Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8j7dWSq1VABVRj5PPPYq3zFSwTJD3AgqiAjQpjkf9Hxr/1/3230302e37372e3138302e302f32322d3234203d3e203631373637.roa
File:                     3230302e37372e3138302e302f32322d3234203d3e203631373637.roa (raw, json)
Hash identifier:          ZvgtJegn9v78LlAKow4Gpydg3126+gWL4MplE/aYiP8=
Subject key identifier:   A4:E2:11:65:60:C9:54:F3:03:BB:16:D4:45:A2:FA:03:35:49:FB:C8
Certificate issuer:       /CN=2FFAD183601C6CAE4CD1E5BA12B019005FFC2EE4
Certificate serial:       26C2EB51CE153A24D92CAC889D2DF1069ED2862A
Authority key identifier: 2F:FA:D1:83:60:1C:6C:AE:4C:D1:E5:BA:12:B0:19:00:5F:FC:2E:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FFAD183601C6CAE4CD1E5BA12B019005FFC2EE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8j7dWSq1VABVRj5PPPYq3zFSwTJD3AgqiAjQpjkf9Hxr/1/3230302e37372e3138302e302f32322d3234203d3e203631373637.roa
Signing time:             Thu 04 Apr 2024 02:47:44 +0000
ROA not before:           Thu 04 Apr 2024 02:42:44 +0000
ROA not after:            Thu 03 Apr 2025 02:47:44 +0000
asID:                     61767
IP address blocks:        200.77.180.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8j7dWSq1VABVRj5PPPYq3zFSwTJD3AgqiAjQpjkf9Hxr/1/2FFAD183601C6CAE4CD1E5BA12B019005FFC2EE4.crl
                          rsync://rpki-repo.registro.br/repo/8j7dWSq1VABVRj5PPPYq3zFSwTJD3AgqiAjQpjkf9Hxr/1/2FFAD183601C6CAE4CD1E5BA12B019005FFC2EE4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FFAD183601C6CAE4CD1E5BA12B019005FFC2EE4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:c2:eb:51:ce:15:3a:24:d9:2c:ac:88:9d:2d:f1:06:9e:d2:86:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FFAD183601C6CAE4CD1E5BA12B019005FFC2EE4
        Validity
            Not Before: Apr  4 02:42:44 2024 GMT
            Not After : Apr  3 02:47:44 2025 GMT
        Subject: CN=A4E2116560C954F303BB16D445A2FA033549FBC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:fb:15:be:19:55:b5:73:20:fc:22:d4:01:61:
                    b4:0c:9c:a2:f9:9d:ef:b8:04:c6:62:12:f2:9c:df:
                    c6:2d:f9:30:11:8a:51:a2:26:16:55:44:b5:df:37:
                    34:a1:4b:67:76:65:82:c1:cf:94:0c:95:7e:96:78:
                    b9:22:a3:d9:f9:15:5c:db:1b:05:5f:a0:2c:7c:62:
                    6b:05:ba:e6:58:91:6f:0d:82:4b:df:63:45:a2:a3:
                    30:eb:ae:16:71:11:88:3d:97:a0:0a:45:be:05:3e:
                    70:3b:bd:75:d9:a2:a0:04:b0:e1:08:17:54:f2:34:
                    a4:6c:c9:5a:12:2d:3a:c6:0a:11:f6:08:39:1d:be:
                    e8:fe:2d:b7:81:bc:51:c3:3f:a5:ca:cd:6a:77:89:
                    b9:bc:35:fc:4f:42:ff:8d:ce:24:11:e4:fe:40:24:
                    78:75:b0:09:60:5b:05:53:25:70:5f:4d:46:4e:37:
                    76:6d:db:88:95:ac:de:bc:4c:b8:3f:56:0a:14:74:
                    a5:d4:b5:19:38:de:32:66:ae:da:c7:47:af:e0:7a:
                    75:d9:ad:a9:31:1c:6a:ce:b9:91:18:6c:07:c0:4c:
                    62:8c:5f:1a:46:a0:3f:d0:d5:ac:5b:48:fc:20:1a:
                    a7:d0:65:22:67:1c:75:0b:cf:3c:a4:75:8d:78:78:
                    a6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E2:11:65:60:C9:54:F3:03:BB:16:D4:45:A2:FA:03:35:49:FB:C8
            X509v3 Authority Key Identifier:
                keyid:2F:FA:D1:83:60:1C:6C:AE:4C:D1:E5:BA:12:B0:19:00:5F:FC:2E:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8j7dWSq1VABVRj5PPPYq3zFSwTJD3AgqiAjQpjkf9Hxr/1/2FFAD183601C6CAE4CD1E5BA12B019005FFC2EE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FFAD183601C6CAE4CD1E5BA12B019005FFC2EE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8j7dWSq1VABVRj5PPPYq3zFSwTJD3AgqiAjQpjkf9Hxr/1/3230302e37372e3138302e302f32322d3234203d3e203631373637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.77.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:f2:a5:b1:a3:ef:a7:28:e6:31:28:bb:4b:8a:0a:33:c7:ac:
         89:0d:d7:b2:e4:91:e4:33:66:48:db:bd:5b:07:a3:77:9c:10:
         99:96:a9:22:07:33:46:e3:6b:8e:b8:ac:59:e8:35:16:09:51:
         a1:31:36:87:65:0e:f3:37:38:95:64:cc:3f:ac:d8:58:59:18:
         a6:de:57:03:7b:74:20:a9:3b:c2:3d:10:f8:26:d0:6b:37:39:
         a9:b8:8a:55:56:7c:41:c6:cb:51:f2:34:54:4e:c1:e2:aa:b6:
         8c:41:c2:73:03:98:a8:48:4e:aa:0b:a6:ab:74:ef:dd:40:65:
         b4:cf:26:7a:6a:f8:09:30:33:f4:b9:93:18:e1:95:a6:38:1d:
         13:52:66:fb:b1:29:ae:1b:95:3c:ed:10:82:06:f7:e0:6e:c4:
         e5:65:43:b7:c9:fc:ad:4a:c2:f3:65:42:7e:3e:bd:84:e7:1b:
         cd:87:df:62:88:69:6f:e2:1c:a3:84:c8:2c:82:94:e7:ed:a5:
         57:19:1a:44:4a:eb:ba:72:84:47:e0:e2:43:71:41:a2:67:49:
         54:8a:47:c7:76:16:56:69:3f:ee:38:76:06:43:bd:4c:59:34:
         e2:67:64:76:45:23:98:e5:84:36:bd:b7:15:7b:51:4a:df:c2:
         24:4a:61:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:17 2024 by rpki-client on console-fra.rpki-client.org