Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/3230312e38372e3233352e302f32342d3234203d3e203631393130.roa
File:                     3230312e38372e3233352e302f32342d3234203d3e203631393130.roa (raw, json)
Hash identifier:          hwUUP8XTk7ncpz4iZlS91t8JQEDydJ1TmVEJp44OBFU=
Subject key identifier:   7D:21:24:23:90:B9:DF:C9:12:6C:37:51:79:55:DD:FA:D7:0B:A6:61
Certificate issuer:       /CN=C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A
Certificate serial:       0375513748D42C7D3C96299F92FD4A1D28EC586D
Authority key identifier: C1:B3:39:AE:1E:23:4B:AA:B2:6D:4F:E1:CD:5C:BC:34:BA:4A:5B:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/3230312e38372e3233352e302f32342d3234203d3e203631393130.roa
Signing time:             Wed 03 Apr 2024 21:03:43 +0000
ROA not before:           Wed 03 Apr 2024 20:58:43 +0000
ROA not after:            Wed 02 Apr 2025 21:03:43 +0000
asID:                     61910
IP address blocks:        201.87.235.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A.crl
                          rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 23:46:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:75:51:37:48:d4:2c:7d:3c:96:29:9f:92:fd:4a:1d:28:ec:58:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A
        Validity
            Not Before: Apr  3 20:58:43 2024 GMT
            Not After : Apr  2 21:03:43 2025 GMT
        Subject: CN=7D21242390B9DFC9126C37517955DDFAD70BA661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:eb:3d:76:58:c9:39:70:5a:27:a1:49:f0:b6:
                    82:c8:95:2b:65:c0:2a:a7:70:c7:39:75:17:40:06:
                    96:51:8b:1b:e4:11:ce:6a:ef:be:e0:ac:24:a8:d5:
                    02:60:f9:ac:53:f5:8f:69:a2:c3:7a:d9:b9:9e:76:
                    1a:a2:74:66:bb:3e:71:04:7e:ee:8f:68:51:97:e8:
                    83:81:a9:57:68:9a:b3:4d:4c:8e:1a:82:ff:31:5b:
                    1f:52:b5:23:d1:2b:83:e5:6f:5f:1b:31:90:61:d8:
                    19:0c:d9:e9:ee:88:0f:0a:91:d8:47:72:70:88:71:
                    0a:05:bb:08:94:60:87:05:7f:f9:1a:73:37:48:24:
                    ec:10:60:a3:5e:b3:14:53:6c:e6:70:3e:a8:bb:de:
                    e4:50:0e:e2:c1:89:3d:5b:59:f3:73:f5:23:e7:bf:
                    35:e3:74:3e:93:21:11:e6:7e:b1:99:a4:f1:25:13:
                    30:5d:a4:35:b8:5d:e3:00:1c:5e:3d:75:e3:66:7b:
                    42:f5:9f:55:41:c5:b4:fd:a0:5f:9b:d2:d5:68:e9:
                    50:f5:2a:90:9e:ac:90:80:fc:62:5c:7f:34:57:65:
                    27:6e:62:15:d1:56:61:71:45:bf:a9:16:84:8a:11:
                    60:8a:7f:fc:f0:5d:a4:dc:b5:87:4c:64:1e:37:ba:
                    ec:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:21:24:23:90:B9:DF:C9:12:6C:37:51:79:55:DD:FA:D7:0B:A6:61
            X509v3 Authority Key Identifier:
                keyid:C1:B3:39:AE:1E:23:4B:AA:B2:6D:4F:E1:CD:5C:BC:34:BA:4A:5B:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/3230312e38372e3233352e302f32342d3234203d3e203631393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:32:e9:b2:9d:3d:64:d3:0b:24:95:0d:54:b2:4b:b4:03:c3:
         7b:29:09:af:a1:96:e4:a6:4d:2d:c2:db:d3:e8:35:81:05:4c:
         b9:5f:7d:be:b3:c5:90:f0:5e:16:9f:a6:ba:c0:3c:ae:9d:15:
         77:79:ea:0a:76:37:91:95:00:b1:d3:31:1a:4c:9a:e3:15:74:
         9b:fc:f9:9f:71:83:b6:80:fd:b1:13:bf:dc:38:09:48:99:3d:
         ff:cd:b9:5a:b4:98:70:d6:ec:80:42:20:76:a5:f0:95:64:f8:
         ba:b1:d3:8c:2c:02:15:4b:23:dd:8f:33:dd:f7:30:d2:ef:85:
         8d:9a:27:00:36:ea:43:50:9f:45:bf:fb:9f:24:8b:8a:18:86:
         e9:8d:17:c8:27:6a:23:40:53:43:1c:50:bf:55:cb:5a:8b:db:
         87:4e:1a:01:af:6b:03:f0:46:08:bb:a7:16:9d:9f:bd:8e:3a:
         92:04:8b:d5:c8:99:cb:00:bd:03:3d:fd:31:86:2d:a1:0c:c5:
         a4:de:9f:c5:d4:1f:f4:6c:3c:98:61:3b:8d:d1:16:0f:76:06:
         79:42:80:58:db:41:dc:45:dd:77:b8:96:af:99:98:35:72:86:
         0d:e8:4a:72:09:16:e8:c2:d9:66:aa:26:75:bc:cf:b3:44:3e:
         ca:03:96:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:20:53 2024 by rpki-client on console-ams.rpki-client.org