Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/3230302e36362e3131322e302f32312d3231203d3e20323632383132.roa
File:                     3230302e36362e3131322e302f32312d3231203d3e20323632383132.roa (raw, json)
Hash identifier:          EoB+O2ZHHNMceEz44iwlhbMtCEd9AzUcM6H2F9Zn3So=
Subject key identifier:   DE:1F:7F:34:13:0C:45:2C:E5:8B:43:4B:08:13:21:D4:81:27:BC:D4
Certificate issuer:       /CN=A8C40D851EE06F7454DE9587BD8710CA3EAB8536
Certificate serial:       5FAB748B7F6C0F4F0A192196EC5DB9FF7E3B6435
Authority key identifier: A8:C4:0D:85:1E:E0:6F:74:54:DE:95:87:BD:87:10:CA:3E:AB:85:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/3230302e36362e3131322e302f32312d3231203d3e20323632383132.roa
Signing time:             Mon 12 Aug 2024 14:41:03 +0000
ROA not before:           Mon 12 Aug 2024 14:36:03 +0000
ROA not after:            Mon 11 Aug 2025 14:41:03 +0000
asID:                     262812
IP address blocks:        200.66.112.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.crl
                          rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 04:58:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:ab:74:8b:7f:6c:0f:4f:0a:19:21:96:ec:5d:b9:ff:7e:3b:64:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8C40D851EE06F7454DE9587BD8710CA3EAB8536
        Validity
            Not Before: Aug 12 14:36:03 2024 GMT
            Not After : Aug 11 14:41:03 2025 GMT
        Subject: CN=DE1F7F34130C452CE58B434B081321D48127BCD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:29:38:29:f3:29:f7:0f:be:88:40:cc:56:45:
                    7e:f0:7e:00:48:7b:15:cf:0d:45:30:5c:09:02:08:
                    3d:d7:bf:8f:39:8a:f6:20:d9:53:d6:e8:07:27:e7:
                    37:82:c1:9f:a1:7e:f9:d2:6a:e9:1a:42:b5:2b:a9:
                    9b:3e:4d:6d:12:8a:17:07:6e:0c:70:51:0d:0e:52:
                    03:ef:b6:0b:8f:87:f4:79:8c:7b:5b:e8:68:30:8e:
                    ce:48:23:6a:32:8a:77:4a:a8:cf:23:87:d1:61:e3:
                    7d:86:07:c7:5d:39:89:5f:45:9a:77:86:3e:f4:7e:
                    58:19:bf:b6:8b:b1:c1:0e:97:6d:41:77:c9:4d:4e:
                    6a:cb:f7:2c:98:ad:90:69:4b:b1:92:96:94:0f:7b:
                    e1:e0:25:ef:91:70:3b:6d:bf:26:23:2f:d8:2b:c4:
                    88:7c:65:ec:51:bc:c6:7b:a4:8b:f5:29:64:7d:a4:
                    c6:a2:ab:21:ef:8f:8e:37:fe:bf:86:2a:92:90:85:
                    e4:06:40:a5:cd:1e:11:86:43:9a:55:b0:d2:30:d1:
                    fc:ac:a6:3c:aa:5f:f7:a5:ca:0e:f7:a5:c9:28:75:
                    b1:a9:31:ee:68:2c:dd:6d:de:fa:26:54:e1:12:c9:
                    67:a0:e7:1b:28:89:39:3e:4c:4d:6c:2f:a8:dc:03:
                    4c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:1F:7F:34:13:0C:45:2C:E5:8B:43:4B:08:13:21:D4:81:27:BC:D4
            X509v3 Authority Key Identifier:
                keyid:A8:C4:0D:85:1E:E0:6F:74:54:DE:95:87:BD:87:10:CA:3E:AB:85:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/3230302e36362e3131322e302f32312d3231203d3e20323632383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.66.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         08:f0:38:9f:63:e9:37:22:f6:a4:e5:2f:86:6b:83:71:5e:17:
         3c:f8:be:e4:c5:44:90:9d:05:95:74:77:24:a9:04:ea:86:6b:
         fd:67:89:d5:1b:ae:61:84:7d:8f:d9:2d:0d:09:2d:38:fc:09:
         43:3d:90:0b:be:70:95:c1:60:75:aa:08:1f:a3:ce:ba:30:0d:
         cf:e8:b1:25:6c:74:9c:32:99:16:6b:26:5c:a3:42:ac:65:77:
         25:c4:1f:c4:5c:b5:3e:3e:e8:24:72:15:ec:d9:c9:b4:81:3a:
         1b:68:3d:87:f7:24:96:1c:ea:5b:82:4a:65:ac:8b:03:de:35:
         67:0e:4f:cd:de:60:52:1e:4c:c6:4f:79:df:29:c5:43:09:82:
         90:9c:b3:7f:41:98:d3:cd:9f:6f:d4:9d:f5:76:28:df:a1:e1:
         3d:5b:41:a8:52:9b:f8:ff:1a:3d:58:a5:5d:7e:33:fe:77:ed:
         d8:68:5e:5c:d2:f1:e4:3e:85:b6:99:c3:10:77:28:49:65:d7:
         37:28:6f:65:51:40:22:af:ea:2a:4d:ec:d2:83:b8:60:4b:8c:
         92:ba:a9:04:98:3d:a7:17:27:1e:70:25:a2:a7:44:03:73:97:
         35:a2:83:6a:11:d5:7e:96:a8:92:43:37:60:2c:c2:53:e5:9b:
         6b:da:58:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:35:50 2024 by rpki-client on console-fra.rpki-client.org