Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/3230312e35352e3139362e302f32322d3234203d3e203631373932.roa
File:                     3230312e35352e3139362e302f32322d3234203d3e203631373932.roa (raw, json)
Hash identifier:          ae5LnXSH38cWn6k4w+c3FW4QqL2Mob8YSu93L4Qfgko=
Subject key identifier:   9F:B2:AB:B3:5C:BF:70:B3:F6:89:34:7D:82:5C:D8:7E:07:84:D4:47
Certificate issuer:       /CN=83F0276570C6F4420470E10FE5542F0F878F7D89
Certificate serial:       506C83C87E576E78051BE8DEFBB68D3F44D9AC
Authority key identifier: 83:F0:27:65:70:C6:F4:42:04:70:E1:0F:E5:54:2F:0F:87:8F:7D:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83F0276570C6F4420470E10FE5542F0F878F7D89.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/3230312e35352e3139362e302f32322d3234203d3e203631373932.roa
Signing time:             Wed 05 Jun 2024 19:06:49 +0000
ROA not before:           Wed 05 Jun 2024 19:01:49 +0000
ROA not after:            Wed 04 Jun 2025 19:06:49 +0000
asID:                     61792
IP address blocks:        201.55.196.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/83F0276570C6F4420470E10FE5542F0F878F7D89.crl
                          rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/83F0276570C6F4420470E10FE5542F0F878F7D89.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83F0276570C6F4420470E10FE5542F0F878F7D89.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 00:22:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:6c:83:c8:7e:57:6e:78:05:1b:e8:de:fb:b6:8d:3f:44:d9:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83F0276570C6F4420470E10FE5542F0F878F7D89
        Validity
            Not Before: Jun  5 19:01:49 2024 GMT
            Not After : Jun  4 19:06:49 2025 GMT
        Subject: CN=9FB2ABB35CBF70B3F689347D825CD87E0784D447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:47:a4:b9:c0:6a:8f:a9:99:7c:c5:7c:b6:af:
                    a1:78:01:e9:b1:ce:11:63:22:ed:90:0d:c3:e4:2e:
                    42:51:1f:28:d4:78:84:1d:69:36:b6:c1:67:3e:d0:
                    e7:db:a0:70:25:2b:0f:13:bc:df:20:7d:97:66:25:
                    d4:27:e3:ce:ee:9b:de:0a:18:a5:d7:70:e6:d7:6c:
                    35:34:8e:e3:e2:91:bf:3f:d8:cb:d3:a0:52:42:2b:
                    b7:ca:a2:bf:2d:92:88:35:43:cd:62:e2:65:95:9e:
                    87:79:b2:be:8c:3b:61:2f:83:0e:48:4b:54:a9:b2:
                    f9:30:e2:a6:ff:e2:55:9d:90:a3:99:e1:6b:aa:5a:
                    eb:20:83:9a:7e:4c:97:19:57:2e:09:e9:02:56:e4:
                    b8:30:8b:36:d3:5c:fe:05:09:e0:1d:d5:ec:b0:11:
                    be:5c:81:c6:04:8a:d3:c0:c7:b5:35:52:b1:11:89:
                    3a:6e:86:5c:f8:f0:14:30:f0:35:ba:87:d4:c1:34:
                    80:e0:c7:e2:cd:c4:fd:bf:1d:34:01:93:97:1d:fd:
                    4a:22:aa:49:ae:b5:13:b5:cb:50:ce:fe:0b:ca:a2:
                    92:98:94:68:67:17:ef:2d:31:1e:bb:b9:a7:06:6a:
                    72:95:40:57:7b:c6:13:7b:90:a6:2e:41:5a:bb:b3:
                    0f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B2:AB:B3:5C:BF:70:B3:F6:89:34:7D:82:5C:D8:7E:07:84:D4:47
            X509v3 Authority Key Identifier:
                keyid:83:F0:27:65:70:C6:F4:42:04:70:E1:0F:E5:54:2F:0F:87:8F:7D:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/83F0276570C6F4420470E10FE5542F0F878F7D89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83F0276570C6F4420470E10FE5542F0F878F7D89.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/3230312e35352e3139362e302f32322d3234203d3e203631373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.55.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:ed:85:c3:b4:0a:ca:04:5c:c3:be:45:89:38:5d:a3:c7:0e:
         a8:3b:9d:de:28:96:83:7b:a5:15:a1:1d:ab:aa:30:e2:c4:7c:
         10:b3:0f:fa:ea:46:16:1b:08:d5:e7:3a:d0:25:75:79:33:67:
         1d:24:8f:ec:1e:56:da:4a:f8:9b:c1:91:28:b6:cd:39:5d:7b:
         10:52:df:22:fa:8d:bc:c2:9b:23:5d:9a:30:45:48:40:77:5b:
         bc:db:82:c6:a5:de:72:49:d2:0e:b8:3b:20:42:c6:56:26:cc:
         6f:c0:dd:fb:c3:c9:a5:2f:e6:35:74:59:8f:28:b7:cb:e5:e8:
         a1:2b:2c:26:78:91:03:3a:57:16:12:0c:65:45:6c:b9:2e:f2:
         22:1e:e5:6d:1f:d2:bc:00:4a:80:c0:ad:df:7f:5d:cc:99:0d:
         4b:94:37:b3:f0:0f:8a:29:a2:8e:e0:7a:0f:fa:27:34:4c:b4:
         e5:ee:33:db:88:12:81:92:5f:ad:a3:be:28:a3:cf:c3:a5:18:
         82:fc:67:69:67:0f:ab:3c:5e:0a:5d:95:b1:89:4f:18:8d:54:
         6d:5b:72:fe:9f:3c:23:37:a3:f8:5d:32:53:84:64:f4:d1:57:
         a4:41:5f:b8:92:76:a3:cb:09:d3:50:a7:02:54:71:cc:3c:a0:
         4d:5a:35:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:57 2024 by rpki-client on console-fra.rpki-client.org