Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cc1U13ZyteufJNZhWM1mLYCe2khiJNkHosdZnhq4AAMU/1/3230302e3139362e302e302f31392d3234203d3e203130373333.roa
File:                     3230302e3139362e302e302f31392d3234203d3e203130373333.roa (raw, json)
Hash identifier:          G2aNFiyR/5ZaswQPOsyccxYjyNgxi2PcuXPr9We21uE=
Subject key identifier:   EE:59:0E:00:2A:0C:9F:50:7C:D8:A8:B5:63:67:37:0A:32:42:30:8C
Certificate issuer:       /CN=7DE6E0779DD8FBF98FE9AD24531A24F792D26451
Certificate serial:       3A0A2FFE92F4A52C0A1205F30C599F323AA476BF
Authority key identifier: 7D:E6:E0:77:9D:D8:FB:F9:8F:E9:AD:24:53:1A:24:F7:92:D2:64:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DE6E0779DD8FBF98FE9AD24531A24F792D26451.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cc1U13ZyteufJNZhWM1mLYCe2khiJNkHosdZnhq4AAMU/1/3230302e3139362e302e302f31392d3234203d3e203130373333.roa
Signing time:             Thu 04 Apr 2024 01:00:17 +0000
ROA not before:           Thu 04 Apr 2024 00:55:17 +0000
ROA not after:            Thu 03 Apr 2025 01:00:17 +0000
asID:                     10733
IP address blocks:        200.196.0.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cc1U13ZyteufJNZhWM1mLYCe2khiJNkHosdZnhq4AAMU/1/7DE6E0779DD8FBF98FE9AD24531A24F792D26451.crl
                          rsync://rpki-repo.registro.br/repo/Cc1U13ZyteufJNZhWM1mLYCe2khiJNkHosdZnhq4AAMU/1/7DE6E0779DD8FBF98FE9AD24531A24F792D26451.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DE6E0779DD8FBF98FE9AD24531A24F792D26451.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:05:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:0a:2f:fe:92:f4:a5:2c:0a:12:05:f3:0c:59:9f:32:3a:a4:76:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DE6E0779DD8FBF98FE9AD24531A24F792D26451
        Validity
            Not Before: Apr  4 00:55:17 2024 GMT
            Not After : Apr  3 01:00:17 2025 GMT
        Subject: CN=EE590E002A0C9F507CD8A8B56367370A3242308C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:de:75:86:c0:fe:09:f2:77:8b:61:32:69:0b:
                    c3:3e:e5:32:69:bf:94:7a:07:b1:85:91:ee:ce:88:
                    f8:72:a6:c9:cf:cd:13:74:c7:88:f9:5c:26:99:40:
                    9e:22:a8:11:cf:66:0d:4c:b6:e6:96:e8:a3:7a:4e:
                    04:c2:4d:65:22:67:09:22:cf:9d:b2:de:04:99:cf:
                    72:fc:db:e5:d1:1b:47:cd:e8:c1:10:d6:09:ac:1f:
                    05:d9:85:aa:26:de:e5:9d:d5:6c:e4:4d:52:fc:d2:
                    2d:50:f3:d7:aa:d0:23:6f:65:a9:0f:3a:65:21:f8:
                    d1:bd:c4:22:4d:a9:6f:21:fc:fe:80:bb:9f:cb:fd:
                    e1:eb:78:b5:3b:f5:8a:33:9f:f1:28:2d:f9:d2:4b:
                    8b:a1:29:6d:28:dd:31:c9:1a:32:54:cc:c9:99:bc:
                    4e:c4:65:9a:fd:e6:0f:05:68:92:cc:14:47:be:ed:
                    82:01:76:ad:dd:95:67:ce:89:ab:f8:06:9d:f4:3d:
                    2e:da:ee:fb:4f:c4:29:06:7a:c6:a7:a9:74:31:c3:
                    cb:a9:77:6e:14:8d:6c:20:85:3a:d4:2c:d4:97:c5:
                    ad:85:b7:f5:a8:0d:f9:d4:5a:c1:fc:6a:35:80:00:
                    66:67:15:85:ab:c8:c8:db:e3:b8:78:51:47:b1:1d:
                    c0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:59:0E:00:2A:0C:9F:50:7C:D8:A8:B5:63:67:37:0A:32:42:30:8C
            X509v3 Authority Key Identifier:
                keyid:7D:E6:E0:77:9D:D8:FB:F9:8F:E9:AD:24:53:1A:24:F7:92:D2:64:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cc1U13ZyteufJNZhWM1mLYCe2khiJNkHosdZnhq4AAMU/1/7DE6E0779DD8FBF98FE9AD24531A24F792D26451.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DE6E0779DD8FBF98FE9AD24531A24F792D26451.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cc1U13ZyteufJNZhWM1mLYCe2khiJNkHosdZnhq4AAMU/1/3230302e3139362e302e302f31392d3234203d3e203130373333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.196.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         09:13:82:82:62:94:87:55:a0:35:4a:97:3d:a5:ce:2a:9f:45:
         4c:a0:4d:3a:1f:39:e5:30:57:3f:df:58:03:ec:69:a3:2d:fa:
         82:44:4b:4b:38:cc:b2:a4:cb:5f:54:9c:7e:ec:b8:54:3b:70:
         6a:ce:a5:de:bf:08:73:d9:01:70:0c:d2:c2:57:a3:b5:5a:a7:
         9f:b3:d4:f1:ff:a4:a8:b4:18:f8:92:85:6b:70:46:51:8c:4c:
         c2:ef:d0:4f:6f:8a:ed:65:dc:20:66:d7:5c:b1:3c:e7:2d:35:
         ce:02:b3:f3:d5:7a:0d:e8:eb:72:d1:88:56:07:e0:44:a3:0e:
         07:98:8c:97:2b:62:86:69:2d:c3:ed:ce:da:ca:61:b6:88:25:
         da:da:c0:b6:6d:fc:53:6d:3d:77:49:c4:40:cc:13:5a:64:fc:
         3a:94:46:da:73:e4:23:b7:20:f8:82:1f:0e:15:01:16:ec:74:
         4b:4f:e1:1e:1a:4b:ef:68:f2:49:3d:cd:e0:02:04:1c:2d:76:
         a9:1b:35:7e:6d:07:27:6e:43:c9:1d:66:72:03:47:49:a0:8f:
         85:e8:1c:f0:be:90:98:b3:62:ec:c5:ed:c1:6a:d2:c4:1b:68:
         5e:06:3c:a8:fc:11:0a:14:da:eb:a7:53:7a:6f:ef:5b:8a:64:
         3b:1a:39:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:29 2024 by rpki-client on console-fra.rpki-client.org