Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/3230312e3134392e3131322e302f32322d3234203d3e203631383530.roa
File:                     3230312e3134392e3131322e302f32322d3234203d3e203631383530.roa (raw, json)
Hash identifier:          KsD8JIeC2T5uoNMxBeHdt9SgEWNiCEphSVX7KpGMYnI=
Subject key identifier:   7E:64:6E:58:AA:12:F9:67:6A:28:08:66:88:B3:BC:D3:2E:56:AA:38
Certificate issuer:       /CN=112BC8F17C006D0ED5EBA116CCCF9A649579B39D
Certificate serial:       29D584E1D067B3545EFA76F83EF3BC89CA8024F4
Authority key identifier: 11:2B:C8:F1:7C:00:6D:0E:D5:EB:A1:16:CC:CF:9A:64:95:79:B3:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/112BC8F17C006D0ED5EBA116CCCF9A649579B39D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/3230312e3134392e3131322e302f32322d3234203d3e203631383530.roa
Signing time:             Thu 25 Apr 2024 15:16:56 +0000
ROA not before:           Thu 25 Apr 2024 15:11:56 +0000
ROA not after:            Thu 24 Apr 2025 15:16:56 +0000
asID:                     61850
IP address blocks:        201.149.112.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/112BC8F17C006D0ED5EBA116CCCF9A649579B39D.crl
                          rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/112BC8F17C006D0ED5EBA116CCCF9A649579B39D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/112BC8F17C006D0ED5EBA116CCCF9A649579B39D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Jun 2024 11:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:d5:84:e1:d0:67:b3:54:5e:fa:76:f8:3e:f3:bc:89:ca:80:24:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=112BC8F17C006D0ED5EBA116CCCF9A649579B39D
        Validity
            Not Before: Apr 25 15:11:56 2024 GMT
            Not After : Apr 24 15:16:56 2025 GMT
        Subject: CN=7E646E58AA12F9676A28086688B3BCD32E56AA38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a1:92:6d:9b:fe:e0:ff:9f:d8:44:6c:a1:d1:
                    73:71:7e:8a:15:eb:55:50:92:4e:79:a9:4d:ef:bd:
                    f2:c4:37:f5:ac:54:e7:e6:95:da:c0:d9:34:18:df:
                    61:16:72:3f:f1:78:33:2f:4b:c7:d5:93:3b:bf:a5:
                    dd:37:c7:62:cb:68:d1:1b:3f:f5:94:80:e8:7e:60:
                    2e:a1:cf:85:85:48:90:ba:64:b1:9e:dc:4b:9d:b9:
                    b1:d5:e5:38:d6:3d:bd:2c:8d:08:51:fa:1f:49:d0:
                    22:21:81:82:02:2b:68:04:8c:d2:0b:31:12:1f:46:
                    d3:71:3d:3b:07:f5:59:ac:fa:70:86:25:d0:d4:78:
                    0b:60:5e:8e:16:6d:de:d1:ab:00:06:c3:58:e3:45:
                    cb:a0:f6:4b:3e:aa:23:45:c2:ec:b2:07:3f:b8:1b:
                    c5:0f:fa:06:da:33:ff:a4:8a:7a:a8:b0:1d:55:18:
                    07:86:c7:f8:6d:f4:f7:43:1c:9a:ff:ae:fc:cb:fa:
                    f2:73:ff:0c:3e:c4:ee:bd:9e:3e:d3:dc:bc:99:af:
                    65:b2:ad:ec:a3:eb:a8:27:60:60:f7:bb:2a:a8:17:
                    6e:53:da:95:fe:a9:82:db:49:e5:fa:bc:3d:8f:bc:
                    47:02:b2:a1:0c:c5:03:0b:94:5e:eb:ae:b5:ec:d7:
                    a4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:64:6E:58:AA:12:F9:67:6A:28:08:66:88:B3:BC:D3:2E:56:AA:38
            X509v3 Authority Key Identifier:
                keyid:11:2B:C8:F1:7C:00:6D:0E:D5:EB:A1:16:CC:CF:9A:64:95:79:B3:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/112BC8F17C006D0ED5EBA116CCCF9A649579B39D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/112BC8F17C006D0ED5EBA116CCCF9A649579B39D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/3230312e3134392e3131322e302f32322d3234203d3e203631383530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.149.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:0c:88:24:d6:c5:57:7b:c7:4e:fd:26:68:38:d4:06:71:3c:
         81:53:64:89:75:9c:51:f7:e2:e1:16:99:59:28:32:54:af:f6:
         bf:7e:f5:ef:7b:e7:1f:2e:83:6c:f8:28:6b:3d:c6:b1:54:32:
         37:0b:f0:c2:13:40:95:1f:75:21:26:31:b5:28:cd:0a:8c:94:
         e5:39:bb:aa:fa:77:ae:df:de:63:1b:a4:18:0a:5e:d0:f0:57:
         a7:16:fa:91:35:5d:04:11:b4:e9:77:f8:a7:33:2f:d3:b4:00:
         28:15:a9:52:26:9b:7c:62:6d:cc:8c:4c:a0:cc:d8:0f:99:e8:
         e9:51:45:53:e0:51:9e:ed:26:d6:c1:b2:79:9f:71:dd:6b:55:
         94:6f:b4:8f:48:43:55:31:7d:f1:2a:39:6e:66:a6:71:65:0a:
         ab:78:8d:9e:84:01:1a:b8:67:8f:ae:ab:a2:f2:71:e5:8b:42:
         8b:3d:fe:be:7e:21:37:ea:ad:14:a8:6d:92:ed:98:66:07:66:
         d4:06:4d:ca:60:c9:60:5d:ae:b7:1a:c0:5d:bf:81:4c:02:81:
         21:a3:22:ec:7c:ef:fe:ce:72:6c:0b:31:3d:5f:dc:a8:76:49:
         21:4e:44:6e:d0:c2:ff:e3:fe:2a:38:cc:48:c6:84:98:31:a6:
         e9:6b:c5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 15:56:40 2024 by rpki-client on console-ams.rpki-client.org