Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/3230312e38372e3233322e302f32332d3233203d3e203631393130.roa
File:                     3230312e38372e3233322e302f32332d3233203d3e203631393130.roa (raw, json)
Hash identifier:          uX7Hjtbl8yKmTfoP73a1LN+yuG6rndOl+6DMJdb2GCQ=
Subject key identifier:   89:39:95:31:2F:CE:DF:00:9A:5C:EC:64:BB:DB:8A:5F:2E:98:C5:3C
Certificate issuer:       /CN=C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A
Certificate serial:       24B71D73202F70B72EC7A096EDDC77E977B51E64
Authority key identifier: C1:B3:39:AE:1E:23:4B:AA:B2:6D:4F:E1:CD:5C:BC:34:BA:4A:5B:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/3230312e38372e3233322e302f32332d3233203d3e203631393130.roa
Signing time:             Wed 03 Apr 2024 21:03:43 +0000
ROA not before:           Wed 03 Apr 2024 20:58:43 +0000
ROA not after:            Wed 02 Apr 2025 21:03:43 +0000
asID:                     61910
IP address blocks:        201.87.232.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A.crl
                          rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 23:46:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:b7:1d:73:20:2f:70:b7:2e:c7:a0:96:ed:dc:77:e9:77:b5:1e:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A
        Validity
            Not Before: Apr  3 20:58:43 2024 GMT
            Not After : Apr  2 21:03:43 2025 GMT
        Subject: CN=893995312FCEDF009A5CEC64BBDB8A5F2E98C53C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4d:7e:c6:ec:ef:7b:63:6b:5a:e2:a2:bf:2a:
                    7d:9d:bd:0f:98:96:56:b3:07:48:14:b0:c0:72:d9:
                    9f:ef:c5:32:f3:d5:02:7e:1d:d9:5f:65:64:9c:42:
                    9d:5b:39:c0:fe:62:8a:26:78:64:c1:86:41:10:24:
                    08:96:8a:9b:3a:d7:de:8a:50:40:87:6f:d2:b7:94:
                    ae:26:f7:db:7d:3e:13:0f:1b:e5:8a:f4:0a:63:94:
                    ad:3d:ac:4e:14:15:09:24:80:78:7f:01:82:a8:23:
                    bb:a1:dd:87:ea:96:6a:5b:0d:4e:bb:5a:2b:05:96:
                    a4:b3:12:d7:ee:d2:4f:d8:fd:c2:79:16:a3:14:8c:
                    df:50:13:7d:2e:4b:52:ae:60:14:b2:8b:46:7d:30:
                    39:a2:ad:fa:a1:13:4a:7a:38:9b:84:45:60:f8:f9:
                    be:1d:f9:28:af:30:c1:5c:1c:57:4d:6c:43:73:07:
                    e3:58:4f:c7:f3:a7:01:4a:16:81:47:8a:19:51:6b:
                    15:e3:3e:92:88:f5:7a:4a:85:3b:3d:fd:0d:ce:b0:
                    60:40:53:35:f4:a1:ed:65:80:76:55:a4:8b:7a:6c:
                    8e:55:eb:d9:03:cd:e0:11:26:b1:7f:c9:a8:79:ef:
                    92:1b:f6:c3:c0:94:83:dd:a7:4e:b3:d0:f9:e7:b5:
                    5e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:39:95:31:2F:CE:DF:00:9A:5C:EC:64:BB:DB:8A:5F:2E:98:C5:3C
            X509v3 Authority Key Identifier:
                keyid:C1:B3:39:AE:1E:23:4B:AA:B2:6D:4F:E1:CD:5C:BC:34:BA:4A:5B:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/3230312e38372e3233322e302f32332d3233203d3e203631393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:85:96:dc:52:e0:d1:93:1f:e5:b9:cd:0c:f5:bf:38:14:ff:
         bc:d3:3f:28:c8:f3:f4:6d:f3:bb:f8:55:19:95:f3:22:09:49:
         93:5f:9e:50:92:51:57:1e:be:c2:28:5f:47:1f:52:8f:3f:84:
         25:37:2c:de:97:40:8a:13:f1:ae:43:64:f8:96:26:bc:77:b8:
         37:f4:37:1e:6a:72:5e:fc:3a:f6:b0:b0:21:44:97:45:7a:97:
         fe:b2:0b:f1:41:5a:96:40:af:0d:6f:5a:07:b0:78:e5:6d:24:
         ba:31:10:86:1a:f6:8f:6e:04:7b:0b:9b:2f:28:f9:84:c5:8a:
         af:82:18:d5:f2:a9:c4:2b:dd:b9:b1:00:31:0f:ea:3c:8b:f8:
         47:db:01:bc:75:b1:91:ad:3f:c5:2f:01:a0:d4:c1:0f:d6:ed:
         03:93:aa:25:50:6f:04:06:7c:55:f9:4b:c2:12:bf:50:9e:ff:
         8b:50:f3:da:27:c6:27:fe:fd:41:38:10:93:05:01:a3:5f:b6:
         91:6a:1f:d1:7f:1d:e3:38:d6:60:4f:40:69:9a:3f:39:b2:c8:
         d0:34:e8:76:3a:c2:ea:d4:54:d5:d6:76:f3:18:15:e9:bf:ce:
         a7:62:d1:12:5e:24:cf:6d:08:ca:5a:eb:46:fc:39:8c:6b:fd:
         07:3f:3c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:11:01 2024 by rpki-client on console-fra.rpki-client.org