Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/3230312e38372e3233342e302f32342d3234203d3e203631393130.roa
File:                     3230312e38372e3233342e302f32342d3234203d3e203631393130.roa (raw, json)
Hash identifier:          nmldzYlnJ5+3INKNTdE9ZiMysvZDcsegu8edN6V9mqQ=
Subject key identifier:   C3:5B:0D:2B:1B:55:38:85:E5:69:B3:E5:97:14:20:0F:82:4F:80:34
Certificate issuer:       /CN=C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A
Certificate serial:       7CE33C8158237936F8BE8FA152D4708967F3FEBD
Authority key identifier: C1:B3:39:AE:1E:23:4B:AA:B2:6D:4F:E1:CD:5C:BC:34:BA:4A:5B:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/3230312e38372e3233342e302f32342d3234203d3e203631393130.roa
Signing time:             Wed 03 Apr 2024 21:03:43 +0000
ROA not before:           Wed 03 Apr 2024 20:58:43 +0000
ROA not after:            Wed 02 Apr 2025 21:03:43 +0000
asID:                     61910
IP address blocks:        201.87.234.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A.crl
                          rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 23:46:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:e3:3c:81:58:23:79:36:f8:be:8f:a1:52:d4:70:89:67:f3:fe:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A
        Validity
            Not Before: Apr  3 20:58:43 2024 GMT
            Not After : Apr  2 21:03:43 2025 GMT
        Subject: CN=C35B0D2B1B553885E569B3E59714200F824F8034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fc:67:92:68:f3:e8:4f:87:69:73:42:5b:0e:
                    d5:49:80:15:1a:8a:35:1f:30:1a:b6:4a:36:f2:23:
                    af:64:70:15:d7:3f:f1:30:d1:fd:f6:5c:84:77:fb:
                    03:d3:ca:69:e7:d7:0a:d5:f0:8f:b5:d9:7e:3e:32:
                    70:8a:24:7e:f7:0b:fd:6c:cb:94:f6:05:39:3a:f7:
                    72:95:5e:38:8d:35:14:11:a2:39:a6:21:b9:dc:01:
                    f1:5d:34:44:88:b5:6a:a2:e2:f4:c6:26:de:c2:23:
                    3f:18:56:ea:7b:9f:17:ba:be:cd:9e:1a:05:9f:ae:
                    27:cf:e9:95:7c:61:a3:0f:b5:7c:9c:7e:13:3d:a7:
                    fa:2d:70:bd:a9:d4:10:6b:ee:2b:ca:4e:f0:e3:06:
                    f7:0d:03:f1:32:8e:1a:0d:38:78:08:ef:e4:03:80:
                    e6:ca:c3:9e:d4:b0:c8:7b:c2:c7:1a:81:7e:7a:bd:
                    f0:14:a0:7e:8a:b5:90:0d:16:1e:89:20:5f:7b:18:
                    4a:4d:61:a9:e1:cd:77:5f:be:77:23:64:9e:48:84:
                    cd:26:1c:f5:0d:3e:dd:92:7b:9d:48:f7:5c:d8:d4:
                    ca:26:52:f3:f8:28:c1:ce:91:38:50:cd:f3:b6:61:
                    2c:70:5e:27:66:bb:39:95:ce:14:34:d5:b4:14:9b:
                    19:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:5B:0D:2B:1B:55:38:85:E5:69:B3:E5:97:14:20:0F:82:4F:80:34
            X509v3 Authority Key Identifier:
                keyid:C1:B3:39:AE:1E:23:4B:AA:B2:6D:4F:E1:CD:5C:BC:34:BA:4A:5B:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/3230312e38372e3233342e302f32342d3234203d3e203631393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:84:5c:df:01:8c:ac:8a:3a:58:38:f4:18:c6:74:35:6d:01:
         4b:4b:20:23:96:ba:4a:27:9b:5a:25:bf:3c:b4:5c:85:bc:a1:
         26:b2:99:69:14:9f:25:14:10:fe:b1:a5:9c:de:39:0e:3e:8b:
         9b:a8:ba:81:fd:a6:1f:2c:7f:b5:eb:b0:ab:ef:2b:0a:47:83:
         79:35:0b:78:d0:c9:1a:44:d7:c5:49:0d:09:6f:50:cf:48:7d:
         8e:4b:46:00:e7:5c:d4:b7:60:ca:fe:d2:17:75:a1:25:96:e7:
         b0:19:0c:c8:ae:79:e4:e6:d7:98:65:1d:3f:6e:b9:df:f4:23:
         32:04:89:05:35:b3:6c:36:40:44:4a:08:64:45:cb:84:32:16:
         f6:1a:bc:b2:91:c1:71:36:fa:7e:2e:bb:0d:c9:85:57:c0:1c:
         08:24:39:23:81:52:72:a5:32:48:40:c3:7b:d1:62:f5:96:df:
         b4:bc:a0:b5:a7:79:76:72:15:55:64:3d:e0:3f:51:40:a9:c8:
         07:09:d5:e3:b8:c7:30:e3:5d:52:38:27:fd:75:5c:a2:43:e1:
         c4:48:b4:95:f3:3e:a5:9d:44:87:fc:e1:ce:03:fc:10:1b:c8:
         d3:66:38:c9:90:39:b1:01:49:6b:50:51:e7:53:7b:72:f8:ad:
         8e:2b:e6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:20:53 2024 by rpki-client on console-ams.rpki-client.org