Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/3230302e37352e3137362e302f32312d3231203d3e203631393339.roa
File:                     3230302e37352e3137362e302f32312d3231203d3e203631393339.roa (raw, json)
Hash identifier:          HTix2xtxIyaexagKdZ3OFR3WRbQbtbrrmJWlk3onjtc=
Subject key identifier:   5C:1C:D1:43:2B:24:B7:20:1E:48:F6:9C:67:45:6B:11:54:F2:AE:4D
Certificate issuer:       /CN=30FB6754FA3D2DA24713B6A9CDE61347E95C320D
Certificate serial:       2B2F440860A0DCCD23D5994B0FC169E2F6BEBF2F
Authority key identifier: 30:FB:67:54:FA:3D:2D:A2:47:13:B6:A9:CD:E6:13:47:E9:5C:32:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30FB6754FA3D2DA24713B6A9CDE61347E95C320D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/3230302e37352e3137362e302f32312d3231203d3e203631393339.roa
Signing time:             Sun 04 Aug 2024 22:43:10 +0000
ROA not before:           Sun 04 Aug 2024 22:38:10 +0000
ROA not after:            Sun 03 Aug 2025 22:43:10 +0000
asID:                     61939
IP address blocks:        200.75.176.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/30FB6754FA3D2DA24713B6A9CDE61347E95C320D.crl
                          rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/30FB6754FA3D2DA24713B6A9CDE61347E95C320D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30FB6754FA3D2DA24713B6A9CDE61347E95C320D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 01:54:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:2f:44:08:60:a0:dc:cd:23:d5:99:4b:0f:c1:69:e2:f6:be:bf:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30FB6754FA3D2DA24713B6A9CDE61347E95C320D
        Validity
            Not Before: Aug  4 22:38:10 2024 GMT
            Not After : Aug  3 22:43:10 2025 GMT
        Subject: CN=5C1CD1432B24B7201E48F69C67456B1154F2AE4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:76:d8:8c:85:b3:ee:3d:ac:a1:7f:a5:e6:a4:
                    6c:b4:35:13:80:93:75:89:24:89:b4:ab:de:23:d0:
                    75:08:b4:4b:6e:20:2c:10:4e:a4:dc:de:fa:42:88:
                    ad:6f:78:46:53:ca:2c:2f:40:4f:c5:40:67:14:73:
                    07:17:ba:37:b0:9f:42:d8:48:8d:c4:ae:2e:2d:45:
                    f2:5b:4b:f4:0c:52:68:f6:90:71:48:e1:98:96:4a:
                    82:76:9f:aa:2b:8f:7f:4a:93:2f:c2:d0:5e:ea:70:
                    e6:81:3b:94:74:ef:9a:e1:27:96:88:76:7e:0d:c6:
                    75:3d:82:a6:89:a5:06:d9:4c:d4:56:46:9e:8c:cd:
                    8a:c1:0a:a8:ed:31:38:ad:02:eb:a3:36:fe:ff:5d:
                    80:a9:af:cb:ba:84:ca:bf:66:75:9e:95:25:c3:6b:
                    fd:df:0e:bf:41:27:25:a0:f9:47:df:fd:7d:fe:7f:
                    15:30:bc:5c:c8:74:b3:1e:96:18:95:64:eb:84:03:
                    83:d7:bd:ec:9f:1c:bb:9e:99:9e:12:29:f4:8b:bd:
                    47:72:16:0e:0d:6d:45:d3:ab:23:3b:f5:5a:19:41:
                    78:57:5c:6f:1a:50:c1:59:98:c1:39:03:dc:15:46:
                    92:79:99:75:1f:54:4d:fb:66:93:d9:13:ba:a5:b8:
                    76:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:1C:D1:43:2B:24:B7:20:1E:48:F6:9C:67:45:6B:11:54:F2:AE:4D
            X509v3 Authority Key Identifier:
                keyid:30:FB:67:54:FA:3D:2D:A2:47:13:B6:A9:CD:E6:13:47:E9:5C:32:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/30FB6754FA3D2DA24713B6A9CDE61347E95C320D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30FB6754FA3D2DA24713B6A9CDE61347E95C320D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/3230302e37352e3137362e302f32312d3231203d3e203631393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.75.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         77:29:c6:1b:92:30:6e:a2:d9:3a:03:59:c5:37:70:4f:f6:87:
         4c:52:f4:31:b5:12:3b:1a:00:8b:fa:14:ba:f0:13:8f:2f:c1:
         3c:00:2b:1a:4f:a2:92:1b:71:39:3e:8e:38:3d:92:8e:0b:01:
         0e:02:45:54:60:6b:28:70:2f:23:ca:60:16:78:c2:90:3b:38:
         e0:60:ff:f8:03:3a:12:ff:4c:f2:5c:5e:c3:d8:62:51:fe:51:
         00:4a:2d:c3:cf:8c:75:ea:cb:55:03:c1:b3:94:a2:82:51:b7:
         81:9b:a2:29:81:4c:31:f0:47:fd:24:01:d4:29:3c:f4:e9:15:
         d3:f6:85:cd:df:b7:c7:ac:8b:c6:de:54:0c:80:ae:fe:cf:93:
         a4:d2:33:13:67:9b:f4:be:5b:d2:c2:44:99:d1:ce:d5:8c:0d:
         85:4c:66:47:1f:42:ad:8f:eb:96:af:bd:77:f5:08:33:ac:d9:
         87:e5:3c:64:20:c6:a4:d3:b0:9a:08:bc:8b:85:d9:da:f7:4a:
         f3:80:63:8b:97:c8:b9:80:d0:c7:92:d9:74:33:be:49:0f:1c:
         e4:d6:43:36:24:fa:88:f4:6f:b4:0a:54:02:64:bb:86:9d:d1:
         76:85:7d:35:82:28:2d:9e:e6:3b:7c:34:f0:3c:0c:7c:32:76:
         51:53:8a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:15:51 2024 by rpki-client on console-fra.rpki-client.org