Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/3230312e31362e36342e302f31382d3332203d3e203134383430.roa
File:                     3230312e31362e36342e302f31382d3332203d3e203134383430.roa (raw, json)
Hash identifier:          p7nHpqDwPVMlOxuB18aTwBi5cY5ihmBxAYHdAWED2Q8=
Subject key identifier:   E9:9E:06:C3:68:7E:3C:9A:09:79:3D:F7:1F:C2:2C:A2:B5:45:7E:05
Certificate issuer:       /CN=4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7
Certificate serial:       36025CE8562D0C0C730506BC8D643BC74B1345CB
Authority key identifier: 4E:87:B4:46:2F:90:42:B5:2A:A4:D6:5A:C7:D2:FD:92:C2:70:2D:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/3230312e31362e36342e302f31382d3332203d3e203134383430.roa
Signing time:             Tue 11 Jun 2024 16:58:15 +0000
ROA not before:           Tue 11 Jun 2024 16:53:15 +0000
ROA not after:            Tue 10 Jun 2025 16:58:15 +0000
asID:                     14840
IP address blocks:        201.16.64.0/18 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.crl
                          rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 01:39:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:02:5c:e8:56:2d:0c:0c:73:05:06:bc:8d:64:3b:c7:4b:13:45:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7
        Validity
            Not Before: Jun 11 16:53:15 2024 GMT
            Not After : Jun 10 16:58:15 2025 GMT
        Subject: CN=E99E06C3687E3C9A09793DF71FC22CA2B5457E05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:07:57:7f:2a:3e:37:de:64:03:04:85:8c:84:
                    c8:08:d6:63:c4:fc:ef:3b:eb:cf:5e:ae:c8:f3:9e:
                    03:3f:52:0c:d9:10:08:6b:e0:ea:e7:84:d5:22:80:
                    7a:e3:08:9f:c6:53:57:f5:af:b0:5c:1e:96:61:41:
                    22:d3:46:0e:2b:3d:e7:be:0d:51:c3:fe:1b:4d:8e:
                    f7:06:2c:21:1b:64:b7:cf:81:15:35:c8:86:9c:b8:
                    5d:71:f0:c9:29:1c:25:38:26:11:24:2c:89:db:63:
                    3a:71:cf:75:86:e6:2c:73:ab:6c:b4:ef:30:34:75:
                    b8:95:e6:c2:5c:69:31:da:52:a5:6f:62:c8:72:ad:
                    0c:18:c5:96:1c:f7:ec:51:5a:20:d7:e6:b3:4e:34:
                    85:14:45:96:a6:5f:9a:79:9b:03:8c:8d:db:1c:23:
                    e4:4a:59:c1:f5:52:fc:74:45:a5:0a:4d:a2:1d:39:
                    68:6f:43:d9:ca:b4:4a:68:5f:61:84:57:71:8a:65:
                    d8:43:b0:b2:c7:c9:90:c2:f5:aa:ec:bb:9a:16:ee:
                    29:1f:c6:56:c1:a5:10:44:e8:8d:d0:3c:71:3a:e8:
                    9a:15:cc:0c:11:bd:60:a2:75:d7:89:cd:57:1e:0d:
                    07:15:c1:b6:b7:b1:b5:39:48:d4:27:b5:c6:bb:4b:
                    97:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:9E:06:C3:68:7E:3C:9A:09:79:3D:F7:1F:C2:2C:A2:B5:45:7E:05
            X509v3 Authority Key Identifier:
                keyid:4E:87:B4:46:2F:90:42:B5:2A:A4:D6:5A:C7:D2:FD:92:C2:70:2D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/3230312e31362e36342e302f31382d3332203d3e203134383430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.16.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1f:94:38:54:73:5a:bd:0d:fe:0e:61:e3:75:dd:3c:ab:03:92:
         17:a3:28:69:82:78:fe:10:75:64:a4:93:3c:d0:ba:29:32:44:
         38:21:c9:c3:d2:a9:e2:fd:3e:e7:4e:84:0e:36:57:65:4d:91:
         cc:c1:70:62:cb:4a:d0:8d:ae:4f:0c:19:f6:83:88:d4:2f:e2:
         6a:28:60:16:4f:e2:7b:27:ba:d7:c5:83:72:90:e5:b4:24:eb:
         1d:2a:7d:21:53:24:ef:4f:e2:4b:2a:a3:57:30:66:ea:b1:bd:
         79:be:e3:63:6e:c8:34:4e:5b:f6:d8:81:54:a4:e4:05:ff:e6:
         34:28:6d:46:87:fd:54:a9:2c:ae:63:dc:ec:77:65:aa:b0:db:
         40:40:d4:d0:c9:52:36:e2:7c:0a:02:d9:7b:a9:36:93:62:b0:
         f5:6e:a6:bc:95:39:d1:d5:f6:e7:81:79:ed:e9:58:d0:0a:79:
         89:94:ef:ee:ef:77:7d:81:c7:eb:6c:d6:f0:9d:31:73:2f:82:
         7f:d1:0a:c4:5e:b4:2a:3b:db:af:f6:76:69:0c:10:b9:3c:44:
         79:86:52:b9:46:8a:86:96:23:74:b7:df:31:e7:3f:b8:82:d2:
         e3:92:b2:16:e9:15:2d:81:89:22:cb:4e:f6:e0:71:ae:3f:f8:
         58:59:1f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:32:12 2024 by rpki-client on console-ams.rpki-client.org