Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/3230302e3139352e3232342e302f31392d3332203d3e203631383839.roa
File:                     3230302e3139352e3232342e302f31392d3332203d3e203631383839.roa (raw, json)
Hash identifier:          50NQDQOpt2HbD4K5uxmWv4jkLs7gPGjfZ02DsrEWY+o=
Subject key identifier:   1C:46:60:49:4C:18:E0:7F:4E:7F:0A:CF:A1:4B:B3:E3:38:55:83:2F
Certificate issuer:       /CN=4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7
Certificate serial:       083E89D60824EA4075F0B890E4C07A597413835C
Authority key identifier: 4E:87:B4:46:2F:90:42:B5:2A:A4:D6:5A:C7:D2:FD:92:C2:70:2D:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/3230302e3139352e3232342e302f31392d3332203d3e203631383839.roa
Signing time:             Tue 11 Jun 2024 16:57:44 +0000
ROA not before:           Tue 11 Jun 2024 16:52:44 +0000
ROA not after:            Tue 10 Jun 2025 16:57:44 +0000
asID:                     61889
IP address blocks:        200.195.224.0/19 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.crl
                          rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 01:39:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:3e:89:d6:08:24:ea:40:75:f0:b8:90:e4:c0:7a:59:74:13:83:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7
        Validity
            Not Before: Jun 11 16:52:44 2024 GMT
            Not After : Jun 10 16:57:44 2025 GMT
        Subject: CN=1C4660494C18E07F4E7F0ACFA14BB3E33855832F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:59:88:34:9d:a1:36:39:71:bb:c3:f2:b6:f5:
                    f7:81:2f:ef:6a:e9:13:fa:f6:57:c2:c2:75:0e:28:
                    a7:a6:d4:1f:e3:39:2a:b5:bc:b4:64:7c:47:33:31:
                    d7:35:e1:8d:c2:f6:11:79:57:5b:1b:f7:1b:05:f1:
                    f7:4d:a7:94:2f:d6:53:28:b8:e5:f4:e7:57:9e:90:
                    db:45:f9:2e:ce:a3:c7:77:47:0b:b0:bf:d2:d7:fe:
                    ef:11:32:5c:c4:35:8a:23:c4:07:c3:7d:ab:57:a5:
                    fc:99:c6:15:de:ac:8b:9f:9e:b3:e1:d3:38:de:35:
                    24:78:6f:0a:d6:d5:2c:3e:25:c3:8b:5f:5c:58:66:
                    24:42:13:f3:64:65:1d:48:9f:d0:28:0a:1e:7e:ff:
                    40:9c:16:b3:10:68:f1:b4:92:5f:9a:a7:05:43:3d:
                    e5:2e:76:94:7f:d4:0a:cd:3e:27:b5:a8:90:ed:3d:
                    fe:10:a1:dd:36:14:23:6b:7d:ff:ed:75:fd:02:ce:
                    ff:40:5e:24:c8:20:95:f5:b5:fd:07:15:f9:3e:f6:
                    01:44:fe:ca:89:fb:5e:8b:07:30:08:d2:cd:49:12:
                    16:22:2d:19:01:43:74:3e:8a:e2:39:ec:8b:ab:55:
                    73:56:fb:2e:0c:06:20:3e:ad:f3:3f:00:22:24:5f:
                    a5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:46:60:49:4C:18:E0:7F:4E:7F:0A:CF:A1:4B:B3:E3:38:55:83:2F
            X509v3 Authority Key Identifier:
                keyid:4E:87:B4:46:2F:90:42:B5:2A:A4:D6:5A:C7:D2:FD:92:C2:70:2D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/3230302e3139352e3232342e302f31392d3332203d3e203631383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.195.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a1:93:79:dd:97:3d:c4:99:a4:7b:77:72:73:bf:6b:11:39:f3:
         18:df:9f:07:fc:4b:38:22:41:fe:b6:7a:e1:9d:8f:36:a7:e1:
         b6:f2:8c:33:0b:4a:9c:2f:0c:d8:92:2e:b8:02:db:7a:31:89:
         99:ac:96:39:5e:24:41:52:40:23:a5:63:af:a5:17:13:53:a2:
         2a:32:6e:03:c4:13:d4:59:b4:20:b1:4b:fb:2e:b1:ec:79:0d:
         6d:1c:ed:aa:64:04:40:85:aa:6e:99:62:b0:a7:9d:68:90:c2:
         75:bb:d5:25:54:00:b2:28:82:b4:5e:0d:3e:e4:a0:e8:96:0d:
         3e:dc:a9:2a:48:f2:25:f4:9d:87:b4:64:a8:0e:b4:7c:81:f0:
         e7:4c:a9:87:8b:77:d2:a4:0f:b4:a4:2b:87:4f:88:42:70:0d:
         22:34:4f:33:7c:ee:70:85:c6:93:e9:73:f1:01:3c:66:ed:43:
         72:d2:f0:44:7a:21:a5:1d:31:8e:22:e9:97:9f:79:97:b0:da:
         b7:42:f7:3a:55:32:b3:1c:aa:b4:4c:d1:1b:15:d9:07:a3:15:
         52:03:75:b3:9b:cc:4c:5f:6a:49:de:d0:f9:b4:a3:23:8b:1b:
         e2:49:dc:11:ff:7d:d9:89:b0:b4:bc:bb:ce:a3:ce:62:a5:84:
         25:c4:a5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:32:12 2024 by rpki-client on console-ams.rpki-client.org