Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/3230312e3231392e3235302e302f32342d3234203d3e203631393531.roa
File:                     3230312e3231392e3235302e302f32342d3234203d3e203631393531.roa (raw, json)
Hash identifier:          78e8I9bsUzadrWzPMD3qoXqjpNsekzz1jLFhNVJQ+EM=
Subject key identifier:   A0:87:2E:1B:25:2A:D0:AB:0B:32:A3:95:A3:5E:E1:AF:77:67:71:AB
Certificate issuer:       /CN=D3986442AB630E9BA4980A2F9EF2013033EF9C17
Certificate serial:       46A858D85433D1AE4669835FE0B6F2D0177EBA56
Authority key identifier: D3:98:64:42:AB:63:0E:9B:A4:98:0A:2F:9E:F2:01:30:33:EF:9C:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/3230312e3231392e3235302e302f32342d3234203d3e203631393531.roa
Signing time:             Wed 03 Apr 2024 21:27:56 +0000
ROA not before:           Wed 03 Apr 2024 21:22:56 +0000
ROA not after:            Wed 02 Apr 2025 21:27:56 +0000
asID:                     61951
IP address blocks:        201.219.250.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.crl
                          rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:18:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:a8:58:d8:54:33:d1:ae:46:69:83:5f:e0:b6:f2:d0:17:7e:ba:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3986442AB630E9BA4980A2F9EF2013033EF9C17
        Validity
            Not Before: Apr  3 21:22:56 2024 GMT
            Not After : Apr  2 21:27:56 2025 GMT
        Subject: CN=A0872E1B252AD0AB0B32A395A35EE1AF776771AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:32:cf:97:ca:be:1c:81:b1:df:05:bc:3b:ee:
                    80:29:c0:34:74:e4:75:17:85:48:90:f5:b9:8f:64:
                    82:a5:7b:55:bc:c1:14:35:d3:d0:9f:9d:05:e2:e4:
                    30:33:60:7e:3e:96:0f:ac:c9:38:80:8f:07:11:c6:
                    27:ee:4e:e6:f0:20:34:96:d1:ca:e1:bf:db:87:30:
                    70:ef:60:60:f2:54:27:22:14:27:47:92:67:76:2d:
                    1e:5d:2a:21:ad:13:90:09:8e:2b:2a:2e:9b:2f:db:
                    ee:84:d2:a6:83:1e:6b:95:21:bb:f1:bb:c4:5d:0d:
                    9b:95:5c:bf:33:b5:ec:2c:09:9d:fd:63:e5:2f:68:
                    25:4a:fe:03:f5:61:d6:b7:e8:92:b7:44:1f:62:6b:
                    55:fb:7f:4b:f9:bc:f1:d5:24:94:7a:27:ea:eb:e7:
                    1e:8b:26:fc:7c:ad:94:0f:d6:c4:33:c9:67:6b:10:
                    d5:69:ae:89:ee:e1:c8:5d:96:06:15:75:21:07:6f:
                    e6:16:2f:e0:44:48:16:c4:49:53:90:62:e6:82:f0:
                    61:0c:2e:bd:a6:24:6d:6f:77:6a:18:4b:4c:1c:73:
                    8e:49:32:ee:e0:cf:38:bc:bf:52:ef:8c:2a:b4:bb:
                    3d:60:f2:f3:1b:8c:08:70:21:6c:c9:08:bf:c8:0b:
                    10:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:87:2E:1B:25:2A:D0:AB:0B:32:A3:95:A3:5E:E1:AF:77:67:71:AB
            X509v3 Authority Key Identifier:
                keyid:D3:98:64:42:AB:63:0E:9B:A4:98:0A:2F:9E:F2:01:30:33:EF:9C:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/3230312e3231392e3235302e302f32342d3234203d3e203631393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:d4:96:35:7d:d6:92:b9:44:c0:9b:1b:85:d6:e0:02:1d:42:
         5a:d1:a4:a3:de:35:88:1d:36:d2:e3:4f:78:ef:7e:09:72:af:
         36:f2:59:ab:74:ca:2f:61:84:b6:b1:9d:13:37:fc:f3:d6:3b:
         fe:a5:7e:5f:3e:3d:65:67:28:2a:e5:e9:22:9d:38:da:cf:fd:
         ed:ee:ad:79:87:88:4d:ce:80:fe:8a:42:6c:9d:fd:29:22:91:
         e6:b3:9a:c4:3c:26:e1:7f:a0:d4:38:9c:16:71:cb:c9:77:97:
         7d:60:ea:9d:b4:02:e0:a6:da:33:c8:85:8e:db:be:c3:2c:1a:
         f9:89:12:c2:b9:01:69:d3:27:a6:5e:d4:df:d2:80:af:e4:4e:
         fe:5d:2c:50:2e:4a:77:09:ea:f1:66:de:ff:98:f9:d3:e3:5d:
         c1:74:fe:78:9f:4d:30:02:5d:23:41:57:0c:3e:90:44:86:d8:
         17:83:62:d2:1c:b3:23:7d:18:1e:07:bc:3a:f0:65:b2:5e:3c:
         7a:25:39:7f:60:eb:29:58:4c:fd:49:31:54:72:ee:82:5d:24:
         15:ed:e3:74:9a:7c:02:5b:d2:ba:d4:da:12:fe:25:57:9c:3c:
         93:4a:7a:f9:07:78:a7:53:83:52:45:4c:f7:20:1a:36:00:1a:
         de:2f:85:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:06 2024 by rpki-client on console-ams.rpki-client.org