Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/1/3230312e3134382e3231362e302f32322d3234203d3e20323632393532.roa
File:                     3230312e3134382e3231362e302f32322d3234203d3e20323632393532.roa (raw, json)
Hash identifier:          MtfN+oSyPUSxKtFfHq1G0Ti4k5ukAkHR1CcWl2Yxpd8=
Subject key identifier:   EC:2D:87:58:D9:24:26:D6:66:BB:F7:AE:E3:40:34:57:80:F9:88:B9
Certificate issuer:       /CN=64E4B884F01FC9DC0000E111AE283F356C137547
Certificate serial:       5868FA892860FE7EE19858533E64BC747B83C16A
Authority key identifier: 64:E4:B8:84:F0:1F:C9:DC:00:00:E1:11:AE:28:3F:35:6C:13:75:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64E4B884F01FC9DC0000E111AE283F356C137547.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/1/3230312e3134382e3231362e302f32322d3234203d3e20323632393532.roa
Signing time:             Wed 03 Apr 2024 18:31:23 +0000
ROA not before:           Wed 03 Apr 2024 18:26:23 +0000
ROA not after:            Wed 02 Apr 2025 18:31:23 +0000
asID:                     262952
IP address blocks:        201.148.216.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/1/64E4B884F01FC9DC0000E111AE283F356C137547.crl
                          rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/1/64E4B884F01FC9DC0000E111AE283F356C137547.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64E4B884F01FC9DC0000E111AE283F356C137547.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 23:26:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:68:fa:89:28:60:fe:7e:e1:98:58:53:3e:64:bc:74:7b:83:c1:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64E4B884F01FC9DC0000E111AE283F356C137547
        Validity
            Not Before: Apr  3 18:26:23 2024 GMT
            Not After : Apr  2 18:31:23 2025 GMT
        Subject: CN=EC2D8758D92426D666BBF7AEE340345780F988B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e2:00:1b:06:30:76:57:b4:ae:21:73:59:06:
                    3a:46:e7:22:68:8f:03:cd:de:2d:ae:8b:cd:84:11:
                    d9:87:0a:16:87:26:39:98:19:ea:2e:4e:d1:c0:8b:
                    61:8b:27:cc:1b:6c:47:db:ce:e4:e7:54:71:7f:70:
                    0f:0f:f8:95:e2:05:0e:0a:e6:f1:11:ac:54:18:d7:
                    c1:6d:c0:fc:ef:95:c3:57:f2:81:a3:80:bc:62:45:
                    4d:66:11:39:fd:81:95:d6:75:3a:0e:24:82:0d:43:
                    08:c8:74:95:51:65:fa:a9:f4:58:e4:7a:2e:61:06:
                    68:f3:c5:c8:ad:3c:2d:26:d8:6b:9a:e9:f9:a8:6e:
                    c9:54:4e:e3:17:e1:e8:f9:0f:5d:16:64:fc:8a:05:
                    c6:8a:0f:01:ae:4a:6b:b4:ff:d7:7c:47:a8:46:61:
                    88:5b:ed:98:a7:cc:3d:48:c1:a4:ec:a5:80:f7:f0:
                    2d:ae:72:30:70:7c:19:9c:8f:18:e4:85:68:a6:2c:
                    bd:99:3f:01:b5:4a:c6:0b:74:f7:df:5f:15:4f:d5:
                    ae:40:79:39:fb:ea:b9:ec:e0:d1:66:89:6b:53:40:
                    36:31:50:69:36:a2:8a:f1:12:ea:96:f8:a0:55:07:
                    ec:3a:57:35:a1:ea:87:2b:36:cf:3e:7c:61:59:5b:
                    21:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:2D:87:58:D9:24:26:D6:66:BB:F7:AE:E3:40:34:57:80:F9:88:B9
            X509v3 Authority Key Identifier:
                keyid:64:E4:B8:84:F0:1F:C9:DC:00:00:E1:11:AE:28:3F:35:6C:13:75:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/1/64E4B884F01FC9DC0000E111AE283F356C137547.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64E4B884F01FC9DC0000E111AE283F356C137547.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/1/3230312e3134382e3231362e302f32322d3234203d3e20323632393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.148.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:c2:22:d6:f9:c1:05:5c:6c:2f:92:35:10:b3:2c:6e:df:10:
         f5:2f:98:32:2f:4f:57:0a:56:f9:9a:e1:63:fe:c3:ba:22:3e:
         a4:72:bb:9e:04:33:cd:aa:cb:45:04:0c:32:6d:f8:96:0e:01:
         5f:83:04:0e:02:f0:ba:1b:3e:12:40:49:83:cd:59:5e:ef:12:
         c3:2f:2f:9d:29:6b:15:2e:b5:2f:49:73:3e:19:b7:0f:43:38:
         1a:60:85:0d:16:2e:44:8c:40:a4:ae:c9:b8:4e:73:4a:0e:b4:
         4a:38:c6:db:ee:8e:c0:96:89:74:5c:7a:e9:5d:cb:8b:42:8a:
         c0:cf:9d:56:df:d2:88:63:42:ef:10:dc:ec:ac:0b:f7:0b:6a:
         42:c0:97:a3:56:27:7f:8a:bf:76:97:56:82:eb:50:cb:45:e7:
         5f:18:1d:6e:77:22:99:da:ed:4a:61:9b:b8:ff:af:e8:a5:be:
         5a:d4:39:52:c0:4a:dc:87:4c:e8:1f:e3:2b:b4:40:1d:77:1f:
         b8:2b:77:2a:22:78:7b:0b:48:54:93:c8:bf:83:22:8a:0c:24:
         12:fb:38:fe:51:f8:2c:ac:9d:8d:33:1c:67:cd:a6:4e:a9:f9:
         ee:36:e9:e3:5c:54:7c:aa:6d:be:02:7b:65:1f:9d:e1:02:b0:
         78:34:ed:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 22:39:43 2024 by rpki-client on console-fra.rpki-client.org