Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/3230312e38372e3233342e302f32332d3233203d3e203631393130.roa
File:                     3230312e38372e3233342e302f32332d3233203d3e203631393130.roa (raw, json)
Hash identifier:          d9SN9JhgwNbXu/TtvCY6HP5fL48wJE45qPDYIv7N2FQ=
Subject key identifier:   5F:F3:CB:12:32:EE:5A:1B:0B:A5:66:1F:F2:0D:F9:AE:19:EC:83:49
Certificate issuer:       /CN=C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A
Certificate serial:       22E5157A5B1D83610D79E7372F8FEE43667E9DC1
Authority key identifier: C1:B3:39:AE:1E:23:4B:AA:B2:6D:4F:E1:CD:5C:BC:34:BA:4A:5B:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/3230312e38372e3233342e302f32332d3233203d3e203631393130.roa
Signing time:             Wed 03 Apr 2024 21:03:44 +0000
ROA not before:           Wed 03 Apr 2024 20:58:44 +0000
ROA not after:            Wed 02 Apr 2025 21:03:44 +0000
asID:                     61910
IP address blocks:        201.87.234.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A.crl
                          rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 23:46:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:e5:15:7a:5b:1d:83:61:0d:79:e7:37:2f:8f:ee:43:66:7e:9d:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A
        Validity
            Not Before: Apr  3 20:58:44 2024 GMT
            Not After : Apr  2 21:03:44 2025 GMT
        Subject: CN=5FF3CB1232EE5A1B0BA5661FF20DF9AE19EC8349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:46:22:c3:23:57:4d:31:b9:e9:28:39:8d:6c:
                    95:4d:b0:d9:11:0f:95:0e:3a:f4:a1:ec:47:e9:c9:
                    4f:c6:1e:e9:6a:1d:1a:1e:ba:73:68:c6:82:52:23:
                    72:ef:41:b4:0d:6c:f3:b8:98:e7:9f:ea:f7:e0:66:
                    b1:67:9d:76:1f:84:08:ae:e4:49:b3:bd:1c:90:2d:
                    42:12:43:79:3a:55:d5:6b:e8:fe:66:82:93:9c:f5:
                    1d:2d:ec:b8:34:8a:fc:32:dc:a2:ad:6c:9e:82:2d:
                    66:03:8f:da:b5:cc:74:46:b7:75:4b:07:2d:6b:54:
                    79:3d:53:31:ba:ab:8e:85:fa:dd:dd:38:e7:bc:16:
                    c4:20:98:71:89:bd:09:f2:95:2b:de:91:4d:8e:c8:
                    b7:09:18:67:3a:8e:12:26:68:95:8f:6a:e1:e8:df:
                    d9:dd:ef:fb:da:bb:bb:70:6d:16:ab:2b:79:00:42:
                    70:f3:69:3f:12:88:f0:1f:49:db:9f:92:99:d3:fb:
                    1b:a3:39:29:2b:9d:11:b4:a6:d5:c9:68:8a:a5:1f:
                    ad:65:57:d3:c8:03:3d:8b:b7:f7:0b:9f:91:f5:f1:
                    8d:8b:f0:07:e3:f4:f4:4e:8b:40:e6:c3:e3:84:6f:
                    03:e7:50:66:aa:0b:85:92:2b:44:5a:90:bd:aa:96:
                    05:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:F3:CB:12:32:EE:5A:1B:0B:A5:66:1F:F2:0D:F9:AE:19:EC:83:49
            X509v3 Authority Key Identifier:
                keyid:C1:B3:39:AE:1E:23:4B:AA:B2:6D:4F:E1:CD:5C:BC:34:BA:4A:5B:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/3230312e38372e3233342e302f32332d3233203d3e203631393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:63:23:10:1a:1a:ad:67:b7:93:8b:15:16:b1:e2:b8:b9:f3:
         c0:03:5c:9b:a6:eb:ce:28:f5:28:fa:00:dc:48:39:51:e4:16:
         7c:f6:93:81:ed:5e:57:3e:ec:6e:06:26:c2:13:52:9c:96:59:
         42:08:a2:ed:6f:2f:b6:6d:16:34:e4:2a:93:b2:ef:5f:3f:fb:
         1c:5e:4f:88:bb:25:62:cb:27:8c:02:62:c8:bf:dc:0a:12:28:
         71:04:ce:e7:43:b2:3c:38:6e:62:a9:ec:e1:6c:44:bf:9f:22:
         33:07:f1:a9:7b:73:81:50:70:b5:d2:df:80:16:55:4d:74:6b:
         ea:ba:1b:eb:be:90:cd:8d:b3:a0:67:50:6e:56:a6:d3:a4:06:
         ec:e8:31:de:d3:11:2e:59:8c:1a:2c:ec:7a:ab:2b:ab:0b:cf:
         95:4d:e8:bc:d4:07:db:40:29:b5:76:93:7a:55:a8:96:cc:4a:
         d3:a8:dd:1f:e8:ec:b3:ea:88:4a:0c:c0:b9:69:57:13:8b:c9:
         f1:18:43:5c:98:3c:27:42:4b:bf:e7:f0:6a:9d:66:73:3d:7b:
         1a:35:c1:59:be:25:0b:f6:fb:a1:dc:11:75:f5:95:40:1d:27:
         08:54:55:ae:00:e1:0c:53:5d:03:d0:53:d4:c2:24:77:c5:08:
         8e:a3:a8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:11:01 2024 by rpki-client on console-fra.rpki-client.org