Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CgSByf9ZmDpytRbUdiwck29v8keZ2u3isULUZP2G9icP/0/3230312e372e3231392e302f32342d3234203d3e203631383336.roa
File:                     3230312e372e3231392e302f32342d3234203d3e203631383336.roa (raw, json)
Hash identifier:          wHxTligKZrBoWB9eGAXftGMUjGCyI8LPq6OVIOw16Tw=
Subject key identifier:   F5:F8:69:71:F4:A5:2F:F1:0A:0B:8D:CB:6B:08:52:83:4F:45:CD:F0
Certificate issuer:       /CN=43885CAAF241C57514F4BFCC379D2F93549E4FAB
Certificate serial:       5654CFEAC62B36606FE4D54B3BC9CA691C7D133F
Authority key identifier: 43:88:5C:AA:F2:41:C5:75:14:F4:BF:CC:37:9D:2F:93:54:9E:4F:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43885CAAF241C57514F4BFCC379D2F93549E4FAB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CgSByf9ZmDpytRbUdiwck29v8keZ2u3isULUZP2G9icP/0/3230312e372e3231392e302f32342d3234203d3e203631383336.roa
Signing time:             Fri 26 Jul 2024 16:46:28 +0000
ROA not before:           Fri 26 Jul 2024 16:41:28 +0000
ROA not after:            Fri 25 Jul 2025 16:46:28 +0000
asID:                     61836
IP address blocks:        201.7.219.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CgSByf9ZmDpytRbUdiwck29v8keZ2u3isULUZP2G9icP/0/43885CAAF241C57514F4BFCC379D2F93549E4FAB.crl
                          rsync://rpki-repo.registro.br/repo/CgSByf9ZmDpytRbUdiwck29v8keZ2u3isULUZP2G9icP/0/43885CAAF241C57514F4BFCC379D2F93549E4FAB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43885CAAF241C57514F4BFCC379D2F93549E4FAB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:54:cf:ea:c6:2b:36:60:6f:e4:d5:4b:3b:c9:ca:69:1c:7d:13:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43885CAAF241C57514F4BFCC379D2F93549E4FAB
        Validity
            Not Before: Jul 26 16:41:28 2024 GMT
            Not After : Jul 25 16:46:28 2025 GMT
        Subject: CN=F5F86971F4A52FF10A0B8DCB6B0852834F45CDF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c6:60:ea:71:74:b0:20:2a:cc:4a:ae:ae:95:
                    e7:08:4f:49:b0:4e:51:68:26:97:6c:6b:f8:fc:9f:
                    54:be:f5:43:ab:0b:ae:f5:3f:60:ba:24:b1:ea:46:
                    a7:69:0e:08:99:02:11:99:22:4d:d2:fa:be:0c:86:
                    ff:65:61:11:3b:e4:8b:fe:aa:b0:51:2f:cb:1d:a2:
                    ee:d1:c4:59:b2:d0:5d:84:f0:77:a5:f0:f4:0b:32:
                    9e:c8:c6:07:4f:3b:3a:84:b5:ee:63:60:90:6b:0f:
                    5b:da:db:ad:15:35:9e:48:f8:25:ab:54:00:4a:be:
                    0f:d5:a0:fa:c7:04:78:64:62:bf:13:d3:fe:2e:fb:
                    d1:f0:15:a5:a3:99:41:a1:b4:c0:04:9a:74:43:ab:
                    61:4d:f0:63:47:df:c4:97:d9:81:5b:ba:bc:00:cd:
                    46:1f:bf:f5:29:c4:d4:ba:54:4b:38:88:fa:35:50:
                    12:2b:3c:27:26:33:1d:d4:c4:6b:ae:2d:dc:fb:70:
                    30:0f:30:b4:ee:41:65:9d:1c:9a:47:9d:9d:6d:3e:
                    71:b6:3f:22:c2:2f:c3:35:73:fe:6e:e2:66:8f:b5:
                    dd:7a:1f:82:90:47:68:de:e4:85:c8:3a:0b:bb:fd:
                    b3:51:a0:fc:47:19:7b:7e:1d:b0:d2:71:24:9b:f7:
                    82:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F8:69:71:F4:A5:2F:F1:0A:0B:8D:CB:6B:08:52:83:4F:45:CD:F0
            X509v3 Authority Key Identifier:
                keyid:43:88:5C:AA:F2:41:C5:75:14:F4:BF:CC:37:9D:2F:93:54:9E:4F:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CgSByf9ZmDpytRbUdiwck29v8keZ2u3isULUZP2G9icP/0/43885CAAF241C57514F4BFCC379D2F93549E4FAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43885CAAF241C57514F4BFCC379D2F93549E4FAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CgSByf9ZmDpytRbUdiwck29v8keZ2u3isULUZP2G9icP/0/3230312e372e3231392e302f32342d3234203d3e203631383336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.7.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:46:3d:1e:c4:b1:23:e1:52:ad:82:14:aa:d0:eb:cf:39:74:
         44:db:fd:09:81:aa:c1:2d:53:a3:6a:56:e8:b2:05:70:a0:15:
         ea:87:9f:d4:93:60:dd:81:15:19:83:fd:e8:0e:e7:0e:be:9c:
         2a:d4:00:e3:f8:a4:82:54:00:6b:bc:3b:d9:92:22:23:a1:44:
         40:11:06:52:d5:f0:86:85:fd:5a:10:06:31:f4:a3:48:31:bf:
         06:d3:a1:02:ec:54:8e:32:2f:48:9d:b7:c3:a1:75:e7:32:7d:
         b5:a0:18:5e:f3:5b:2f:07:d9:4e:35:ff:24:c8:87:5b:25:49:
         e8:26:cd:d4:a9:21:8a:90:f9:a4:64:44:d3:58:f5:d8:bd:e5:
         dd:9b:3f:b2:90:6c:5d:d3:7c:d8:c0:7e:c4:0d:99:b9:5a:12:
         8b:a0:f1:67:cd:3e:12:e2:06:9e:32:83:af:1a:71:4b:e1:30:
         40:86:81:3d:64:9d:c2:64:e8:68:c8:58:2d:16:28:4f:3a:a1:
         b7:e6:dc:c3:10:cb:f7:c0:7f:cc:08:ed:6b:8b:d9:de:ac:a5:
         de:8f:ed:d0:56:42:fd:38:39:15:bc:12:f6:57:9a:51:b5:11:
         1e:c0:79:49:e1:e6:dc:4c:36:95:74:f3:91:4c:5f:06:31:5b:
         a5:78:24:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:08 2024 by rpki-client on console-ams.rpki-client.org