Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e31392e3235302e302f32342d3234203d3e2032373136.roa
File:                     3230302e31392e3235302e302f32342d3234203d3e2032373136.roa (raw, json)
Hash identifier:          o9FRroVTRjep+1Lwf12w1+inskGt8vIJafipR3EmZNU=
Subject key identifier:   9F:FE:0D:B4:55:C0:60:1D:AC:A1:F1:D9:C9:B8:34:78:42:FE:ED:3C
Certificate issuer:       /CN=D54C376960A26972A0B767BDA084048DFFE3673E
Certificate serial:       0F999D61C246352E59254DADE4850EEA31C1DBCD
Authority key identifier: D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e31392e3235302e302f32342d3234203d3e2032373136.roa
Signing time:             Wed 03 Apr 2024 18:30:31 +0000
ROA not before:           Wed 03 Apr 2024 18:25:31 +0000
ROA not after:            Wed 02 Apr 2025 18:30:31 +0000
asID:                     2716
IP address blocks:        200.19.250.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl
                          rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:99:9d:61:c2:46:35:2e:59:25:4d:ad:e4:85:0e:ea:31:c1:db:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54C376960A26972A0B767BDA084048DFFE3673E
        Validity
            Not Before: Apr  3 18:25:31 2024 GMT
            Not After : Apr  2 18:30:31 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3b:bd:ff:7c:6f:be:38:c4:10:a1:2e:db:53:
                    2a:4b:37:4f:58:bb:97:ed:ca:98:53:b5:96:89:1d:
                    aa:80:97:8f:89:03:ec:9f:47:08:2e:24:f5:69:dd:
                    34:dd:51:18:bd:0f:a5:c8:c1:e9:c4:4c:2e:b5:59:
                    b5:e9:72:b1:fe:cc:f1:06:91:24:15:78:41:d9:f1:
                    b9:de:36:59:a5:25:39:03:8e:05:d7:89:52:02:9c:
                    3d:08:bb:5d:b1:c2:f7:d0:12:e1:9d:3e:88:a8:7e:
                    b7:20:dc:29:30:a2:d8:93:77:3f:0e:31:6e:b2:4b:
                    74:6b:20:4b:3c:59:be:c2:4f:8a:32:4e:cd:bf:8c:
                    c4:29:ab:c1:4b:cd:19:cd:a6:14:6b:b8:19:b3:b9:
                    9e:b3:5a:41:4f:c5:4a:fc:18:98:39:c1:be:7c:88:
                    dc:f4:65:b8:9f:be:e5:0f:74:59:7f:22:7a:80:2e:
                    1f:8d:40:93:e7:66:24:a6:9a:1a:63:e3:39:6b:2e:
                    b3:a9:41:34:18:65:82:76:ed:59:37:95:c9:91:ee:
                    e6:45:3d:25:3d:cf:93:e2:75:57:f8:78:a3:0b:e4:
                    88:74:91:5c:09:30:13:6a:c5:68:03:3a:c1:cc:0d:
                    33:b9:67:c7:6d:03:67:22:82:4b:67:47:73:86:7d:
                    c6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:FE:0D:B4:55:C0:60:1D:AC:A1:F1:D9:C9:B8:34:78:42:FE:ED:3C
            X509v3 Authority Key Identifier:
                keyid:D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e31392e3235302e302f32342d3234203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:6f:27:6c:75:bf:79:6c:cc:6d:7f:68:d4:18:14:f7:56:9e:
         83:fa:a7:0d:a8:53:84:f0:39:75:9e:bb:e5:93:35:d3:b5:a6:
         25:46:ae:0f:2a:bb:95:80:9e:4d:a1:7c:06:1c:ee:60:59:83:
         bc:06:40:a5:ff:c3:b4:ca:9b:02:43:75:5a:e1:08:20:da:02:
         ab:51:0e:46:e1:98:2c:d6:8a:b6:ca:33:c5:1f:7f:db:a0:ee:
         dd:bf:f3:10:64:8f:64:db:0d:c1:ef:62:03:e7:64:be:07:fa:
         31:6a:8e:9a:0a:a3:83:28:df:9e:2f:36:02:10:83:44:e6:16:
         cd:08:20:7c:3a:8a:c9:a8:fa:79:00:6b:e1:8d:95:e8:53:11:
         75:4b:b2:8d:0b:fd:84:e1:eb:7e:74:14:39:22:7e:bf:a3:82:
         a9:28:f1:dc:2d:fd:21:86:63:4f:b4:a1:9f:02:ea:bd:93:1f:
         5f:49:97:c2:b6:2f:a8:14:52:61:16:7e:69:28:cc:c3:e6:dd:
         f0:45:fe:9d:0d:d3:e7:5e:c9:1d:11:e0:0a:2c:ee:a5:dd:a1:
         48:a5:63:11:a0:e7:9d:f1:b8:26:f3:ba:80:de:e0:08:98:2b:
         3f:b3:e5:f5:ce:42:d0:1d:46:85:ce:8b:7f:a0:95:4e:fb:d4:
         7e:a8:9c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:33 2024 by rpki-client on console-fra.rpki-client.org