Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/1/3230312e3138322e36342e302f32322d3232203d3e20323637353031.roa
File:                     3230312e3138322e36342e302f32322d3232203d3e20323637353031.roa (raw, json)
Hash identifier:          6YF49RmNR16bvBfoxrlqEvTfP6nX3rJbTwkdoSjAp60=
Subject key identifier:   70:64:20:D5:52:BC:FF:45:F3:B9:85:A3:A8:61:D2:56:21:0B:91:E9
Certificate issuer:       /CN=C7CEBDAC7451296ECAEFC51DE2EA531B5A105086
Certificate serial:       038FAE216AED6009BAF787F270FB34D245A6FDCD
Authority key identifier: C7:CE:BD:AC:74:51:29:6E:CA:EF:C5:1D:E2:EA:53:1B:5A:10:50:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7CEBDAC7451296ECAEFC51DE2EA531B5A105086.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/1/3230312e3138322e36342e302f32322d3232203d3e20323637353031.roa
Signing time:             Thu 04 Apr 2024 02:52:04 +0000
ROA not before:           Thu 04 Apr 2024 02:47:04 +0000
ROA not after:            Thu 03 Apr 2025 02:52:04 +0000
asID:                     267501
IP address blocks:        201.182.64.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/1/C7CEBDAC7451296ECAEFC51DE2EA531B5A105086.crl
                          rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/1/C7CEBDAC7451296ECAEFC51DE2EA531B5A105086.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7CEBDAC7451296ECAEFC51DE2EA531B5A105086.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 10:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:8f:ae:21:6a:ed:60:09:ba:f7:87:f2:70:fb:34:d2:45:a6:fd:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7CEBDAC7451296ECAEFC51DE2EA531B5A105086
        Validity
            Not Before: Apr  4 02:47:04 2024 GMT
            Not After : Apr  3 02:52:04 2025 GMT
        Subject: CN=706420D552BCFF45F3B985A3A861D256210B91E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:66:8b:8e:1c:e2:e1:7e:f4:4e:6a:eb:c2:0c:
                    8e:2b:69:1c:c9:b4:f0:d1:da:c0:b8:d0:93:90:a0:
                    d5:43:ee:6d:f4:99:e6:b5:c7:3d:cc:91:3f:74:6a:
                    3f:28:dd:8d:b5:ec:66:88:b0:9c:43:27:ed:73:96:
                    c0:76:60:d7:43:ae:9f:ff:a9:78:26:d3:88:5d:da:
                    47:63:43:93:15:e5:bc:42:29:13:35:71:f5:10:ba:
                    75:17:44:95:97:8e:01:8f:63:ee:48:a7:85:02:15:
                    ce:85:20:9f:a0:8d:d6:6d:6b:ee:d5:2e:12:81:13:
                    8b:a5:cb:14:92:e7:24:b8:3e:5a:c0:6b:fe:2e:65:
                    79:cb:86:62:2a:2a:d5:7b:fb:a6:c4:cd:f7:7c:19:
                    06:e4:ef:f2:5f:99:e9:b9:da:b4:f7:bf:f5:de:7f:
                    4a:fa:6c:30:8d:46:d0:68:84:9d:d3:f0:44:d8:6a:
                    2d:9e:35:7e:62:12:79:bf:15:21:5e:30:b8:ca:cd:
                    3b:cb:27:6f:a8:ec:80:a9:36:46:9d:cc:6b:49:78:
                    0c:ad:f5:47:1d:cb:9e:5b:ec:a8:1b:c7:af:bf:98:
                    13:0e:dc:1c:15:aa:f9:19:7f:f0:4c:97:fd:d2:21:
                    9f:ce:96:cb:7f:68:eb:f3:f7:a6:3d:4f:6e:16:ef:
                    51:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:64:20:D5:52:BC:FF:45:F3:B9:85:A3:A8:61:D2:56:21:0B:91:E9
            X509v3 Authority Key Identifier:
                keyid:C7:CE:BD:AC:74:51:29:6E:CA:EF:C5:1D:E2:EA:53:1B:5A:10:50:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/1/C7CEBDAC7451296ECAEFC51DE2EA531B5A105086.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7CEBDAC7451296ECAEFC51DE2EA531B5A105086.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/1/3230312e3138322e36342e302f32322d3232203d3e20323637353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:de:e6:fe:3a:31:2e:6c:2c:57:8f:53:52:11:f1:a6:32:89:
         80:29:81:00:77:e3:99:1d:71:ec:28:7c:65:d0:dc:ce:15:75:
         b2:42:e9:f7:28:69:e3:81:5d:e3:b2:6d:5f:cd:6d:91:9e:0f:
         4d:ba:12:41:20:22:3e:2c:b2:9f:ef:c8:07:9f:e5:54:20:45:
         22:e5:b8:56:a5:55:d2:e4:a0:2c:f0:83:3c:d4:3d:c9:fc:40:
         49:83:41:2a:ac:f1:a2:db:f0:12:35:e0:3d:1d:26:94:11:7b:
         5c:3f:31:45:41:95:5b:81:c9:49:8f:57:2d:98:7d:3e:4d:02:
         1b:9d:c1:cc:02:44:d8:35:15:50:90:d4:3f:5a:8d:c0:f1:8e:
         16:e4:ac:09:a7:ac:b1:8c:87:61:1a:18:85:2a:1b:81:86:e7:
         31:96:c2:04:6a:30:05:f3:2a:9f:f9:ef:66:dd:ed:95:7d:5c:
         e1:8e:79:17:3e:0d:58:25:ce:5c:98:a1:a3:7f:c3:e6:6c:4a:
         88:06:0a:f4:13:03:e6:95:51:d5:52:d2:39:9c:d5:ed:65:1c:
         38:86:f7:57:8c:a5:bc:cc:a5:c3:2b:c5:d4:04:c2:26:42:32:
         3f:bc:d5:c8:15:ae:42:58:2f:73:13:2e:b6:52:34:83:2f:81:
         66:de:6c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 10:31:32 2024 by rpki-client on console-fra.rpki-client.org