Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3230312e34392e3139322e302f32302d3234203d3e203238323837.roa
File:                     3230312e34392e3139322e302f32302d3234203d3e203238323837.roa (raw, json)
Hash identifier:          CVXD1GuLrL07cxIjOmASsOnj9yC1eb9wWgn7xUExY90=
Subject key identifier:   EC:26:68:91:96:26:0E:A0:B0:2C:1E:EF:EE:21:8A:42:04:7D:30:9B
Certificate issuer:       /CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Certificate serial:       6684B91DBDC64390A0639D617148A094DD78DD05
Authority key identifier: BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3230312e34392e3139322e302f32302d3234203d3e203238323837.roa
Signing time:             Mon 25 Nov 2024 17:04:11 +0000
ROA not before:           Mon 25 Nov 2024 16:59:11 +0000
ROA not after:            Mon 24 Nov 2025 17:04:11 +0000
asID:                     28287
IP address blocks:        201.49.192.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl
                          rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 10:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:84:b9:1d:bd:c6:43:90:a0:63:9d:61:71:48:a0:94:dd:78:dd:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
        Validity
            Not Before: Nov 25 16:59:11 2024 GMT
            Not After : Nov 24 17:04:11 2025 GMT
        Subject: CN=EC26689196260EA0B02C1EEFEE218A42047D309B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2d:db:51:6a:e1:03:4f:d1:be:01:c6:ad:c2:
                    3b:0f:1d:a2:87:63:20:2a:26:a8:60:1c:20:c4:50:
                    29:45:25:3e:f5:b9:46:fc:25:1d:bb:d7:85:d7:82:
                    dd:ca:74:d2:61:8e:c3:00:f2:5a:32:a3:ec:32:fc:
                    37:0c:87:a5:22:73:48:6d:c9:1b:dc:ae:2f:46:2e:
                    69:20:83:b3:59:d7:2d:86:5c:3e:63:6d:45:55:98:
                    d2:d2:9d:99:01:37:f4:49:bf:71:a9:48:b7:16:32:
                    24:76:84:4b:9b:62:2a:9e:6e:94:fd:50:93:be:66:
                    e4:d4:33:28:d1:7e:c6:b2:cc:f5:1d:50:6d:38:1b:
                    5d:aa:1e:44:eb:b7:35:54:79:61:2e:ef:7a:3d:84:
                    ba:e8:77:e0:44:50:ed:3e:60:d4:80:c0:0b:33:90:
                    dd:65:c3:36:e8:21:40:12:23:df:9e:34:c6:c9:52:
                    8c:77:de:85:39:15:48:db:e3:4b:ae:d1:88:81:22:
                    af:22:e4:f3:49:06:1d:c4:aa:d7:d3:10:06:93:c9:
                    4a:11:d7:5e:76:26:d8:d6:c7:79:c4:51:27:f7:9c:
                    5f:a5:83:f0:b2:bf:46:47:6c:88:53:80:c9:72:0c:
                    e9:bc:f6:f3:b2:e5:0d:79:53:0d:5d:33:9d:62:91:
                    18:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:26:68:91:96:26:0E:A0:B0:2C:1E:EF:EE:21:8A:42:04:7D:30:9B
            X509v3 Authority Key Identifier:
                keyid:BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3230312e34392e3139322e302f32302d3234203d3e203238323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c6:53:79:28:7d:5a:3d:11:de:d1:3a:00:a3:c7:6f:cf:8b:ad:
         a6:f2:f1:c9:39:d3:e3:b5:f9:9f:ae:3d:77:82:59:2b:ab:df:
         e2:d1:fe:42:3c:3b:25:d5:04:ab:91:7b:4d:06:fd:16:4f:c9:
         da:f7:0e:56:22:09:63:60:62:63:79:ed:79:81:59:7e:ea:8a:
         66:7b:fa:12:1a:6f:98:af:03:77:06:12:21:89:30:c8:c9:b9:
         4e:48:b0:92:c6:ff:4c:f0:e4:ce:b9:6b:29:1b:5b:1b:24:d3:
         13:e0:45:22:14:3c:36:85:64:1f:4f:bc:a8:6e:fc:1c:f2:6e:
         05:8a:a4:44:bc:a9:00:db:8f:82:44:08:85:b3:4c:bf:ef:a5:
         24:6e:a1:3b:22:c0:ff:1d:f2:20:26:d8:11:b8:06:2f:a0:00:
         bb:09:2e:ee:f1:4a:ca:47:d5:bc:86:d0:28:50:ce:66:92:bf:
         76:07:ba:44:6d:c9:ed:06:54:18:63:15:6e:76:b0:9f:4c:4b:
         15:3c:4c:e1:58:d2:69:d2:58:91:c2:9b:73:17:2e:88:57:73:
         16:13:5d:34:59:4f:cd:6d:4e:41:cb:85:4d:65:92:bc:5c:f9:
         78:ac:18:e6:bb:aa:26:f5:f9:33:1e:ed:1d:d4:f0:0c:3a:aa:
         44:b6:11:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 10:46:40 2024 by rpki-client on console-fra.rpki-client.org