Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/3230302e3136302e34382e302f32302d3234203d3e2038303535.roa
File:                     3230302e3136302e34382e302f32302d3234203d3e2038303535.roa (raw, json)
Hash identifier:          TxdIrscx6d1/CJrvZN7qGy5eaaecT3Iw4BhPNuMAwu8=
Subject key identifier:   F4:60:2F:13:30:AD:C3:92:04:18:E0:E8:FF:8C:15:28:AA:FB:99:89
Certificate issuer:       /CN=E3A05660BB6F81841BB49DE532F64F592B23928E
Certificate serial:       705CDD9254FA1A37B4BF160F57AEA7C77F1E2595
Authority key identifier: E3:A0:56:60:BB:6F:81:84:1B:B4:9D:E5:32:F6:4F:59:2B:23:92:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3A05660BB6F81841BB49DE532F64F592B23928E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/3230302e3136302e34382e302f32302d3234203d3e2038303535.roa
Signing time:             Fri 17 May 2024 13:49:45 +0000
ROA not before:           Fri 17 May 2024 13:44:45 +0000
ROA not after:            Fri 16 May 2025 13:49:45 +0000
asID:                     8055
IP address blocks:        200.160.48.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/E3A05660BB6F81841BB49DE532F64F592B23928E.crl
                          rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/E3A05660BB6F81841BB49DE532F64F592B23928E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3A05660BB6F81841BB49DE532F64F592B23928E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 20:38:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:5c:dd:92:54:fa:1a:37:b4:bf:16:0f:57:ae:a7:c7:7f:1e:25:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3A05660BB6F81841BB49DE532F64F592B23928E
        Validity
            Not Before: May 17 13:44:45 2024 GMT
            Not After : May 16 13:49:45 2025 GMT
        Subject: CN=F4602F1330ADC3920418E0E8FF8C1528AAFB9989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:14:6e:3c:e9:45:72:e4:23:89:89:83:46:d6:
                    7e:01:7e:61:66:d7:8d:b3:12:d9:22:55:55:94:4a:
                    30:f4:b5:9a:01:75:65:f9:0e:17:58:c4:0a:b3:69:
                    bb:40:ea:d4:29:fa:11:2d:cc:0a:86:34:94:c6:8c:
                    ff:9b:35:20:5c:e6:ac:c8:9f:32:0a:95:99:ec:c5:
                    f2:26:05:b3:e3:44:2c:45:34:f9:44:b2:e7:20:08:
                    e2:ce:f8:6b:12:36:4a:0c:3c:35:7c:81:0b:49:4f:
                    ef:5e:13:8d:7e:1a:ea:bc:84:c3:bf:b7:e8:00:fe:
                    2b:63:17:c0:2e:c4:78:e5:ae:b5:ef:00:bb:e8:38:
                    d0:29:4a:5a:8f:89:73:f3:96:45:41:f1:85:f4:28:
                    be:79:9e:49:2b:4c:c1:61:4b:18:a0:13:24:40:8e:
                    57:1b:f6:15:70:1f:dc:38:d3:5b:81:c8:95:61:40:
                    c9:b0:30:f4:82:fe:e8:4e:f3:c8:e3:29:48:77:02:
                    71:81:72:e3:f6:14:5b:5c:e4:fb:27:aa:e8:4e:12:
                    94:e2:b0:d8:5c:00:80:aa:6a:27:a1:09:52:f1:9c:
                    86:62:22:7e:e6:b3:bb:30:a3:9b:98:13:da:de:45:
                    05:fb:43:2e:d3:a3:4d:57:58:78:2d:85:18:38:74:
                    a7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:60:2F:13:30:AD:C3:92:04:18:E0:E8:FF:8C:15:28:AA:FB:99:89
            X509v3 Authority Key Identifier:
                keyid:E3:A0:56:60:BB:6F:81:84:1B:B4:9D:E5:32:F6:4F:59:2B:23:92:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/E3A05660BB6F81841BB49DE532F64F592B23928E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3A05660BB6F81841BB49DE532F64F592B23928E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/3230302e3136302e34382e302f32302d3234203d3e2038303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.160.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1a:32:bb:f7:1b:0d:ba:17:a6:1c:03:26:30:3b:a4:ea:66:0c:
         6f:55:32:75:e4:7b:3e:39:9d:70:06:18:3a:1c:a9:9c:b2:bc:
         a2:0b:62:98:c3:51:94:04:55:8d:e6:b0:19:69:bd:db:76:3d:
         01:60:cb:5a:6e:f4:ed:d3:6d:27:38:6e:4d:d4:bc:f2:f7:ec:
         32:e7:b5:b9:76:00:f5:63:d4:d4:44:56:f1:75:08:a1:a8:09:
         bb:c2:ff:81:01:02:d7:87:04:57:03:e9:0b:6b:00:d3:1f:67:
         cf:b5:2a:8d:1b:d3:26:62:ec:30:f6:a1:f9:12:2b:12:0e:57:
         e5:93:b3:f6:7e:ea:23:94:5c:3a:91:90:f1:e3:b6:3f:e8:5b:
         9d:c6:11:bf:3e:ac:ea:db:09:89:ea:c0:8f:41:42:7a:f4:41:
         90:00:61:df:2d:b3:dd:72:ab:fc:f5:81:55:5c:e9:50:30:49:
         bf:e1:0f:34:93:28:c1:07:b0:a2:bd:0b:db:ab:72:01:6b:69:
         0e:75:5c:7c:d6:65:6a:5c:4b:91:c7:24:fb:aa:4b:87:8b:e0:
         e1:6f:51:c1:aa:ab:8d:bc:8f:d1:ed:ef:c0:24:68:57:26:58:
         71:9f:6c:50:08:e4:75:11:65:33:5d:02:5e:53:77:cc:03:ee:
         b0:1e:b2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:38 2024 by rpki-client on console-ams.rpki-client.org