Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3230312e34362e31362e302f32302d3234203d3e203238363639.roa
File:                     3230312e34362e31362e302f32302d3234203d3e203238363639.roa (raw, json)
Hash identifier:          1Ooi6ZrpPoVX6h8baVDClIYcJCjcmzaaok5cVvsBoE0=
Subject key identifier:   4D:E9:56:9A:C4:DD:E2:DE:E8:E5:85:0C:F6:03:0E:EE:E9:58:10:EB
Certificate issuer:       /CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Certificate serial:       3F8FC9ADCF838BC5F4B960A3BAA5C62FBE88372E
Authority key identifier: BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3230312e34362e31362e302f32302d3234203d3e203238363639.roa
Signing time:             Mon 25 Nov 2024 17:04:16 +0000
ROA not before:           Mon 25 Nov 2024 16:59:16 +0000
ROA not after:            Mon 24 Nov 2025 17:04:16 +0000
asID:                     28669
IP address blocks:        201.46.16.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl
                          rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 10:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:8f:c9:ad:cf:83:8b:c5:f4:b9:60:a3:ba:a5:c6:2f:be:88:37:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
        Validity
            Not Before: Nov 25 16:59:16 2024 GMT
            Not After : Nov 24 17:04:16 2025 GMT
        Subject: CN=4DE9569AC4DDE2DEE8E5850CF6030EEEE95810EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:01:4c:f5:d6:fc:4f:e9:d8:36:92:51:41:b4:
                    df:bd:73:5a:03:e6:bd:43:6f:ab:9f:c7:23:12:c6:
                    ee:be:f0:82:36:36:ce:05:82:9b:41:ad:b2:be:30:
                    2f:6f:54:04:b4:48:c7:20:f4:5f:c5:1e:0e:93:a2:
                    e8:cd:09:0e:3d:a7:c0:f0:ae:0f:ca:30:f5:51:13:
                    1e:77:8e:e2:ff:a0:2e:1f:68:67:5b:f3:eb:56:10:
                    d0:67:50:61:f7:a8:2f:03:31:39:57:49:25:b6:f9:
                    d8:1e:13:69:2b:47:78:1c:7c:d8:ab:73:09:1f:ab:
                    65:b3:f2:bb:19:b0:df:96:87:e2:d3:e7:65:47:cf:
                    11:12:50:7b:6b:79:0d:f6:2f:27:f4:16:2d:50:a5:
                    23:83:37:0e:96:6c:2c:6a:40:93:dc:9b:8d:ff:b1:
                    b6:71:64:a2:ea:ba:c3:2e:f4:7e:d8:b2:44:d1:55:
                    86:0e:2f:38:87:67:df:1b:92:41:5f:70:fa:a0:8f:
                    19:89:aa:ca:d9:e5:8c:33:d8:bc:8d:99:1e:ba:27:
                    a0:99:45:fb:a3:71:4f:5a:03:1f:e1:5d:ad:a1:41:
                    fa:6c:fa:fe:8c:c3:a9:a6:10:90:a1:df:4f:c4:06:
                    9c:9d:69:d2:3d:81:d5:d5:28:dc:b8:4b:6f:13:cd:
                    f6:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E9:56:9A:C4:DD:E2:DE:E8:E5:85:0C:F6:03:0E:EE:E9:58:10:EB
            X509v3 Authority Key Identifier:
                keyid:BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3230312e34362e31362e302f32302d3234203d3e203238363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.46.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         61:7b:04:2c:ec:08:67:cb:36:23:25:fe:dc:2e:ec:16:64:75:
         3d:3d:fc:05:43:ff:86:c4:93:58:1a:bd:d8:2b:7b:fe:02:b5:
         bb:46:29:d2:61:1e:95:20:2c:4f:97:72:aa:d9:6d:1f:ad:09:
         b9:52:6e:70:a3:eb:c0:f8:e4:0b:cd:a2:5c:ff:7c:e9:20:16:
         43:c3:e7:b6:c7:92:a9:25:f9:b5:60:b6:b3:5e:81:63:b0:1b:
         d6:96:dc:25:de:6f:f8:ef:4d:aa:05:ae:5b:9e:e3:af:5a:25:
         e4:b3:ef:d2:03:9c:56:52:d3:33:13:e8:80:73:9b:8b:4a:d3:
         99:2b:8a:a0:30:aa:95:8a:c8:01:aa:55:9c:e9:c3:12:ff:a4:
         da:7f:11:ad:f3:20:65:9c:f1:5a:94:22:f8:62:78:43:40:40:
         be:46:b8:d8:d2:07:f8:d5:95:45:8f:88:68:c1:98:8d:9d:ac:
         63:bb:95:db:0a:e3:8b:23:ae:8d:81:88:4a:4c:fd:99:d8:09:
         1e:96:cf:2c:47:e9:ec:01:83:b7:a8:7b:08:e5:e6:a8:e9:d0:
         bd:cf:a6:d4:d2:e3:bb:8e:db:e7:ba:ff:cf:da:b9:64:4e:ba:
         90:31:85:b3:d4:27:53:af:fe:ee:66:3e:dd:3d:fb:91:fd:70:
         79:11:f9:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 10:46:40 2024 by rpki-client on console-fra.rpki-client.org