Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/3230302e3134352e312e302f32342d3234203d3e203533313636.roa
File:                     3230302e3134352e312e302f32342d3234203d3e203533313636.roa (raw, json)
Hash identifier:          LhhhwljTgIixAL7KZ+qJEEC1v8cJLiUEO4WzV2nNXPg=
Subject key identifier:   BE:0A:D1:9D:D8:82:BF:03:35:93:A0:40:E0:6F:31:7B:17:D2:8D:8A
Certificate issuer:       /CN=725BCF70C08F4B2744E301141EF06513A96F28D6
Certificate serial:       5E11A7A1B4A0C91C1C60FA642030A43D909C3009
Authority key identifier: 72:5B:CF:70:C0:8F:4B:27:44:E3:01:14:1E:F0:65:13:A9:6F:28:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/725BCF70C08F4B2744E301141EF06513A96F28D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/3230302e3134352e312e302f32342d3234203d3e203533313636.roa
Signing time:             Wed 03 Apr 2024 18:30:08 +0000
ROA not before:           Wed 03 Apr 2024 18:25:08 +0000
ROA not after:            Wed 02 Apr 2025 18:30:08 +0000
asID:                     53166
IP address blocks:        200.145.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/725BCF70C08F4B2744E301141EF06513A96F28D6.crl
                          rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/725BCF70C08F4B2744E301141EF06513A96F28D6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/725BCF70C08F4B2744E301141EF06513A96F28D6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 07:55:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:11:a7:a1:b4:a0:c9:1c:1c:60:fa:64:20:30:a4:3d:90:9c:30:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=725BCF70C08F4B2744E301141EF06513A96F28D6
        Validity
            Not Before: Apr  3 18:25:08 2024 GMT
            Not After : Apr  2 18:30:08 2025 GMT
        Subject: CN=BE0AD19DD882BF033593A040E06F317B17D28D8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:33:46:74:01:c5:86:56:85:7f:21:89:b1:9d:
                    58:ca:fb:e4:92:a9:40:53:11:71:33:e0:00:1a:0c:
                    35:bd:82:8d:5c:ce:ce:77:55:2b:9d:00:49:a9:b6:
                    ce:5c:3b:1c:3a:e1:34:27:7b:ea:0e:49:49:f5:db:
                    33:12:f1:55:ad:92:3a:0a:bd:e0:3a:ad:05:cd:91:
                    e5:82:f1:4e:e4:42:47:b4:15:61:1a:0b:59:6f:64:
                    ad:27:7e:51:6d:df:ca:44:97:36:4a:65:88:48:2a:
                    69:bf:29:fe:90:45:8a:02:c1:4d:8a:f8:28:90:79:
                    d8:a5:7d:f2:30:01:54:14:36:5f:50:a8:cd:b0:29:
                    97:8e:74:64:59:2b:4a:7f:6b:45:4f:42:66:04:85:
                    d3:33:69:f7:fc:69:77:b9:b6:db:8b:a0:bb:dd:7c:
                    38:09:2d:ca:c4:1c:89:2a:ab:d9:73:c8:71:81:2d:
                    c2:6e:b5:ae:c1:d8:6e:9f:32:a3:f4:26:f7:bb:8f:
                    a1:2e:c3:01:9e:6c:df:92:8a:3d:81:26:4f:b9:d3:
                    15:06:ac:6d:45:e1:bc:be:bd:c2:5f:ed:3d:65:53:
                    d8:d5:90:1a:0e:50:3e:30:e1:23:8e:8a:f4:e1:70:
                    46:02:ad:13:f6:da:da:93:1a:95:ba:4f:39:98:a7:
                    2a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:0A:D1:9D:D8:82:BF:03:35:93:A0:40:E0:6F:31:7B:17:D2:8D:8A
            X509v3 Authority Key Identifier:
                keyid:72:5B:CF:70:C0:8F:4B:27:44:E3:01:14:1E:F0:65:13:A9:6F:28:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/725BCF70C08F4B2744E301141EF06513A96F28D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/725BCF70C08F4B2744E301141EF06513A96F28D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/3230302e3134352e312e302f32342d3234203d3e203533313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.145.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:aa:e8:07:b1:e9:24:08:a0:f4:8c:79:23:41:44:cf:e8:c2:
         af:5a:49:40:18:fd:6c:87:e4:03:46:c1:95:16:47:46:51:39:
         33:85:02:dc:12:c7:0f:c2:b2:aa:b6:c1:62:a2:3f:aa:fa:b2:
         36:54:f0:43:51:d6:16:11:7b:21:64:f4:c6:f6:c1:31:f4:09:
         fa:d4:19:bd:14:95:a6:f2:cc:d5:b9:1f:ef:28:34:77:3d:68:
         7f:4b:9c:22:ec:21:09:38:85:b5:82:79:b6:bc:1c:16:bf:2a:
         d0:68:cd:7e:de:0b:ee:33:6d:51:71:41:b5:f6:42:5c:11:65:
         c6:ac:ca:7c:00:e1:93:c5:71:4f:30:b7:4e:be:63:bd:ce:7d:
         df:04:0c:4d:b3:cd:9d:5a:41:81:c5:4d:cc:aa:49:10:a3:92:
         0a:a7:33:9d:81:d0:29:67:de:eb:ad:23:ec:01:8c:f0:2d:17:
         96:f1:6c:17:7a:0a:6e:6b:0e:04:dc:ca:74:12:0a:b9:85:06:
         b0:65:f4:8b:07:11:65:64:b2:ed:c3:37:53:b1:b9:3e:34:6d:
         11:2c:46:30:69:de:38:14:58:6b:7f:28:1b:11:62:0e:99:b5:
         01:5c:08:63:13:af:42:6c:d5:4e:1d:cc:d1:5d:2f:1a:82:ad:
         a1:36:7a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:43 2024 by rpki-client on console-fra.rpki-client.org