Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e31392e3235332e302f32342d3234203d3e2032373136.roa
File:                     3230302e31392e3235332e302f32342d3234203d3e2032373136.roa (raw, json)
Hash identifier:          KNw9pHtMCOtDNM6AHH3TBvjgqAzKEvbmanmFvdULb4M=
Subject key identifier:   9A:73:64:AD:7D:FF:55:70:27:63:C7:23:EB:30:36:14:87:4A:BC:0D
Certificate issuer:       /CN=D54C376960A26972A0B767BDA084048DFFE3673E
Certificate serial:       7DC85EA8837A20A9497EA766206488CD78752F3A
Authority key identifier: D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e31392e3235332e302f32342d3234203d3e2032373136.roa
Signing time:             Wed 21 Aug 2024 14:59:23 +0000
ROA not before:           Wed 21 Aug 2024 14:54:23 +0000
ROA not after:            Wed 20 Aug 2025 14:59:23 +0000
asID:                     2716
IP address blocks:        200.19.253.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl
                          rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:c8:5e:a8:83:7a:20:a9:49:7e:a7:66:20:64:88:cd:78:75:2f:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54C376960A26972A0B767BDA084048DFFE3673E
        Validity
            Not Before: Aug 21 14:54:23 2024 GMT
            Not After : Aug 20 14:59:23 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:35:54:71:2a:32:c7:ef:78:61:eb:12:71:74:
                    d1:13:83:ba:82:41:ac:90:f0:53:5e:29:1b:43:c0:
                    9f:e8:b4:98:af:04:dc:ac:d7:b7:70:96:24:83:22:
                    d9:4b:73:c8:ca:5a:17:1e:d3:0f:0b:ee:ee:1a:97:
                    02:3b:e0:bc:39:e0:45:1d:a9:d1:6b:bd:4b:7a:5e:
                    3b:a1:53:bf:67:98:12:28:90:e1:48:df:63:70:0a:
                    82:ca:e7:91:81:c1:cd:5e:7c:9b:51:26:80:2a:e4:
                    09:a1:54:59:2c:3c:17:cd:88:c6:7d:0e:48:79:4d:
                    0e:f6:d4:6d:f4:72:5b:49:3d:d7:6e:dd:c1:83:c4:
                    e9:dd:72:b3:2b:f8:8e:1f:41:e3:a3:89:91:b4:1d:
                    61:4f:3f:f8:f4:ab:0e:c6:df:4e:6b:c7:92:d8:ed:
                    9a:55:cf:9d:bf:02:3b:d3:48:8d:08:62:7c:ad:ec:
                    50:94:5f:fc:35:1d:1f:04:d4:3f:4a:15:57:8c:5a:
                    84:59:6f:bc:b6:21:3a:14:4f:01:4c:ec:2c:79:c8:
                    89:49:1d:b6:ea:57:53:7d:ff:98:55:8e:60:ad:33:
                    ce:8e:2e:3b:e3:60:5d:f2:55:31:b1:53:47:2a:73:
                    e6:92:25:85:9f:98:89:22:72:f4:40:34:bd:8b:4c:
                    b2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:73:64:AD:7D:FF:55:70:27:63:C7:23:EB:30:36:14:87:4A:BC:0D
            X509v3 Authority Key Identifier:
                keyid:D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e31392e3235332e302f32342d3234203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:46:8e:9d:c7:7f:4b:22:03:f2:b1:33:98:69:ad:57:8b:04:
         ee:3f:0b:2c:da:64:14:fc:2f:74:7b:4f:fc:54:bd:1f:6a:7c:
         25:99:9c:ae:1c:2c:9c:b2:7a:db:77:0d:e3:1e:06:f7:f2:e9:
         ba:89:fe:c0:f0:fb:74:92:67:8f:fc:28:4d:10:62:bc:3f:d3:
         e0:f6:e0:d0:3f:b8:75:d2:27:58:45:c3:3c:f9:9f:a8:55:ee:
         7c:6b:66:14:22:5e:76:49:21:68:3a:60:45:9a:08:ff:0f:d9:
         80:48:34:d2:7f:15:a5:ae:e9:57:82:3d:82:ce:27:7f:d1:a3:
         c7:66:c9:2d:36:30:df:c7:f8:bf:3d:de:86:b0:04:b3:09:5d:
         a7:6b:7f:1d:d8:8b:16:34:c2:43:f5:97:94:9c:6f:5f:84:4e:
         84:f8:dc:a1:18:d9:de:38:f8:14:28:30:5d:10:a8:fd:57:46:
         06:d3:b5:87:bf:b6:fb:c3:8d:f5:5d:14:4f:45:ff:7d:f2:56:
         b9:2f:ae:62:fa:90:51:ff:48:5e:7c:04:36:d3:22:70:7c:05:
         a2:bc:01:4a:f5:a8:46:69:54:9d:c4:77:41:3a:d6:34:43:d4:
         74:26:7a:83:0b:c8:67:26:56:1e:27:e2:10:61:9f:95:db:e4:
         31:f7:40:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 08:30:13 2024 by rpki-client on console-ams.rpki-client.org