Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/3230302e302e33322e302f32302d3332203d3e203631383839.roa
File:                     3230302e302e33322e302f32302d3332203d3e203631383839.roa (raw, json)
Hash identifier:          bbgPAEyLCDOGc2W4J5pLkHQG6N6rjVF0AjWKU9noISw=
Subject key identifier:   A6:BA:82:4E:6A:99:51:38:68:24:2D:F2:90:0F:6B:54:8A:19:76:57
Certificate issuer:       /CN=4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7
Certificate serial:       2CB8790DA249530E878F30D1C52FB915CBCBF101
Authority key identifier: 4E:87:B4:46:2F:90:42:B5:2A:A4:D6:5A:C7:D2:FD:92:C2:70:2D:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/3230302e302e33322e302f32302d3332203d3e203631383839.roa
Signing time:             Tue 11 Jun 2024 16:55:44 +0000
ROA not before:           Tue 11 Jun 2024 16:50:44 +0000
ROA not after:            Tue 10 Jun 2025 16:55:44 +0000
asID:                     61889
IP address blocks:        200.0.32.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.crl
                          rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 16 Jun 2024 19:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:b8:79:0d:a2:49:53:0e:87:8f:30:d1:c5:2f:b9:15:cb:cb:f1:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7
        Validity
            Not Before: Jun 11 16:50:44 2024 GMT
            Not After : Jun 10 16:55:44 2025 GMT
        Subject: CN=A6BA824E6A99513868242DF2900F6B548A197657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cb:10:cb:41:b7:73:c8:15:3c:6e:39:06:26:
                    aa:c3:96:cf:e7:0d:17:33:fb:67:ed:cd:32:cd:ea:
                    86:e0:be:63:2a:13:72:30:c0:e9:50:94:38:70:49:
                    bb:a1:f1:2a:99:6f:70:21:8b:5c:69:38:4f:cb:37:
                    86:83:1b:c8:e0:34:ce:fc:21:10:16:e6:d7:12:0d:
                    44:30:a9:cf:35:1a:5e:71:f4:45:6f:5f:4d:ba:cb:
                    75:1f:38:1c:00:7f:af:f4:b0:66:9e:22:08:30:75:
                    76:c8:94:a0:dc:de:9a:75:a7:c3:46:c7:6d:7a:44:
                    50:8f:a7:0c:f5:2d:f4:ee:74:88:68:cb:31:ca:57:
                    b8:69:96:29:db:e6:f8:0a:ce:35:00:d4:04:54:42:
                    f4:0b:04:89:28:06:57:67:d6:be:88:0f:2e:0a:a7:
                    c9:3b:79:43:06:0d:8d:d2:8c:19:28:b3:ff:e3:25:
                    d9:94:28:05:6a:84:e1:e1:b0:66:3e:6d:95:10:34:
                    17:44:92:f3:2d:28:9f:49:f4:b3:f5:ea:c1:10:9a:
                    a7:43:2e:0c:44:8d:b1:0a:9c:17:cc:9d:46:d4:e6:
                    de:da:eb:44:cc:a0:60:d9:86:d1:56:8b:71:5f:9d:
                    0c:b8:d8:0a:e5:b9:53:17:6f:00:a9:52:ca:4e:4c:
                    4e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:BA:82:4E:6A:99:51:38:68:24:2D:F2:90:0F:6B:54:8A:19:76:57
            X509v3 Authority Key Identifier:
                keyid:4E:87:B4:46:2F:90:42:B5:2A:A4:D6:5A:C7:D2:FD:92:C2:70:2D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/3230302e302e33322e302f32302d3332203d3e203631383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6d:24:7f:c6:f5:5d:5e:4c:b7:f2:35:99:e2:90:7d:c4:07:cc:
         a5:b8:8d:85:40:fa:6f:4c:e9:c1:7b:92:80:50:dc:94:b4:32:
         98:09:c2:68:cc:90:e8:0c:86:d6:08:84:e5:4e:b9:e7:65:84:
         e2:53:a6:db:51:ab:4a:30:34:d7:4b:d8:8c:fe:44:96:cd:63:
         d1:10:6d:7d:34:08:b8:91:25:15:78:3e:36:85:8c:02:78:09:
         f5:94:13:8f:51:e9:59:af:33:11:43:bd:5e:3a:38:3b:da:75:
         c1:6b:52:bc:ec:a0:9e:70:bd:bb:4e:3d:5f:48:f9:fb:69:f7:
         cf:60:41:4b:c9:6a:e9:b6:f1:e1:9f:60:c6:7e:fe:ee:4d:3c:
         b0:57:7b:de:74:e2:f8:a5:3c:04:01:be:7d:46:da:c6:9f:c6:
         41:32:3a:5a:d4:ef:5e:5d:09:de:2d:96:4d:b7:ff:9d:8b:d9:
         80:74:24:bc:b9:47:b6:dc:04:47:45:3e:12:43:db:4b:39:25:
         71:cc:c7:00:06:08:98:04:44:9e:62:68:0e:50:9f:ea:0f:58:
         fa:4e:c6:90:97:23:49:1d:58:91:43:af:06:84:23:f8:fe:e2:
         b3:5a:b2:ad:de:3f:46:0e:45:51:92:cc:53:54:f1:3f:37:ab:
         b2:26:17:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:26:08 2024 by rpki-client on console-ams.rpki-client.org