Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/3230302e3132342e3137322e302f32322d3232203d3e20323730323739.roa
File:                     3230302e3132342e3137322e302f32322d3232203d3e20323730323739.roa (raw, json)
Hash identifier:          HB5aQ3pv8z7TbaFms5Fi4fjyqRxiLYV5qACYWBUrwno=
Subject key identifier:   B4:EF:45:BD:25:AE:5A:5D:B8:E2:CF:71:59:D3:37:39:9C:37:74:8F
Certificate issuer:       /CN=CE4086C53A0E1A19AE5AA00A9874ABBD78563A96
Certificate serial:       7D5D1682898264B87693EB7A0EEE5F6B0584964B
Authority key identifier: CE:40:86:C5:3A:0E:1A:19:AE:5A:A0:0A:98:74:AB:BD:78:56:3A:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/3230302e3132342e3137322e302f32322d3232203d3e20323730323739.roa
Signing time:             Wed 03 Apr 2024 18:32:56 +0000
ROA not before:           Wed 03 Apr 2024 18:27:56 +0000
ROA not after:            Wed 02 Apr 2025 18:32:56 +0000
asID:                     270279
IP address blocks:        200.124.172.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.crl
                          rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:54:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:5d:16:82:89:82:64:b8:76:93:eb:7a:0e:ee:5f:6b:05:84:96:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE4086C53A0E1A19AE5AA00A9874ABBD78563A96
        Validity
            Not Before: Apr  3 18:27:56 2024 GMT
            Not After : Apr  2 18:32:56 2025 GMT
        Subject: CN=B4EF45BD25AE5A5DB8E2CF7159D337399C37748F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fd:ab:e8:f2:36:36:72:3a:ac:6a:8b:6f:fb:
                    af:ec:33:60:8d:bd:e9:71:63:64:ef:cb:81:d7:c9:
                    21:ff:a8:0d:d6:7c:e6:f3:0b:64:d8:ff:93:88:c9:
                    8b:0f:de:b1:35:8c:d4:f2:71:63:5a:98:8d:c7:bc:
                    40:d4:01:87:b1:88:5b:8e:d6:41:d4:ab:33:41:92:
                    1e:9b:67:48:e7:44:64:b2:79:4c:15:a8:5d:26:48:
                    02:5e:c8:cc:e7:8b:6b:ae:21:91:4a:23:2b:76:4a:
                    7c:9e:f3:3e:a2:47:c9:5a:ea:2b:29:a9:4c:bd:fa:
                    e4:53:30:43:02:f5:4d:44:14:d0:bb:bb:34:e8:48:
                    78:09:c7:98:3e:1c:be:6c:c6:2d:c0:4c:4d:9d:d3:
                    28:bf:a1:86:af:4b:a4:75:56:aa:69:de:e2:91:24:
                    f3:ce:f4:d4:f2:b4:5e:e8:a8:12:47:43:33:e6:75:
                    6c:0a:04:42:4e:23:f0:fb:1c:6e:22:f8:69:ad:b3:
                    c4:38:02:a9:e3:4a:6b:cc:36:a7:d3:25:8d:f9:ee:
                    8b:b7:db:8a:ca:2b:8c:4f:08:3a:0b:cb:4f:74:2c:
                    3b:5d:08:46:35:48:cf:3f:53:39:ce:28:2b:a5:2c:
                    ff:a5:c4:19:22:5b:0b:64:19:97:9f:f0:a5:42:e3:
                    1e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:EF:45:BD:25:AE:5A:5D:B8:E2:CF:71:59:D3:37:39:9C:37:74:8F
            X509v3 Authority Key Identifier:
                keyid:CE:40:86:C5:3A:0E:1A:19:AE:5A:A0:0A:98:74:AB:BD:78:56:3A:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/3230302e3132342e3137322e302f32322d3232203d3e20323730323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:07:d1:40:d7:bb:eb:ee:27:c7:58:41:20:09:dd:14:5f:58:
         cf:33:9e:a0:b8:5a:ea:6d:9e:d7:7f:b6:2e:9e:9c:53:76:b1:
         df:ad:ce:a6:ed:8d:0d:77:60:37:36:ec:03:71:74:ba:89:29:
         3c:0a:cb:56:d6:96:c1:ad:51:53:78:e5:db:03:67:52:41:4e:
         02:dd:a9:56:f8:61:eb:a9:1c:29:78:43:57:24:20:e0:b8:28:
         14:9e:32:b0:47:4b:b7:6c:70:ca:bd:51:6c:b5:df:6f:01:47:
         e7:6a:f1:a2:59:b7:71:cc:9a:79:26:30:f0:49:c3:42:32:88:
         79:9d:ac:04:29:e6:8e:8a:18:5b:da:11:34:93:22:af:fd:5c:
         9f:9b:b9:af:0d:13:a7:f0:dd:5d:e1:b9:ac:0b:15:2f:84:fa:
         e9:b1:1d:39:e2:68:d9:f4:4e:3e:20:ca:e7:02:31:05:e5:62:
         06:23:99:f5:d0:5d:80:86:09:35:16:ee:b6:a3:3a:6c:df:2c:
         bd:e2:c1:c5:3d:47:44:9c:89:16:27:17:82:d5:d0:b2:65:d0:
         50:be:e7:fa:b6:21:10:47:0c:d3:3a:ae:3e:0e:43:0f:d1:e4:
         c1:6d:4e:f5:28:54:29:b3:71:02:c7:42:82:dd:90:cc:e7:f5:
         b6:89:22:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:40 2024 by rpki-client on console-ams.rpki-client.org