Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3230312e3135302e3134342e302f32322d3234203d3e20323639303733.roa
File:                     3230312e3135302e3134342e302f32322d3234203d3e20323639303733.roa (raw, json)
Hash identifier:          buUlTBRP4LkUGYwu+XwNSHnoJ7+T+RhxxCqxR3kq8NY=
Subject key identifier:   08:E5:8C:A4:D1:9F:7E:2A:95:D3:F1:EC:E3:44:90:53:3D:10:88:4C
Certificate issuer:       /CN=3FF96820195E6A66E38F9102B4B56F0E4EB31831
Certificate serial:       1D6F0BFDC5FDC5B8ABC7121D9063F6458A9C913E
Authority key identifier: 3F:F9:68:20:19:5E:6A:66:E3:8F:91:02:B4:B5:6F:0E:4E:B3:18:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3230312e3135302e3134342e302f32322d3234203d3e20323639303733.roa
Signing time:             Wed 23 Oct 2024 21:08:03 +0000
ROA not before:           Wed 23 Oct 2024 21:03:03 +0000
ROA not after:            Wed 22 Oct 2025 21:08:03 +0000
asID:                     269073
IP address blocks:        201.150.144.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.crl
                          rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 09:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:6f:0b:fd:c5:fd:c5:b8:ab:c7:12:1d:90:63:f6:45:8a:9c:91:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF96820195E6A66E38F9102B4B56F0E4EB31831
        Validity
            Not Before: Oct 23 21:03:03 2024 GMT
            Not After : Oct 22 21:08:03 2025 GMT
        Subject: CN=08E58CA4D19F7E2A95D3F1ECE34490533D10884C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ba:99:29:19:53:1b:9d:01:20:d6:41:df:93:
                    38:fa:b5:7a:f3:6a:32:7b:04:ee:2e:0e:62:05:3a:
                    ee:4f:57:55:95:e0:6b:ae:26:12:fe:91:1a:27:b2:
                    2d:1f:83:22:02:d1:03:ce:65:4a:c3:35:55:de:d0:
                    aa:25:c8:f5:d6:37:1f:c9:0e:9b:b9:c2:95:c7:0a:
                    0a:41:79:28:06:5e:64:5c:d9:1a:88:2d:10:bb:e8:
                    2a:90:e4:18:b7:9a:d0:73:cc:0e:b8:27:17:79:d7:
                    d9:de:75:f4:52:ef:1b:06:51:4f:95:76:9d:82:2f:
                    7d:64:be:36:2c:c9:68:4b:17:9f:da:c7:16:ba:25:
                    c1:f2:0f:cf:de:fa:a9:7c:b5:a4:02:6f:27:15:71:
                    63:1e:37:e0:87:b6:95:27:d1:f3:b0:a2:8b:3c:8a:
                    37:aa:e9:d9:99:46:50:43:40:52:06:cc:cd:82:ff:
                    d5:e2:ae:e5:0d:ea:59:85:6f:81:7c:39:7c:08:64:
                    82:9b:e1:3b:a8:5c:b2:89:40:80:5d:2f:5f:bb:3c:
                    84:02:67:03:24:77:31:1c:a1:ff:8a:af:a1:aa:0b:
                    40:02:49:9c:7c:70:7e:f1:be:f1:a5:8f:62:96:3b:
                    fa:f9:a4:99:22:04:24:19:1a:79:fe:b4:79:38:b6:
                    83:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:E5:8C:A4:D1:9F:7E:2A:95:D3:F1:EC:E3:44:90:53:3D:10:88:4C
            X509v3 Authority Key Identifier:
                keyid:3F:F9:68:20:19:5E:6A:66:E3:8F:91:02:B4:B5:6F:0E:4E:B3:18:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3230312e3135302e3134342e302f32322d3234203d3e20323639303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.150.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:4d:77:8d:00:8b:9f:ff:ac:b1:16:e2:fc:60:2b:58:5b:db:
         ab:a3:94:62:32:5d:9f:b6:e5:86:3a:b0:26:74:61:0a:b6:d5:
         cc:e7:2c:bb:e3:1a:49:b6:28:c9:b8:8e:db:e7:22:e7:b6:3a:
         8d:60:37:cd:b4:26:7d:7c:71:00:d7:7c:0f:ed:31:a6:03:dd:
         88:00:37:30:8a:39:f3:50:65:c5:a4:ed:50:eb:54:58:b8:22:
         25:aa:19:2b:9c:cf:c6:61:a2:9a:0e:7f:c7:e8:32:a7:08:9d:
         cb:f9:36:e5:81:a9:02:fd:77:e3:fd:5d:ca:3e:ac:04:9f:45:
         21:33:2c:31:c3:12:d1:d5:56:bc:17:6c:3f:22:bc:7f:a7:dc:
         63:54:b3:bf:65:3f:5b:92:1b:a8:45:4a:41:37:18:c7:95:66:
         9a:9b:f9:6d:10:ee:b0:18:8c:21:8d:74:d1:f3:b4:51:a9:ac:
         de:9a:31:c4:ea:18:5f:ab:82:65:6a:12:8e:3b:06:26:cc:e4:
         6c:86:c6:3f:8d:44:32:d8:ca:ad:42:78:df:38:58:28:32:61:
         d9:c9:31:fc:75:5f:57:d9:53:96:d0:0c:af:1f:c6:ae:1f:a4:
         ed:ec:ff:38:0e:c4:28:37:f2:1e:b4:5b:42:22:93:ac:f5:45:
         43:76:6b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:10 2024 by rpki-client on console-fra.rpki-client.org