Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/3230312e3231392e3235312e302f32342d3234203d3e203631393531.roa
File:                     3230312e3231392e3235312e302f32342d3234203d3e203631393531.roa (raw, json)
Hash identifier:          x4Y/tBpTSlPuTQBnqeFE5MoOemaX81tqscZvDJCmNP8=
Subject key identifier:   22:CA:05:5A:96:4B:CB:F9:0F:EC:71:23:4C:A0:D0:CC:D3:C9:31:B2
Certificate issuer:       /CN=D3986442AB630E9BA4980A2F9EF2013033EF9C17
Certificate serial:       01D0285C88F7A5477D81A0F99E7AEF10010E7A63
Authority key identifier: D3:98:64:42:AB:63:0E:9B:A4:98:0A:2F:9E:F2:01:30:33:EF:9C:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/3230312e3231392e3235312e302f32342d3234203d3e203631393531.roa
Signing time:             Wed 03 Apr 2024 21:27:55 +0000
ROA not before:           Wed 03 Apr 2024 21:22:55 +0000
ROA not after:            Wed 02 Apr 2025 21:27:55 +0000
asID:                     61951
IP address blocks:        201.219.251.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.crl
                          rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:18:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:d0:28:5c:88:f7:a5:47:7d:81:a0:f9:9e:7a:ef:10:01:0e:7a:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3986442AB630E9BA4980A2F9EF2013033EF9C17
        Validity
            Not Before: Apr  3 21:22:55 2024 GMT
            Not After : Apr  2 21:27:55 2025 GMT
        Subject: CN=22CA055A964BCBF90FEC71234CA0D0CCD3C931B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:6a:14:e5:78:e6:a4:79:af:04:8d:62:35:e2:
                    55:a0:fd:45:b1:26:7e:bc:38:04:49:60:36:08:cb:
                    31:8b:05:1e:c5:ed:58:20:b0:73:cd:fa:7f:aa:5a:
                    5c:fb:8a:09:63:21:5e:1c:58:7c:ba:f6:ca:b5:21:
                    13:53:6a:c6:99:77:cf:99:15:95:e0:2e:17:b0:e1:
                    ab:4b:08:55:f5:79:f0:01:ba:a7:9f:0d:de:c7:74:
                    f1:63:43:5f:a0:57:7b:0c:0a:8d:b7:ab:2f:d1:8c:
                    8d:b9:86:bb:2c:0a:01:29:44:7f:a6:5a:75:95:3a:
                    41:59:97:2a:5f:33:f7:ee:b9:d0:d7:04:ac:6e:b1:
                    9f:cf:68:84:cb:0f:6f:d6:c1:9d:3b:53:18:e7:ed:
                    25:ee:91:a1:09:be:71:c6:77:9b:76:be:33:b9:41:
                    24:46:b7:8a:d0:9b:34:eb:3f:70:37:a1:ce:89:88:
                    40:68:0a:c1:ef:b3:85:8b:78:76:d1:f2:21:50:64:
                    99:9a:70:4e:e0:67:24:a3:91:25:5d:56:d1:e7:70:
                    f0:64:53:e7:57:78:b7:70:11:86:b3:49:76:f2:76:
                    4b:3d:5f:29:7a:43:85:a9:92:ad:d0:30:00:6d:11:
                    5d:6f:63:64:6b:ca:d1:e3:60:f2:48:ee:37:ea:0a:
                    5b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:CA:05:5A:96:4B:CB:F9:0F:EC:71:23:4C:A0:D0:CC:D3:C9:31:B2
            X509v3 Authority Key Identifier:
                keyid:D3:98:64:42:AB:63:0E:9B:A4:98:0A:2F:9E:F2:01:30:33:EF:9C:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/3230312e3231392e3235312e302f32342d3234203d3e203631393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:4e:04:df:e5:7c:71:db:c3:f6:44:51:25:b3:bb:3f:ef:28:
         4c:24:a0:d4:31:8c:6e:bd:14:b0:2d:8c:85:fa:7a:75:c9:fc:
         ec:20:a4:d5:1d:87:88:f2:84:46:4b:74:64:35:38:aa:b6:27:
         41:7d:67:61:94:5c:17:32:f9:87:81:a2:a9:10:db:1d:b4:e0:
         8f:14:e7:04:e5:c5:85:ed:67:d2:86:b8:05:5c:c4:4f:28:fb:
         ac:46:fe:78:b9:84:12:84:fa:db:42:66:7d:1f:f4:38:6c:02:
         ea:1a:90:1c:55:a6:fd:6b:42:d7:00:21:09:7c:20:72:bf:e3:
         8c:c0:fb:6b:d3:8b:ef:db:9a:d8:d7:27:54:3d:ff:ee:5a:a8:
         1c:f4:cf:34:6e:d8:c6:5d:50:c6:71:8d:84:61:aa:79:91:08:
         aa:23:ec:d0:f1:d3:a9:d2:f8:cd:90:50:40:47:d8:1a:5b:ca:
         f4:c7:9f:d1:b1:78:33:13:f5:86:bd:db:db:fe:8e:c0:de:41:
         6b:70:95:3c:1b:c7:0e:87:81:71:e9:5d:d6:ea:3b:3f:ba:f7:
         85:79:eb:96:eb:dd:14:80:b5:b5:a0:66:2e:d4:79:b6:01:d1:
         6c:b5:66:58:e1:9b:e7:3f:20:bf:6a:c2:83:07:f0:0a:73:21:
         a9:a5:17:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:06 2024 by rpki-client on console-ams.rpki-client.org