Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6U2kjjrugBhesWJevV2cpkik8XCRhtvtri38riAieLU/0/3230312e3134302e3235322e302f32322d3232203d3e203631363331.roa
File:                     3230312e3134302e3235322e302f32322d3232203d3e203631363331.roa (raw, json)
Hash identifier:          zD8g3wK9G/oAy/GjhCI5R5THBuHLH1Cs2of27RdzZ+s=
Subject key identifier:   0C:2E:33:DA:6B:00:3E:2D:84:0C:4D:02:32:B9:2A:0B:DE:11:54:E1
Certificate issuer:       /CN=5A2848029237EDE072BF0D27156F239E1FEBEF52
Certificate serial:       6E2AA038161B8F88E119F89BF578CCD3ABEAAA4E
Authority key identifier: 5A:28:48:02:92:37:ED:E0:72:BF:0D:27:15:6F:23:9E:1F:EB:EF:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A2848029237EDE072BF0D27156F239E1FEBEF52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6U2kjjrugBhesWJevV2cpkik8XCRhtvtri38riAieLU/0/3230312e3134302e3235322e302f32322d3232203d3e203631363331.roa
Signing time:             Tue 19 Nov 2024 20:04:19 +0000
ROA not before:           Tue 19 Nov 2024 19:59:19 +0000
ROA not after:            Tue 18 Nov 2025 20:04:19 +0000
asID:                     61631
IP address blocks:        201.140.252.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D6U2kjjrugBhesWJevV2cpkik8XCRhtvtri38riAieLU/0/5A2848029237EDE072BF0D27156F239E1FEBEF52.crl
                          rsync://rpki-repo.registro.br/repo/D6U2kjjrugBhesWJevV2cpkik8XCRhtvtri38riAieLU/0/5A2848029237EDE072BF0D27156F239E1FEBEF52.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A2848029237EDE072BF0D27156F239E1FEBEF52.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:2a:a0:38:16:1b:8f:88:e1:19:f8:9b:f5:78:cc:d3:ab:ea:aa:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A2848029237EDE072BF0D27156F239E1FEBEF52
        Validity
            Not Before: Nov 19 19:59:19 2024 GMT
            Not After : Nov 18 20:04:19 2025 GMT
        Subject: CN=0C2E33DA6B003E2D840C4D0232B92A0BDE1154E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:91:85:17:5a:8d:ff:a5:9e:c3:b7:f3:cd:ee:
                    2c:03:b4:82:74:45:9f:53:7d:67:c6:9e:f0:04:41:
                    4c:13:da:23:8f:77:45:22:0d:67:cd:98:d1:a3:9e:
                    86:cb:9d:fb:d9:41:59:b9:52:e1:b0:41:af:95:d3:
                    6c:45:35:cd:31:86:ef:20:6f:71:b6:fa:dd:b8:18:
                    42:95:a1:c8:49:8e:48:c6:6b:bc:9c:63:ee:a6:70:
                    f7:29:03:2b:09:cf:cb:c6:d6:33:0d:c6:7e:65:ce:
                    d0:53:b8:e8:96:25:e8:24:c8:71:7d:5e:89:55:f2:
                    e9:9e:cb:bd:28:0b:60:c7:3c:3c:c8:0d:64:c3:32:
                    b4:0c:fa:99:2f:b4:98:f4:b4:44:59:e5:ac:91:99:
                    e9:e2:89:f5:8f:91:35:2c:1d:99:55:c6:ff:67:6b:
                    9d:49:7a:23:5d:1a:d9:2f:e7:d5:c3:62:f9:37:a2:
                    29:78:c8:a7:b7:88:f7:a7:ad:c5:ae:00:81:95:5e:
                    0c:17:64:05:cc:b5:45:88:ae:6d:49:23:b4:1e:ee:
                    73:97:56:20:64:0a:ae:9c:29:db:7e:f6:20:4b:26:
                    f4:59:60:f5:af:a7:af:67:1e:c5:a8:d8:a5:48:a5:
                    db:b4:c1:07:25:79:3d:5f:c9:13:03:3a:06:1d:80:
                    f5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:2E:33:DA:6B:00:3E:2D:84:0C:4D:02:32:B9:2A:0B:DE:11:54:E1
            X509v3 Authority Key Identifier:
                keyid:5A:28:48:02:92:37:ED:E0:72:BF:0D:27:15:6F:23:9E:1F:EB:EF:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6U2kjjrugBhesWJevV2cpkik8XCRhtvtri38riAieLU/0/5A2848029237EDE072BF0D27156F239E1FEBEF52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A2848029237EDE072BF0D27156F239E1FEBEF52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6U2kjjrugBhesWJevV2cpkik8XCRhtvtri38riAieLU/0/3230312e3134302e3235322e302f32322d3232203d3e203631363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.140.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:10:f1:3c:a5:24:cf:07:68:b7:a0:d7:8a:68:da:54:33:79:
         78:7d:4b:4f:17:07:e9:ad:90:f5:c2:6e:ff:66:a0:4e:78:21:
         7a:31:07:2f:ba:9b:09:23:39:a5:03:37:9b:dc:d8:d5:87:57:
         0a:ef:12:d9:e1:60:5d:41:5d:7e:67:2e:52:fc:66:05:42:bf:
         fe:84:b0:59:07:64:5d:c0:e5:e4:14:c3:d1:db:db:34:82:ab:
         b4:0b:8b:2d:c9:cd:6f:46:e2:eb:d1:e6:a7:d1:a3:52:5c:2d:
         26:b8:77:77:b3:ce:d7:f4:3b:e0:02:9f:48:f1:47:99:5b:2a:
         00:ee:f0:8d:bb:b8:12:a4:24:a6:1b:64:6b:92:a9:f8:d3:4f:
         46:40:37:07:97:c4:42:c6:78:37:6c:58:33:63:19:d3:f5:ec:
         1f:07:22:59:bd:39:c2:f7:08:c7:47:0a:db:54:86:05:1e:d6:
         b2:5c:c5:ea:1b:e8:92:73:7e:a1:00:45:e4:b8:c5:b1:42:1a:
         3b:ad:b1:82:b6:3c:2c:8a:6f:b4:fc:ca:e0:4a:0c:7c:8f:e6:
         71:77:1a:cb:70:d8:c0:a1:63:8e:1b:77:e9:ff:b0:88:7b:b9:
         2d:d3:8c:a4:34:db:c0:08:97:7f:bf:9d:bb:60:64:71:2c:3a:
         cb:af:00:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:40 2024 by rpki-client on console-ams.rpki-client.org