Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3230312e38372e3234342e302f32322d3232203d3e20323733363833.roa
File:                     3230312e38372e3234342e302f32322d3232203d3e20323733363833.roa (raw, json)
Hash identifier:          QWjD0hJWmGjt88C+yKDLP5xWfqZQOY9t7sirtf8SCfI=
Subject key identifier:   10:2A:E8:84:69:BB:DD:40:39:C8:38:85:FB:5F:73:64:90:64:E8:D1
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       7CF0706D7BB8A9D038D761DDF3D496233F0CFE4B
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3230312e38372e3234342e302f32322d3232203d3e20323733363833.roa
Signing time:             Fri 06 Dec 2024 19:34:54 +0000
ROA not before:           Fri 06 Dec 2024 19:29:54 +0000
ROA not after:            Fri 05 Dec 2025 19:34:54 +0000
asID:                     273683
IP address blocks:        201.87.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 18:26:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:f0:70:6d:7b:b8:a9:d0:38:d7:61:dd:f3:d4:96:23:3f:0c:fe:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Dec  6 19:29:54 2024 GMT
            Not After : Dec  5 19:34:54 2025 GMT
        Subject: CN=102AE88469BBDD4039C83885FB5F73649064E8D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d7:5a:c1:9e:b0:f0:1a:76:40:4c:55:31:4b:
                    95:01:5d:0d:ac:38:c0:ab:3f:bf:3a:fb:72:0c:9b:
                    b1:35:bf:00:e2:fe:c0:6d:e5:9f:ff:3b:d5:08:0f:
                    d2:a8:5b:f3:18:3e:20:09:5d:7f:e2:c5:87:c8:bb:
                    85:42:d5:8f:1c:50:ea:22:1d:85:e7:18:14:ac:7a:
                    5f:da:9c:88:a9:b7:33:c9:9c:a3:7d:af:7b:92:da:
                    b0:bb:38:48:93:50:f2:e3:60:7b:a6:45:82:e2:24:
                    66:a6:b1:ec:47:43:da:24:73:8a:04:34:0b:b9:40:
                    13:df:04:7e:0a:e6:04:84:b6:99:99:5b:4e:8c:01:
                    83:4e:41:3a:b8:77:eb:50:fc:51:44:6e:c9:65:1b:
                    40:42:f5:b9:a7:54:26:96:d0:c8:26:63:33:94:98:
                    f7:2c:ec:ba:b4:95:4b:de:ce:61:bf:45:d7:70:56:
                    a2:8d:77:75:2f:75:bf:24:b1:ec:47:50:95:fe:f7:
                    8f:6b:e3:0c:a8:78:a1:47:2b:d2:65:62:8e:aa:ae:
                    5c:a7:b2:ca:8e:7e:fa:ad:e3:b6:2b:1e:73:27:13:
                    99:01:c3:75:ce:5d:60:49:55:bd:6c:19:f4:16:45:
                    8a:f3:7b:c8:03:96:9f:6c:2c:6f:d0:1e:4d:c3:45:
                    20:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:2A:E8:84:69:BB:DD:40:39:C8:38:85:FB:5F:73:64:90:64:E8:D1
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3230312e38372e3234342e302f32322d3232203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:ef:ff:54:23:69:83:73:5a:29:1a:13:df:b8:73:86:0d:4a:
         fa:ca:d8:93:88:d6:26:24:6f:b7:0c:09:c3:74:cd:17:e9:e0:
         09:5e:8b:00:2e:4f:f0:08:23:1f:53:51:51:04:40:8a:b4:a3:
         e8:b4:a8:d4:11:ac:86:e7:64:26:bf:29:b9:38:71:a8:6a:12:
         16:f2:75:e2:e7:2e:05:e8:1d:35:5a:d9:a3:1e:24:21:bc:c2:
         c7:f1:e6:20:63:63:d1:a5:60:24:98:24:ae:fb:f6:d1:f5:96:
         9c:b5:b6:01:ca:5e:f7:13:e1:19:80:18:44:72:b3:8b:2c:84:
         4d:ec:02:4b:d3:c4:09:92:30:34:ce:ce:21:12:67:49:a8:6a:
         99:fb:64:19:1b:13:23:d7:55:7c:73:c0:2b:63:62:b4:0a:0f:
         75:be:1c:4f:c3:a9:68:7e:9a:fc:e1:7d:10:3e:f3:bf:1c:ab:
         9e:34:5e:63:cc:8f:14:3f:55:54:23:34:59:24:2d:56:09:3c:
         6f:a2:54:b7:ce:e7:41:85:92:94:72:de:7a:58:b4:1a:5e:52:
         cb:a4:12:ca:f2:0f:06:24:83:2b:25:83:2c:cc:42:11:2a:d0:
         77:62:30:c4:79:11:95:ab:0d:71:7b:12:19:3a:a1:9d:24:d2:
         95:34:d7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:12 2025 by rpki-client