Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CgSByf9ZmDpytRbUdiwck29v8keZ2u3isULUZP2G9icP/0/3230312e372e3231382e302f32342d3234203d3e203631383336.roa
File:                     3230312e372e3231382e302f32342d3234203d3e203631383336.roa (raw, json)
Hash identifier:          kTNpZNWgbnpdEnzF4HKcoDXhhnz0qWT8PdCYbWggOKI=
Subject key identifier:   5D:A1:E7:52:51:09:FF:DE:4E:1A:40:88:4C:55:7A:F2:66:7F:A4:9A
Certificate issuer:       /CN=43885CAAF241C57514F4BFCC379D2F93549E4FAB
Certificate serial:       7EAC9A274CD2014FF6B61D0CCCCED7B890826332
Authority key identifier: 43:88:5C:AA:F2:41:C5:75:14:F4:BF:CC:37:9D:2F:93:54:9E:4F:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43885CAAF241C57514F4BFCC379D2F93549E4FAB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CgSByf9ZmDpytRbUdiwck29v8keZ2u3isULUZP2G9icP/0/3230312e372e3231382e302f32342d3234203d3e203631383336.roa
Signing time:             Fri 26 Jul 2024 16:46:29 +0000
ROA not before:           Fri 26 Jul 2024 16:41:29 +0000
ROA not after:            Fri 25 Jul 2025 16:46:29 +0000
asID:                     61836
IP address blocks:        201.7.218.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CgSByf9ZmDpytRbUdiwck29v8keZ2u3isULUZP2G9icP/0/43885CAAF241C57514F4BFCC379D2F93549E4FAB.crl
                          rsync://rpki-repo.registro.br/repo/CgSByf9ZmDpytRbUdiwck29v8keZ2u3isULUZP2G9icP/0/43885CAAF241C57514F4BFCC379D2F93549E4FAB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43885CAAF241C57514F4BFCC379D2F93549E4FAB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:ac:9a:27:4c:d2:01:4f:f6:b6:1d:0c:cc:ce:d7:b8:90:82:63:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43885CAAF241C57514F4BFCC379D2F93549E4FAB
        Validity
            Not Before: Jul 26 16:41:29 2024 GMT
            Not After : Jul 25 16:46:29 2025 GMT
        Subject: CN=5DA1E7525109FFDE4E1A40884C557AF2667FA49A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c9:cd:55:24:08:b0:52:3d:55:29:6a:67:fa:
                    ea:cc:39:2a:71:11:33:ec:7a:b5:60:52:b5:17:d7:
                    d3:6d:ca:53:c2:36:ee:1d:fd:7c:b7:a7:65:e5:7d:
                    44:22:69:22:d4:b0:68:10:e0:cf:9f:6d:31:0d:43:
                    c6:9d:3c:c2:05:f8:69:07:2b:e0:10:57:66:65:7b:
                    66:2e:42:64:01:de:fc:0c:cb:61:15:06:8d:01:2e:
                    be:a2:2e:a0:72:53:5b:08:e3:17:5c:23:b2:d6:bc:
                    a0:38:f7:f4:8a:03:d4:df:2a:1e:53:0a:3e:d0:44:
                    89:fa:1e:12:7b:a0:93:c1:df:0b:85:dd:b0:ff:78:
                    f0:03:a5:55:f2:4a:de:09:84:e2:55:8c:1d:07:fe:
                    a6:a9:84:e9:1d:22:ad:38:1e:91:2c:68:89:b3:8e:
                    a1:4b:1d:62:07:2a:bc:d6:2b:e8:d4:85:17:90:66:
                    c2:e5:a2:98:38:78:53:5a:24:4a:28:56:07:42:42:
                    5a:a2:3e:18:bc:1a:4e:38:d9:a2:72:75:02:df:4f:
                    26:5a:52:b1:50:ce:1b:2c:e1:d6:7e:01:7b:c5:5f:
                    00:80:4b:07:2d:ff:47:c2:3f:24:11:a7:1f:06:32:
                    1a:11:01:eb:43:1e:aa:44:0d:bb:7c:aa:8c:4d:e0:
                    f6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:A1:E7:52:51:09:FF:DE:4E:1A:40:88:4C:55:7A:F2:66:7F:A4:9A
            X509v3 Authority Key Identifier:
                keyid:43:88:5C:AA:F2:41:C5:75:14:F4:BF:CC:37:9D:2F:93:54:9E:4F:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CgSByf9ZmDpytRbUdiwck29v8keZ2u3isULUZP2G9icP/0/43885CAAF241C57514F4BFCC379D2F93549E4FAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43885CAAF241C57514F4BFCC379D2F93549E4FAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CgSByf9ZmDpytRbUdiwck29v8keZ2u3isULUZP2G9icP/0/3230312e372e3231382e302f32342d3234203d3e203631383336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.7.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:14:f0:91:c1:27:14:8e:5a:d2:55:b9:22:79:ee:c4:00:51:
         64:b5:eb:52:ae:3d:e0:70:bb:b2:01:ca:a7:b3:39:c5:4a:66:
         85:fd:c1:1b:08:eb:f6:3f:7d:93:50:ed:50:2f:7b:a1:36:a5:
         ef:74:60:91:2b:dd:b6:58:c3:c6:81:42:63:0c:c7:ac:e3:fa:
         22:12:c2:63:24:3c:6c:b4:4d:a6:70:4f:b3:9c:f9:60:f6:f3:
         6b:89:8a:ff:e2:ad:1e:fc:f7:24:d5:db:f6:f2:e0:ad:84:50:
         c2:a1:c7:e3:60:73:db:3a:ba:f3:63:e6:dc:3c:88:6c:9f:ee:
         da:9b:68:6d:5c:75:0a:dc:19:a9:8c:29:58:6a:db:96:80:91:
         33:3c:2c:fa:8e:ec:51:0f:9f:04:17:a6:25:ea:a5:76:d9:f3:
         ef:7d:b6:7e:79:92:37:79:65:c8:44:62:d2:0f:1d:b8:a6:48:
         ba:e2:d9:cd:e9:0d:fe:2a:8d:bf:a9:6f:8d:68:f8:00:28:f5:
         d6:dc:ae:64:8a:e6:bb:60:9c:7a:5c:86:34:ac:b4:11:af:c7:
         d2:af:66:01:b2:73:b0:86:10:99:ce:5c:5e:5b:97:9b:97:7c:
         f5:1a:f3:a2:94:0f:f8:04:b6:32:1d:23:a7:36:ff:5e:9f:4f:
         16:a6:40:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:08 2024 by rpki-client on console-ams.rpki-client.org