Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/3230302e3134352e302e302f31362d3138203d3e203533313636.roa
File:                     3230302e3134352e302e302f31362d3138203d3e203533313636.roa (raw, json)
Hash identifier:          F0B2KbHZKYIWdbE5dntkTg60YzYP2Ar9xlOYZ3WEd6Y=
Subject key identifier:   1F:32:0E:78:0D:69:6F:4E:63:80:FA:7C:3A:94:87:1F:9C:9B:8F:7A
Certificate issuer:       /CN=725BCF70C08F4B2744E301141EF06513A96F28D6
Certificate serial:       59C32ADBF002B32BBA5B2CFF1E9BAC8578A037DF
Authority key identifier: 72:5B:CF:70:C0:8F:4B:27:44:E3:01:14:1E:F0:65:13:A9:6F:28:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/725BCF70C08F4B2744E301141EF06513A96F28D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/3230302e3134352e302e302f31362d3138203d3e203533313636.roa
Signing time:             Wed 03 Apr 2024 18:30:08 +0000
ROA not before:           Wed 03 Apr 2024 18:25:08 +0000
ROA not after:            Wed 02 Apr 2025 18:30:08 +0000
asID:                     53166
IP address blocks:        200.145.0.0/16 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/725BCF70C08F4B2744E301141EF06513A96F28D6.crl
                          rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/725BCF70C08F4B2744E301141EF06513A96F28D6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/725BCF70C08F4B2744E301141EF06513A96F28D6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 07:55:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:c3:2a:db:f0:02:b3:2b:ba:5b:2c:ff:1e:9b:ac:85:78:a0:37:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=725BCF70C08F4B2744E301141EF06513A96F28D6
        Validity
            Not Before: Apr  3 18:25:08 2024 GMT
            Not After : Apr  2 18:30:08 2025 GMT
        Subject: CN=1F320E780D696F4E6380FA7C3A94871F9C9B8F7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:aa:d3:f9:2b:9f:a9:cc:56:90:c8:db:93:f5:
                    e5:a1:aa:b7:42:db:84:03:51:75:78:6a:3e:2c:4d:
                    08:64:71:e4:bd:a5:04:c9:09:a9:b2:bb:33:c0:12:
                    df:fd:a2:5e:57:a6:cb:1d:76:be:25:fd:2a:45:1b:
                    58:57:0b:e8:eb:61:12:fb:08:05:0a:6d:2e:7e:df:
                    a9:e2:51:41:34:b3:0d:b8:09:0d:d3:24:e8:5a:a7:
                    a6:c0:a7:a9:cb:3e:44:ac:71:e5:2e:6b:1d:01:34:
                    4d:63:a2:e4:cd:e9:f2:69:d3:90:7e:ce:2d:9b:e0:
                    d3:5d:cb:9a:cf:f3:f6:35:06:50:29:a0:40:d4:02:
                    38:a0:16:e2:5b:35:94:c8:00:26:5c:0d:94:15:ca:
                    0d:68:ed:2c:a4:29:42:8b:82:c5:6c:9b:b2:22:15:
                    05:cc:e3:a0:2e:f3:65:31:66:32:22:ce:02:0a:45:
                    6e:ae:76:e5:ba:b3:33:bf:a6:de:e3:97:d6:98:32:
                    bb:04:b8:ac:ed:69:28:20:ef:95:ef:cc:4b:60:51:
                    ea:7c:7c:49:1b:d7:0c:a2:a5:ea:c8:ee:4e:da:67:
                    a7:08:18:b1:47:f1:a0:ca:19:35:c0:1f:e1:ed:c4:
                    e2:68:08:c0:62:ad:9e:23:3e:c8:c3:c8:e6:e7:20:
                    6e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:32:0E:78:0D:69:6F:4E:63:80:FA:7C:3A:94:87:1F:9C:9B:8F:7A
            X509v3 Authority Key Identifier:
                keyid:72:5B:CF:70:C0:8F:4B:27:44:E3:01:14:1E:F0:65:13:A9:6F:28:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/725BCF70C08F4B2744E301141EF06513A96F28D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/725BCF70C08F4B2744E301141EF06513A96F28D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/3230302e3134352e302e302f31362d3138203d3e203533313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.145.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         13:25:6a:46:9b:01:e7:55:33:a2:dc:0e:51:9b:cc:ea:77:7d:
         40:17:ee:b2:8e:cb:c5:c3:a5:ff:45:c8:b1:c2:52:fb:cb:b2:
         6a:8e:fa:ca:ef:05:9a:a5:4e:fb:db:75:08:19:c5:e5:ee:01:
         99:85:96:a9:5a:e8:75:5a:67:81:cf:6f:3e:d6:2c:1c:be:39:
         7c:20:bb:a0:ba:50:3d:c0:ad:18:ac:c3:a4:73:3b:01:e6:8b:
         9f:19:a3:1d:fe:80:75:f5:44:37:67:17:69:30:b6:d1:cc:e7:
         19:9f:6a:75:40:b8:f2:f9:1d:3c:c1:93:3b:cc:3a:03:10:ac:
         1e:8f:2e:8e:82:df:14:55:65:b2:13:7b:d3:78:4f:0c:ee:bb:
         6f:45:01:74:3f:2f:4f:71:89:ce:c6:19:5b:0e:25:c8:c7:b5:
         6d:bd:aa:bf:e6:1c:1c:a3:b1:07:9d:7d:ba:08:11:ed:7e:20:
         d7:76:18:af:69:ba:e3:77:a7:20:4c:1d:00:a6:5d:d0:80:ff:
         e8:8f:74:a9:d3:6c:70:46:87:22:54:c2:b5:13:fe:63:76:a8:
         b5:b3:46:42:bf:01:de:f9:d7:29:9e:dd:e7:8b:b9:9f:99:69:
         6f:af:71:1e:0f:c0:f7:df:dd:85:0a:2b:cc:7d:76:e7:42:14:
         ed:9d:5d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:43 2024 by rpki-client on console-fra.rpki-client.org