Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/3230302e36362e3132362e302f32342d3234203d3e20323632383132.roa
File:                     3230302e36362e3132362e302f32342d3234203d3e20323632383132.roa (raw, json)
Hash identifier:          nHlYb+FA2bRjsSrRhg6HfvtBRpFjkxtE9aQ3tBgzu+I=
Subject key identifier:   8F:E7:EE:FF:72:93:AF:A2:D6:C0:4B:5D:B1:53:89:72:38:12:03:04
Certificate issuer:       /CN=A8C40D851EE06F7454DE9587BD8710CA3EAB8536
Certificate serial:       3366B82314204BC33E28BAA7AEDD554E4788AB95
Authority key identifier: A8:C4:0D:85:1E:E0:6F:74:54:DE:95:87:BD:87:10:CA:3E:AB:85:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/3230302e36362e3132362e302f32342d3234203d3e20323632383132.roa
Signing time:             Mon 12 Aug 2024 14:40:52 +0000
ROA not before:           Mon 12 Aug 2024 14:35:52 +0000
ROA not after:            Mon 11 Aug 2025 14:40:52 +0000
asID:                     262812
IP address blocks:        200.66.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.crl
                          rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 01:46:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:66:b8:23:14:20:4b:c3:3e:28:ba:a7:ae:dd:55:4e:47:88:ab:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8C40D851EE06F7454DE9587BD8710CA3EAB8536
        Validity
            Not Before: Aug 12 14:35:52 2024 GMT
            Not After : Aug 11 14:40:52 2025 GMT
        Subject: CN=8FE7EEFF7293AFA2D6C04B5DB153897238120304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:56:b1:09:6d:14:a3:19:c0:72:a0:fb:13:e6:
                    b5:97:f8:53:40:d6:17:ec:2d:5f:af:fe:2b:01:90:
                    32:29:db:8b:fa:ee:48:03:1e:4c:d8:3e:3c:d4:53:
                    19:55:a1:96:24:f2:0a:97:90:cb:71:e0:73:b1:cd:
                    30:5c:e5:81:35:b3:b7:22:d4:e6:a0:d3:34:e3:2e:
                    2b:f4:cb:7f:3f:97:92:58:53:63:ce:7d:28:4b:38:
                    b6:d4:d0:24:58:8f:c3:2d:4c:0f:34:7f:e9:5f:5b:
                    94:cb:78:02:ab:da:28:6e:be:28:21:cb:6d:e8:d1:
                    1e:58:1a:5d:5d:75:0b:41:33:a9:47:60:4d:fd:e6:
                    fe:e2:54:fb:bf:67:f8:ba:44:9c:48:f2:44:32:d5:
                    62:9a:e0:d5:84:ee:0e:68:1d:1d:51:77:83:e2:ca:
                    ac:b0:d8:4d:0d:89:31:9b:bc:37:25:2e:aa:ce:d9:
                    ab:28:21:c4:14:45:b5:8c:e8:ea:e0:a1:8e:4b:c3:
                    e7:f1:7f:81:16:aa:c9:77:00:c9:f9:93:e6:d5:b0:
                    b5:85:02:94:91:b2:d1:cf:30:eb:15:4f:bc:05:14:
                    bd:dc:28:a9:46:d9:38:6c:96:25:21:d2:8d:b8:e3:
                    1c:ff:39:c3:3c:7d:1a:c7:73:e8:db:35:32:6d:f8:
                    86:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:E7:EE:FF:72:93:AF:A2:D6:C0:4B:5D:B1:53:89:72:38:12:03:04
            X509v3 Authority Key Identifier:
                keyid:A8:C4:0D:85:1E:E0:6F:74:54:DE:95:87:BD:87:10:CA:3E:AB:85:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/3230302e36362e3132362e302f32342d3234203d3e20323632383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.66.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:80:7f:47:d9:c6:0a:0b:d8:8b:9b:5c:78:71:9c:58:fb:7e:
         be:4b:ef:84:f1:86:b5:fc:88:4d:27:11:8f:68:c2:96:1e:ff:
         f7:9b:a7:e9:bb:9e:9c:83:8b:33:24:95:63:42:c5:17:99:15:
         65:b1:1d:1f:31:b2:af:9f:3d:88:ce:13:30:b2:c7:f9:f1:06:
         23:c5:1e:9c:84:97:21:3b:79:d5:de:83:c1:83:d2:9d:4b:7a:
         8c:08:ad:13:7c:cb:d7:c2:f6:6f:89:24:26:cb:fb:83:f5:a6:
         6a:02:b5:42:80:3c:88:0e:ae:dc:36:4a:3b:29:c5:4d:0a:2b:
         46:a8:f3:b8:61:ea:8f:67:d3:71:4e:fd:dd:c4:3b:ab:e6:52:
         32:80:d4:69:cc:ec:c1:75:eb:83:ad:fb:cd:3a:2e:26:57:ad:
         dc:7f:b5:58:bf:72:60:e0:22:54:9e:2e:70:cc:18:91:5e:a3:
         28:30:76:e7:d1:e1:67:4e:36:26:91:a6:25:53:15:7f:27:c6:
         e5:90:f7:3b:85:91:27:04:2d:23:cf:db:76:af:8e:c1:8d:f1:
         3c:3d:0c:99:a5:41:f5:e5:04:7d:40:f3:e6:04:b8:a0:00:df:
         d5:f4:e8:d8:14:a5:6e:cb:0f:3d:bd:cd:57:13:f4:c6:8e:1a:
         82:b9:f2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:09 2025 by rpki-client