Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e31392e3234302e302f32302d3230203d3e2032373136.roa
File:                     3230302e31392e3234302e302f32302d3230203d3e2032373136.roa (raw, json)
Hash identifier:          +5Y9Ic9BE1TZ20sjwg9D8ZnL6HU+TY08azGwnnG5xfA=
Subject key identifier:   D7:35:6E:C0:F7:B0:50:4E:4E:E8:CA:78:FC:C8:D5:7A:C6:CD:33:DF
Certificate issuer:       /CN=D54C376960A26972A0B767BDA084048DFFE3673E
Certificate serial:       39BA390497E41BD8CAB0D9E6D88ED0DA1C480DE4
Authority key identifier: D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e31392e3234302e302f32302d3230203d3e2032373136.roa
Signing time:             Wed 03 Apr 2024 18:30:29 +0000
ROA not before:           Wed 03 Apr 2024 18:25:29 +0000
ROA not after:            Wed 02 Apr 2025 18:30:29 +0000
asID:                     2716
IP address blocks:        200.19.240.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl
                          rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 00:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:ba:39:04:97:e4:1b:d8:ca:b0:d9:e6:d8:8e:d0:da:1c:48:0d:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54C376960A26972A0B767BDA084048DFFE3673E
        Validity
            Not Before: Apr  3 18:25:29 2024 GMT
            Not After : Apr  2 18:30:29 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0c:ea:90:1a:c4:3c:da:38:f1:bf:57:64:05:
                    07:92:59:3d:7a:fa:11:98:f2:93:5f:4d:22:3a:94:
                    70:66:cd:91:d4:6c:33:d5:4b:b7:28:03:e1:e8:21:
                    ea:2f:9f:38:54:80:3c:69:8d:39:98:c9:18:74:93:
                    75:8c:4b:02:1a:28:0d:29:47:60:86:ec:90:77:b5:
                    41:cf:20:80:fc:61:9b:a3:a8:23:7f:4e:eb:e6:cb:
                    cb:33:f9:97:c9:4c:57:3a:60:89:f6:8e:a1:b1:40:
                    d4:82:f6:69:ea:46:5e:4e:b7:f7:3e:10:47:4b:f6:
                    41:8c:c1:e1:9c:a2:6e:ec:8c:f3:66:ce:5d:46:69:
                    08:bf:56:0e:06:31:b6:00:4e:07:e1:1a:38:d2:96:
                    bb:a0:ba:d1:0b:fa:66:e1:18:f7:f9:9d:6b:18:89:
                    c2:c0:8a:ec:24:af:f9:3d:59:20:76:c1:56:31:c4:
                    05:be:d2:cd:c4:49:c8:f5:67:c9:80:d2:4a:8c:de:
                    14:aa:64:2b:40:7c:8e:cf:2d:7a:50:94:4a:6a:80:
                    fc:4d:1a:bd:89:3c:63:1f:cb:b1:5c:b5:88:c9:54:
                    f0:0e:2a:96:1f:80:e1:b2:4d:c5:a6:20:5a:49:aa:
                    d4:7b:c0:a0:f1:39:f5:4e:e8:29:28:a3:db:e7:5f:
                    5e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:35:6E:C0:F7:B0:50:4E:4E:E8:CA:78:FC:C8:D5:7A:C6:CD:33:DF
            X509v3 Authority Key Identifier:
                keyid:D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e31392e3234302e302f32302d3230203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4d:9f:72:1e:a7:cf:68:fd:53:15:95:02:62:1a:3e:ad:d9:a5:
         ad:e0:db:47:fc:bd:b3:e1:06:3e:33:09:81:00:90:05:ce:b8:
         7b:01:18:69:3e:7b:9f:e2:ea:a6:c2:79:c1:b5:df:3f:13:c3:
         a5:6b:d1:a3:1b:4a:68:da:1b:dc:71:59:1b:2d:f7:6d:9a:75:
         1c:6a:62:f5:d7:63:ad:47:fc:1a:07:2b:2c:10:95:08:09:31:
         a2:8e:bf:66:95:c2:25:38:6e:1d:ae:aa:8f:07:8a:a8:3e:b8:
         e8:e3:6b:bf:8a:40:33:c3:69:7a:c3:e3:ce:d0:70:82:db:1a:
         2b:5c:3c:05:4f:98:dc:9e:dc:fc:30:f9:25:34:e9:1c:9f:57:
         59:a2:ef:78:93:cb:bb:24:9a:58:fb:12:76:2d:88:1d:8f:33:
         53:41:c6:14:e1:0f:bb:61:cf:92:d0:18:7e:cd:15:05:0c:ef:
         cf:22:4c:ca:e3:63:b6:7b:7f:fa:fd:20:8e:35:10:10:1f:81:
         13:9c:85:e3:af:01:e0:18:30:4c:6e:12:4c:a3:56:fb:c2:74:
         a9:7b:70:5c:e8:40:6d:eb:3b:60:73:88:c7:ce:1f:ce:67:3b:
         ab:7a:da:96:7f:96:3c:d5:26:65:6a:28:65:67:56:b8:f9:db:
         d5:2d:a7:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 04:55:34 2024 by rpki-client on console-fra.rpki-client.org