94:c6:55:18:1c:18:ff:16:fd:ec:46:d8:d2:
                    0e:d4:ab:59:ee:cb:20:f4:0e:a2:40:89:db:f6:26:
                    c4:a5:e7:f9:52:54:02:37:8e:67:98:08:92:5c:22:
                    68:26:62:3a:f3:c8:36:5c:43:12:d4:12:e4:5d:a1:
                    00:6a:09:a5:25:ac:bf:f4:60:60:14:b8:14:e5:d3:
                    6a:1e:78:0d:06:44:b2:a5:df:b1:74:21:59:f1:5c:
                    20:51:65:46:14:f8:ba:90:5c:e9:b8:db:eb:58:6c:
                    ca:b4:7b:1a:9e:94:39:34:94:fc:26:9b:53:9f:8a:
                    41:5f:69:bd:76:5b:a8:a7:47:59:75:ae:20:3b:21:
                    8b:3f:00:56:4e:a0:4e:96:d9:3d:e7:22:e8:77:3c:
                    25:89:1d:b8:e1:54:ce:53:be:e2:41:fa:1b:bf:58:
                    b0:8e:24:fb:f3:1d:a3:8b:aa:37:2f:8c:d8:c6:d7:
                    cc:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:DE:AE:97:71:27:78:C2:39:E7:DB:40:B8:68:D7:FB:A5:0F:AF:7E
            X509v3 Authority Key Identifier:
                keyid:D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e31372e38332e302f32342d3234203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.17.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:42:72:9b:bd:1a:b5:93:4e:f7:12:ef:b4:11:9a:2c:67:d9:
         f2:ba:84:13:eb:a3:df:ec:9a:71:af:b9:6d:0a:a0:f4:3b:80:
         91:e4:a0:4a:9d:4b:4b:64:a3:29:dc:24:b6:f8:15:e7:cb:73:
         c6:63:45:c1:59:a8:de:8d:b6:d4:39:83:98:eb:04:4c:e0:5d:
         5b:bd:5b:5d:16:27:9c:78:f2:4b:0b:ab:e7:ee:66:19:39:2d:
         ea:81:b7:59:77:b5:82:3a:3f:4e:2e:f5:f8:02:ea:e5:33:5e:
         da:44:85:61:95:94:f0:d1:e3:e2:75:cc:a6:0d:40:a7:59:47:
         28:66:29:a7:a6:06:94:36:13:5f:30:dd:52:bc:40:35:d0:3a:
         7e:67:f0:88:6c:43:de:17:63:d1:ff:8d:09:e6:06:aa:c5:d9:
         73:c5:9c:c3:32:69:35:c9:4f:58:eb:37:d5:39:bb:e1:65:b2:
         ad:91:80:32:f8:09:fe:c2:a7:e2:5f:0d:c1:78:27:cb:91:9c:
         36:9e:8d:b8:82:ca:8d:61:7d:53:ac:c9:cc:21:8a:c3:9e:94:
         9d:56:17:96:88:4b:1c:1d:3f:86:26:b0:ba:84:0c:c5:1a:fb:
         af:43:54:13:41:ac:47:ef:98:1d:28:de:54:dc:09:96:33:3d:
         15:f7:32:f0
-----BEGIN CERTIFICATE-----
MIIHPTCCBiWgAwIBAgIUZT6fSD2XP5i8TTz+vEHcIZrGmIswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDU0QzM3Njk2MEEyNjk3MkEwQjc2N0JEQTA4NDA0OERG
RkUzNjczRTAeFw0yNDA0MDMxODI1MjhaFw0yNTA0MDIxODMwMjhaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTJENkE1OEFDMDZBRDg4RUM4
MkQwN0E5NzdFRTZBQTcxOTc0MUFFQTI4ODI1RDY2NTI2QzEzOUE5MDQ1ODUzQjZD
RTU4OTZCOUREOEFGQjUzQjA5MTY1MjZFRDVBMzVFNzMwRkVBM0RDRjc5NDg0QTlF
NjI1OEY5M0QxQzIwNzJERUZCN0VFREZGNjBENkE5ODZFQjA3Rjg5NEM2NTUxODFD
MThGRjE2RkRFQzQ2RDhEMjBFRDRBQjU5RUVDQjIwRjQwRUEyNDA4OURCRjYyNkM0
QTVFN0Y5NTI1NDAyMzc4RTY3OTgwODkyNUMyMjY4MjY2MjNBRjNDODM2NUM0MzEy
RDQxMkU0NURBMTAwNkEwOUE1MjVBQ0JGRjQ2MDYwMTRCODE0RTVEMzZBMUU3ODBE
MDY0NEIyQTVERkIxNzQyMTU5RjE1QzIwNTE2NTQ2MTRGOEJBOTA1Q0U5QjhEQkVC
NTg2Q0NBQjQ3QjFBOUU5NDM5MzQ5NEZDMjY5QjUzOUY4QTQxNUY2OUJENzY1QkE4
QTc0NzU5NzVBRTIwM0IyMThCM0YwMDU2NEVBMDRFOTZEOTNERTcyMkU4NzczQzI1
ODkxREI4RTE1NENFNTNCRUUyNDFGQTFCQkY1OEIwOEUyNEZCRjMxREEzOEJBQTM3
MkY4Q0Q4QzZEN0NDMTMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA4talisBq2I7ILQepd+5qpxl0Guoogl1mUmwTmpBFhTts5Ylrndiv
tTsJFlJu1aNecw/qPc95SEqeYlj5PRwgct77fu3/YNaphusH+JTGVRgcGP8W/exG
2NIO1KtZ7ssg9A6iQInb9ibEpef5UlQCN45nmAiSXCJoJmI688g2XEMS1BLkXaEA
agmlJay/9GBgFLgU5dNqHngNBkSypd+xdCFZ8VwgUWVGFPi6kFzpuNvrWGzKtHsa
npQ5NJT8JptTn4pBX2m9dluop0dZda4gOyGLPwBWTqBOltk95yLodzwliR244VTO
U77iQfobv1iwjiT78x2ji6o3L4zYxtfMEwIDAQABo4ICSzCCAkcwHQYDVR0OBBYE
FLrerpdxJ3jCOefbQLho1/ulD69+MB8GA1UdIwQYMBaAFNVMN2lgomlyoLdnvaCE
BI3/42c+MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhFYjRBR2pmTlk5emQ3
dEJtd2hUWExUSnlGRkFGelVGcVBnZUhVQ04xU3dhLzEvRDU0QzM3Njk2MEEyNjk3
MkEwQjc2N0JEQTA4NDA0OERGRkUzNjczRS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9ENTRDMzc2OTYwQTI2OTcyQTBCNzY3QkRBMDg0MDQ4REZGRTM2
NzNFLmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84RWI0QUdqZk5ZOXpkN3RCbXdo
VFhMVEp5RkZBRnpVRnFQZ2VIVUNOMVN3YS8xLzMyMzAzMDJlMzEzNzJlMzgzMzJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczMTM2LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyBFTMA0G
CSqGSIb3DQEBCwUAA4IBAQCdQnKbvRq1k073Eu+0EZosZ9nyuoQT66Pf7Jpxr7lt
CqD0O4CR5KBKnUtLZKMp3CS2+BXny3PGY0XBWajejbbUOYOY6wRM4F1bvVtdFiec
ePJLC6vn7mYZOS3qgbdZd7WCOj9OLvX4AurlM17aRIVhlZTw0ePidcymDUCnWUco
ZimnpgaUNhNfMN1SvEA10Dp+Z/CIbEPeF2PR/40J5gaqxdlzxZzDMmk1yU9Y6zfV
ObvhZbKtkYAy+An+wqfiXw3BeCfLkZw2no24gsqNYX1TrMnMIYrDnpSdVheWiEsc
HT+GJrC6hAzFGvuvQ1QTQaxH75gdKN5U3AmWMz0V9zLw
-----END CERTIFICATE-----
Generated at Tue Nov 26 07:51:05 2024 by rpki-client on console-fra.rpki-client.org