Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e34312e302f32342d3234203d3e20323732373130.roa
File:                     3230312e32332e34312e302f32342d3234203d3e20323732373130.roa (raw, json)
Hash identifier:          YXUIZ6voBvmxflN8y73FFPwoM6ApxC/iR1yAv+keE7s=
Subject key identifier:   A6:22:1A:E6:AD:18:08:EC:35:AE:9E:BA:0F:23:03:C9:CD:65:9F:A3
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       777768C6F42838779ED2E5DF6656732F0D8EB179
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e34312e302f32342d3234203d3e20323732373130.roa
Signing time:             Fri 30 Aug 2024 17:47:00 +0000
ROA not before:           Fri 30 Aug 2024 17:42:00 +0000
ROA not after:            Fri 29 Aug 2025 17:47:00 +0000
asID:                     272710
IP address blocks:        201.23.41.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 13:27:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:77:68:c6:f4:28:38:77:9e:d2:e5:df:66:56:73:2f:0d:8e:b1:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Aug 30 17:42:00 2024 GMT
            Not After : Aug 29 17:47:00 2025 GMT
        Subject: CN=A6221AE6AD1808EC35AE9EBA0F2303C9CD659FA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:bd:d2:9a:9d:3a:b2:65:e9:35:76:b6:7a:27:
                    a8:e0:a5:21:f5:8a:42:af:ab:5c:a2:00:62:b3:07:
                    f5:55:df:33:ac:86:41:a2:58:15:9a:c4:ac:11:e7:
                    b8:8c:c1:ed:b3:7b:ce:a4:97:ad:87:18:e3:02:9c:
                    d4:4a:1d:b9:0e:46:8c:27:f7:b2:91:26:36:6e:fa:
                    26:b4:48:1e:f1:c8:07:e8:2c:df:3f:f4:60:12:96:
                    29:b2:a9:ce:33:52:b0:4c:49:94:5f:76:d4:ca:9e:
                    a6:e9:fb:d0:3f:8a:94:a0:cc:a1:b6:ed:64:54:c9:
                    97:be:a5:20:89:f5:66:c5:59:a9:8f:3c:00:3f:a2:
                    73:f5:f7:7c:be:a0:3c:8a:c0:fa:2b:71:73:23:4d:
                    08:73:e0:0f:00:a9:80:68:3f:fc:2b:79:04:7c:d6:
                    cc:af:5d:9f:9c:c5:47:99:48:12:bb:38:cc:4f:71:
                    44:c9:44:00:63:be:eb:f8:9a:72:fe:59:7d:cb:af:
                    4f:4c:0f:b7:5a:2b:41:63:1a:b7:44:11:b2:fe:46:
                    67:16:ed:68:ca:b7:82:9d:d1:95:6a:77:39:b1:31:
                    39:2c:a2:c3:39:a3:15:5a:85:54:6f:42:43:7d:ab:
                    a6:39:52:2b:7f:4f:d1:84:aa:c5:8a:e8:47:f7:2f:
                    eb:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:22:1A:E6:AD:18:08:EC:35:AE:9E:BA:0F:23:03:C9:CD:65:9F:A3
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e34312e302f32342d3234203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.23.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:26:7c:2d:99:7b:07:2a:eb:a2:39:72:e2:8c:13:92:ad:9e:
         14:92:95:75:a3:8e:bb:65:2c:b5:b8:a4:1b:89:5b:f2:9e:37:
         b4:5d:f2:bb:8e:36:5e:46:cb:3e:06:46:b4:28:89:6a:1f:8f:
         6d:ae:b5:a2:fe:cd:74:b7:97:3b:b5:45:48:15:84:fc:8f:b8:
         47:cb:c0:20:13:5e:13:7a:ed:ce:b3:f9:95:a8:be:e7:52:51:
         31:af:49:a7:72:24:93:3f:cc:5e:99:de:ec:cb:9e:d8:fe:e5:
         2c:8d:8e:c3:15:98:90:04:7e:5e:d4:f4:65:87:f2:d1:8a:3e:
         82:43:ec:0a:cc:9a:10:03:3b:e1:9f:4f:76:3d:6d:2b:3e:9a:
         e0:0b:8a:d0:41:6c:c4:e2:bd:e1:f0:58:48:f0:e7:8f:26:cf:
         46:c2:41:b2:87:85:ba:cf:9a:46:35:b5:a0:65:5e:42:ec:8a:
         21:52:12:bf:9a:ec:a2:c0:5d:2e:29:d9:f9:3f:c0:27:32:13:
         8f:c7:03:db:3c:d0:a4:b4:fc:52:22:1f:92:6f:86:a3:dc:c8:
         89:a6:9f:55:5a:9e:7c:e0:5f:3c:3a:12:5b:5e:a2:20:0f:37:
         5d:fd:63:df:3f:c0:e8:68:c4:7a:ff:53:ad:34:f9:cb:a9:6a:
         60:52:9d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 13:26:46 2024 by rpki-client on console-ams.rpki-client.org