Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/1/3230302e3233382e302e302f31382d3138203d3e2032373136.roa
File:                     3230302e3233382e302e302f31382d3138203d3e2032373136.roa (raw, json)
Hash identifier:          1W89549rmIya61PxcBeTlOJ1Wa+FthGu6bvw+0DRvU4=
Subject key identifier:   0B:42:31:98:1B:27:7A:36:19:7A:96:79:FD:6E:35:17:41:76:66:CA
Certificate issuer:       /CN=FE00A0246E047910F52B97F063352EE5D22A71CC
Certificate serial:       0FD483B8A0C3BDBEFB7C934191F665213A155D78
Authority key identifier: FE:00:A0:24:6E:04:79:10:F5:2B:97:F0:63:35:2E:E5:D2:2A:71:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE00A0246E047910F52B97F063352EE5D22A71CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/1/3230302e3233382e302e302f31382d3138203d3e2032373136.roa
Signing time:             Wed 03 Apr 2024 18:31:21 +0000
ROA not before:           Wed 03 Apr 2024 18:26:21 +0000
ROA not after:            Wed 02 Apr 2025 18:31:21 +0000
asID:                     2716
IP address blocks:        200.238.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/1/FE00A0246E047910F52B97F063352EE5D22A71CC.crl
                          rsync://rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/1/FE00A0246E047910F52B97F063352EE5D22A71CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE00A0246E047910F52B97F063352EE5D22A71CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:d4:83:b8:a0:c3:bd:be:fb:7c:93:41:91:f6:65:21:3a:15:5d:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE00A0246E047910F52B97F063352EE5D22A71CC
        Validity
            Not Before: Apr  3 18:26:21 2024 GMT
            Not After : Apr  2 18:31:21 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:20:83:5b:bd:fa:a5:cb:57:04:bf:38:e3:ce:
                    a3:d9:d7:c7:21:5d:d3:0e:af:8f:3b:66:02:b5:9c:
                    14:7e:52:06:81:80:22:9a:22:0e:fd:24:bc:f6:d4:
                    18:5f:8a:66:53:15:e8:9d:19:1b:04:98:8d:a2:9a:
                    04:93:ae:a4:0a:ec:23:0b:b1:0f:d2:eb:ed:b6:d0:
                    5b:cd:a7:33:68:06:5f:63:26:16:6a:8c:8a:a4:ad:
                    31:31:af:12:9a:ed:72:23:75:6f:f3:22:44:76:7c:
                    8c:ea:0d:69:3f:f4:f1:43:13:2b:62:b6:49:5e:5b:
                    9c:8d:d6:01:02:e8:f3:4a:24:a7:11:10:b9:6e:e0:
                    4d:66:63:37:5e:1d:74:c9:e9:cf:f5:3b:ee:4d:29:
                    51:ec:41:af:0b:97:2b:f5:61:b4:e5:f0:94:f1:1b:
                    b7:f4:d5:bb:5a:6b:4a:7a:20:1a:6c:22:be:5c:9f:
                    f9:21:32:85:e8:37:c9:41:60:c4:62:80:c2:e3:98:
                    33:75:a7:32:fc:ed:21:43:5f:a0:dc:eb:dd:fb:ca:
                    15:94:cd:5e:a3:b5:f4:71:cf:fc:a4:93:0d:5f:d7:
                    bf:e7:66:e7:34:ed:b0:77:42:f3:1f:45:a5:25:74:
                    2d:ab:c4:53:76:a1:db:0a:dd:7d:cb:ad:71:eb:05:
                    c4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:42:31:98:1B:27:7A:36:19:7A:96:79:FD:6E:35:17:41:76:66:CA
            X509v3 Authority Key Identifier:
                keyid:FE:00:A0:24:6E:04:79:10:F5:2B:97:F0:63:35:2E:E5:D2:2A:71:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/1/FE00A0246E047910F52B97F063352EE5D22A71CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE00A0246E047910F52B97F063352EE5D22A71CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/1/3230302e3233382e302e302f31382d3138203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.238.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         56:1f:7f:75:07:a1:c3:35:b4:76:85:0d:71:00:33:23:65:e5:
         41:89:44:d6:72:b3:6b:ee:44:ad:b0:34:bd:24:5a:9d:4d:8b:
         6c:fa:dc:1e:5d:d4:ee:ed:1f:f0:a3:c8:00:cc:bf:33:c3:b9:
         1c:3f:1a:cd:e7:be:23:04:b6:fe:86:b3:80:54:be:3a:eb:31:
         8c:b0:33:6a:f1:15:21:be:8b:0c:bc:e3:cc:d4:c9:74:d8:b7:
         ed:6c:86:ca:1f:af:55:4e:c5:bb:81:97:3c:54:1f:b4:09:1a:
         dd:f6:38:d0:e4:01:19:0f:e6:64:e9:53:2c:59:c4:8b:e1:bd:
         95:90:c8:fb:82:ea:7f:44:da:a9:5e:3d:95:e2:6a:44:8c:ee:
         6f:94:a0:44:03:13:e0:f0:cb:f2:1c:7f:6a:d9:ce:aa:e8:1f:
         c4:f7:16:68:d0:74:3f:0a:07:30:f4:51:00:c8:e9:d5:1a:7c:
         53:2f:bd:22:ce:3e:96:5e:42:b5:fe:5d:73:41:57:6f:3b:a5:
         81:0a:19:d2:fb:75:2f:3d:28:5c:8f:c1:39:c4:ec:16:20:08:
         83:e0:0c:0a:25:8f:81:59:40:f3:d0:c1:13:68:28:b5:30:a3:
         d4:1c:2c:8f:d0:d3:70:cd:1e:f1:32:d7:b1:5e:11:f8:2b:f9:
         29:37:ac:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:59 2024 by rpki-client on console-fra.rpki-client.org