Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e33322e302f32332d3233203d3e20323732373130.roa
File:                     3230312e32332e33322e302f32332d3233203d3e20323732373130.roa (raw, json)
Hash identifier:          OEe4QqfyUI4LdiL+yUhoY0AaBXW3RJs0HA1MdoGJPUw=
Subject key identifier:   8F:1E:3D:60:7C:E3:D8:76:F2:30:8F:3A:F6:89:9C:A5:3F:F4:08:71
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       4EA7F79513C2B51ABA54C0DF06A111CFC9A33FE7
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e33322e302f32332d3233203d3e20323732373130.roa
Signing time:             Fri 30 Aug 2024 17:47:01 +0000
ROA not before:           Fri 30 Aug 2024 17:42:01 +0000
ROA not after:            Fri 29 Aug 2025 17:47:01 +0000
asID:                     272710
IP address blocks:        201.23.32.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:a7:f7:95:13:c2:b5:1a:ba:54:c0:df:06:a1:11:cf:c9:a3:3f:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Aug 30 17:42:01 2024 GMT
            Not After : Aug 29 17:47:01 2025 GMT
        Subject: CN=8F1E3D607CE3D876F2308F3AF6899CA53FF40871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:9b:c6:83:ed:80:ce:ea:e9:be:d5:cc:f3:a2:
                    cc:6b:df:df:ac:e9:aa:03:19:6c:87:82:54:ac:1f:
                    4e:03:cd:9f:42:3d:7b:e8:30:3e:51:f1:e2:a3:9c:
                    4b:fa:b7:3b:77:2d:8f:d9:aa:af:92:4d:ba:3e:d6:
                    9c:82:a9:b5:94:76:e0:e9:29:12:b4:bf:01:dc:90:
                    cf:95:bf:97:18:d8:6f:59:c7:31:c3:14:96:0b:30:
                    5b:08:bc:1a:bb:27:60:35:93:dc:47:e1:7e:e0:9b:
                    4f:c3:db:0c:a3:0a:98:e9:ea:fb:df:a6:6c:c8:71:
                    0e:f4:8b:a1:e0:10:ad:59:2d:4a:ca:5c:38:e6:bb:
                    10:b8:c8:0b:d8:ad:61:a2:ad:1c:89:e1:f6:3a:b0:
                    53:1b:24:f4:b0:b6:73:15:64:91:f0:05:02:1d:75:
                    6f:e5:91:a7:48:3e:63:b6:7d:31:7b:58:2b:46:d2:
                    11:1f:42:d6:17:19:f1:8f:94:b7:43:3f:7e:24:7f:
                    15:6a:28:75:ab:c5:cd:ec:4b:0c:3e:e4:46:0f:27:
                    c0:d7:81:33:a7:68:a7:b6:4c:e7:ea:d8:ea:6a:28:
                    7f:a4:ee:00:8a:4f:d1:ea:53:42:b4:02:fa:0f:b9:
                    06:13:92:2d:f1:98:13:66:3c:96:e4:ce:39:f7:8d:
                    04:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:1E:3D:60:7C:E3:D8:76:F2:30:8F:3A:F6:89:9C:A5:3F:F4:08:71
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e33322e302f32332d3233203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.23.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:67:7b:b9:28:4f:d8:e1:69:21:81:c3:dd:16:25:4a:ea:96:
         51:eb:a9:7c:0e:64:64:c6:10:e2:5c:2c:aa:b5:ed:3f:ea:7a:
         0e:ee:fc:ee:bb:5b:05:27:6d:40:72:19:b2:b5:5f:47:53:7d:
         33:5e:81:5e:e0:d4:c7:e4:bc:3b:36:fa:98:f7:a3:21:0f:ea:
         81:d6:24:87:a7:7d:71:c6:f6:af:d3:71:64:ba:6e:de:4f:de:
         d9:96:d0:cc:b8:45:40:9a:69:5e:35:62:36:32:e0:c6:a0:a3:
         0e:a1:43:7f:7e:5f:a9:fa:e1:a6:80:a6:ee:f9:09:7c:04:4b:
         d5:1b:63:25:df:18:bd:8f:d0:4b:e5:1e:0b:30:8a:9f:9d:f5:
         38:9d:04:ef:b7:4b:cc:fa:44:7e:35:ca:ea:4b:1c:15:bb:61:
         7c:52:00:4c:e5:cb:85:72:79:74:aa:a4:f5:95:80:7e:a9:6b:
         3d:f1:d5:7b:5e:a2:ae:b7:3e:c0:17:23:01:52:bb:85:0b:83:
         ee:6c:6c:ce:6f:93:78:f2:2d:68:b4:47:9f:23:39:e8:fc:a9:
         df:d9:d0:27:cb:10:14:25:30:06:5f:ce:72:02:94:d7:ea:f5:
         a6:80:72:10:c1:8e:52:f9:c2:86:ec:2d:db:d5:15:a7:dd:07:
         7a:78:d6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 09:48:06 2024 by rpki-client on console-ams.rpki-client.org