Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bnmu7YWSCmfoaFek32KR7FU8PfrJo33AgDDuJ7K9xU9N/1/3230312e3134392e3130302e302f32322d3234203d3e203631383732.roa
File:                     3230312e3134392e3130302e302f32322d3234203d3e203631383732.roa (raw, json)
Hash identifier:          vqndK+At6e226VrJJfuDyYB8ebnZS8NdAkrmHZijpO0=
Subject key identifier:   AF:3E:09:E2:DD:7F:6D:A4:14:5D:E0:1E:5A:C4:1B:7E:29:F2:27:E0
Certificate issuer:       /CN=E3D553BBD1FA519F744F9600C5A183B20BCF030F
Certificate serial:       48A82A64B2759E46E86226DFACB2C4D63F2511C4
Authority key identifier: E3:D5:53:BB:D1:FA:51:9F:74:4F:96:00:C5:A1:83:B2:0B:CF:03:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3D553BBD1FA519F744F9600C5A183B20BCF030F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bnmu7YWSCmfoaFek32KR7FU8PfrJo33AgDDuJ7K9xU9N/1/3230312e3134392e3130302e302f32322d3234203d3e203631383732.roa
Signing time:             Thu 04 Apr 2024 10:51:23 +0000
ROA not before:           Thu 04 Apr 2024 10:46:23 +0000
ROA not after:            Thu 03 Apr 2025 10:51:23 +0000
asID:                     61872
IP address blocks:        201.149.100.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bnmu7YWSCmfoaFek32KR7FU8PfrJo33AgDDuJ7K9xU9N/1/E3D553BBD1FA519F744F9600C5A183B20BCF030F.crl
                          rsync://rpki-repo.registro.br/repo/Bnmu7YWSCmfoaFek32KR7FU8PfrJo33AgDDuJ7K9xU9N/1/E3D553BBD1FA519F744F9600C5A183B20BCF030F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3D553BBD1FA519F744F9600C5A183B20BCF030F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 19:55:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:a8:2a:64:b2:75:9e:46:e8:62:26:df:ac:b2:c4:d6:3f:25:11:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3D553BBD1FA519F744F9600C5A183B20BCF030F
        Validity
            Not Before: Apr  4 10:46:23 2024 GMT
            Not After : Apr  3 10:51:23 2025 GMT
        Subject: CN=AF3E09E2DD7F6DA4145DE01E5AC41B7E29F227E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9f:88:e1:6e:34:62:7b:19:f7:94:9f:74:18:
                    b0:0d:1e:76:5f:30:db:46:5d:85:c0:7f:98:22:89:
                    44:bd:a4:ca:81:73:01:e0:10:07:75:7f:02:d3:28:
                    55:93:10:38:b8:16:6b:28:3f:e0:48:f4:f5:7f:c5:
                    25:15:39:28:cf:5e:15:85:dc:76:43:25:8a:fe:ba:
                    64:08:b5:1b:64:c0:db:0c:ef:e5:4b:08:b2:01:5a:
                    28:6f:fd:ad:78:9e:c3:c3:6f:7e:fe:49:e5:78:73:
                    10:c6:14:a2:cd:b8:fb:c9:4c:56:74:a0:11:c9:3d:
                    6c:fe:8e:f1:5f:27:f1:a5:1b:3b:ca:81:a6:ed:4b:
                    e8:06:c0:d5:e0:30:e9:e9:9e:ac:8e:da:f7:05:c2:
                    4d:87:9e:1d:ad:1e:98:84:f9:6a:5b:e0:b4:70:2f:
                    da:82:9d:0f:e2:e5:71:39:91:43:35:cb:66:dd:2b:
                    6f:7c:3a:62:37:15:3e:26:61:15:43:7b:92:39:8a:
                    f0:42:4b:90:d1:bf:fa:25:7b:59:76:6a:da:16:0e:
                    4e:75:7d:3e:8d:59:85:82:43:cd:f9:d6:6e:e3:ea:
                    93:d5:8e:a1:25:52:b1:e4:59:8c:99:74:b3:3d:c9:
                    70:66:b4:9b:be:c4:63:aa:84:00:9d:7d:82:c5:57:
                    30:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:3E:09:E2:DD:7F:6D:A4:14:5D:E0:1E:5A:C4:1B:7E:29:F2:27:E0
            X509v3 Authority Key Identifier:
                keyid:E3:D5:53:BB:D1:FA:51:9F:74:4F:96:00:C5:A1:83:B2:0B:CF:03:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bnmu7YWSCmfoaFek32KR7FU8PfrJo33AgDDuJ7K9xU9N/1/E3D553BBD1FA519F744F9600C5A183B20BCF030F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3D553BBD1FA519F744F9600C5A183B20BCF030F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bnmu7YWSCmfoaFek32KR7FU8PfrJo33AgDDuJ7K9xU9N/1/3230312e3134392e3130302e302f32322d3234203d3e203631383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.149.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:76:82:2d:bb:ce:b8:cc:b3:2e:e8:8b:6e:9d:c3:f7:6c:88:
         c8:d9:31:83:9d:68:b5:bb:43:a2:7c:bd:f2:1d:b0:13:49:02:
         a5:46:80:40:5a:5c:4a:29:12:b0:98:93:2b:4f:15:e1:65:aa:
         38:c2:5b:da:07:1a:db:48:6f:c1:bc:43:1c:be:5b:fd:dc:46:
         bc:0c:08:d5:4c:03:8f:9b:a9:42:08:f3:60:42:e9:da:02:29:
         f7:6a:7f:64:97:41:f3:49:38:3c:57:5b:38:03:83:0e:01:ee:
         91:b9:bd:d1:99:3b:0a:af:2b:8c:f1:58:d9:92:79:e9:29:36:
         57:08:d5:d9:2f:2d:d5:d4:43:76:79:ce:5e:d6:b6:06:7b:e9:
         bf:47:cb:61:ec:d2:13:86:ff:40:d4:59:b3:e5:b8:7a:75:4a:
         84:76:18:78:8e:bf:0e:c0:ef:ce:c4:92:c0:1f:c7:db:cd:3f:
         55:66:0b:05:38:ba:17:d8:8b:12:2e:41:7e:ad:89:04:85:30:
         76:d2:68:57:4a:32:cb:36:31:e6:b2:45:24:86:7a:d7:a8:3a:
         61:69:b5:07:c6:ee:d7:a3:e5:99:7a:08:49:4f:8e:da:59:64:
         3f:53:7e:ac:ee:66:01:cd:82:cc:1d:fb:37:02:7a:61:23:02:
         ca:60:87:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 19:18:07 2024 by rpki-client on console-fra.rpki-client.org