Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/3230302e3132342e3137332e302f32342d3234203d3e20323730323739.roa
File:                     3230302e3132342e3137332e302f32342d3234203d3e20323730323739.roa (raw, json)
Hash identifier:          zRcH1cq4G53wJJtSpT1pEjHFVqkAYxTqYsv83rTuizw=
Subject key identifier:   D7:60:44:9D:CA:FE:5C:E6:CC:05:F0:84:09:37:5E:FE:B6:A8:FB:6E
Certificate issuer:       /CN=CE4086C53A0E1A19AE5AA00A9874ABBD78563A96
Certificate serial:       1744802AE51FD6D58467E9BD943210F9EFF15542
Authority key identifier: CE:40:86:C5:3A:0E:1A:19:AE:5A:A0:0A:98:74:AB:BD:78:56:3A:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/3230302e3132342e3137332e302f32342d3234203d3e20323730323739.roa
Signing time:             Wed 03 Apr 2024 18:32:55 +0000
ROA not before:           Wed 03 Apr 2024 18:27:55 +0000
ROA not after:            Wed 02 Apr 2025 18:32:55 +0000
asID:                     270279
IP address blocks:        200.124.173.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.crl
                          rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:54:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:44:80:2a:e5:1f:d6:d5:84:67:e9:bd:94:32:10:f9:ef:f1:55:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE4086C53A0E1A19AE5AA00A9874ABBD78563A96
        Validity
            Not Before: Apr  3 18:27:55 2024 GMT
            Not After : Apr  2 18:32:55 2025 GMT
        Subject: CN=D760449DCAFE5CE6CC05F08409375EFEB6A8FB6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d4:19:f0:ec:15:4f:71:32:05:49:0e:9d:e0:
                    48:c8:b3:c3:16:df:37:48:c3:6f:47:b9:46:6f:fb:
                    40:66:23:11:28:56:cb:df:96:f4:a5:63:01:f2:b7:
                    5d:83:ad:0f:9c:79:b3:e0:23:56:3e:89:2c:a7:1b:
                    d5:27:3b:58:ed:c9:90:10:0a:00:af:0a:f0:96:75:
                    06:fd:f6:00:6c:fc:7e:5f:11:71:f4:ae:50:7b:c5:
                    f5:bb:0d:7a:b4:95:56:ee:6a:5a:a7:d5:2f:b3:31:
                    2f:f2:7c:d6:7d:da:ac:9a:96:9d:4f:e7:ec:dd:3f:
                    43:b0:09:81:0b:8c:5a:37:91:3b:8f:73:eb:53:66:
                    6e:3e:b5:e0:1c:cb:3f:d9:63:e7:1e:fa:13:b4:c9:
                    9a:cf:8b:bb:eb:88:e6:0b:07:9a:0c:ad:b8:08:45:
                    dc:c2:1c:53:c2:c1:7e:01:7b:7c:39:f0:9a:44:85:
                    08:47:c6:0b:61:0c:c2:f7:b7:0b:22:58:4e:e9:f8:
                    1d:bc:60:43:48:fe:76:ec:4d:31:4a:fa:c2:fa:8c:
                    de:83:07:35:35:f9:03:42:90:ca:4e:76:c4:15:6e:
                    0f:7e:e0:d9:0b:36:13:08:f7:e8:20:aa:55:9d:60:
                    fd:57:12:2d:b2:8c:e7:1f:06:88:d4:de:e3:79:b5:
                    77:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:60:44:9D:CA:FE:5C:E6:CC:05:F0:84:09:37:5E:FE:B6:A8:FB:6E
            X509v3 Authority Key Identifier:
                keyid:CE:40:86:C5:3A:0E:1A:19:AE:5A:A0:0A:98:74:AB:BD:78:56:3A:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/3230302e3132342e3137332e302f32342d3234203d3e20323730323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:9f:19:0e:ac:ca:e5:1a:af:6a:ff:8a:9c:16:5f:9e:eb:83:
         d9:36:de:4a:ed:b4:1e:fb:13:92:d2:ef:10:00:0f:55:71:8c:
         0f:e4:e8:fe:e8:b4:fc:5c:34:57:6a:d8:59:18:c1:53:87:bf:
         9a:09:10:e9:9a:de:09:f0:94:76:bf:d8:9c:13:45:bf:b2:05:
         9c:04:05:a6:5e:66:19:e3:6f:08:aa:f9:46:e7:a9:16:f2:a7:
         83:99:80:cc:f1:be:3f:21:d1:01:41:01:a4:9f:5c:9e:47:2b:
         f1:91:d4:80:14:28:40:a1:25:0a:fc:59:0e:de:61:b3:61:4f:
         ca:6a:b3:85:50:73:d3:cc:d6:54:cd:1c:8f:9d:b8:55:12:6a:
         34:4d:ee:16:f4:4b:a1:78:d1:7e:ea:a3:33:1a:35:04:9e:81:
         0e:a7:09:ad:5d:81:4f:c0:b6:52:c5:ac:cc:3f:18:66:ef:0d:
         99:68:f6:51:75:c4:32:11:be:2b:94:2f:eb:72:04:ea:70:eb:
         83:bd:f3:93:0a:a0:30:b4:5c:ee:31:5f:ef:e1:26:20:07:6e:
         ed:21:ac:6a:b8:8f:91:20:8b:e6:47:98:c9:ef:17:1b:b2:05:
         7c:d2:fc:88:d3:db:cd:69:8e:b7:e2:7b:12:c3:77:b8:d8:06:
         c6:0a:ca:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:34 2024 by rpki-client on console-fra.rpki-client.org