Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/1/3230302e3231352e3137332e302f32342d3234203d3e20323632363938.roa
File:                     3230302e3231352e3137332e302f32342d3234203d3e20323632363938.roa (raw, json)
Hash identifier:          rdEBeuMlgr6/Xmqx+dgIA87X5B6m+2ZYcW1G8bzre+4=
Subject key identifier:   42:6F:3B:4B:AB:2A:38:0F:D1:F7:F9:09:8C:58:74:63:01:13:52:D6
Certificate issuer:       /CN=B7DDBA31B3E035114E8DEE7428E921EE9085B3A1
Certificate serial:       61DBCC29BCC3EC91582DE4D4485198E712637A2B
Authority key identifier: B7:DD:BA:31:B3:E0:35:11:4E:8D:EE:74:28:E9:21:EE:90:85:B3:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7DDBA31B3E035114E8DEE7428E921EE9085B3A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/1/3230302e3231352e3137332e302f32342d3234203d3e20323632363938.roa
Signing time:             Wed 12 Jun 2024 11:09:42 +0000
ROA not before:           Wed 12 Jun 2024 11:04:42 +0000
ROA not after:            Wed 11 Jun 2025 11:09:42 +0000
asID:                     262698
IP address blocks:        200.215.173.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/1/B7DDBA31B3E035114E8DEE7428E921EE9085B3A1.crl
                          rsync://rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/1/B7DDBA31B3E035114E8DEE7428E921EE9085B3A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7DDBA31B3E035114E8DEE7428E921EE9085B3A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Jun 2024 07:53:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:db:cc:29:bc:c3:ec:91:58:2d:e4:d4:48:51:98:e7:12:63:7a:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7DDBA31B3E035114E8DEE7428E921EE9085B3A1
        Validity
            Not Before: Jun 12 11:04:42 2024 GMT
            Not After : Jun 11 11:09:42 2025 GMT
        Subject: CN=426F3B4BAB2A380FD1F7F9098C587463011352D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:24:ec:0f:47:88:9a:98:f6:ef:e0:ac:00:90:
                    b3:4f:73:20:db:2a:2d:61:e6:d3:bc:d2:cd:85:fd:
                    3b:1e:e9:f1:c8:4e:48:6d:a6:46:9d:0b:94:25:24:
                    ca:46:19:85:8b:8e:cd:70:c1:d0:a0:89:14:4e:52:
                    aa:16:ea:ad:ef:e6:f7:2f:41:ae:9e:05:1e:17:d0:
                    c6:a8:df:03:37:b9:cc:d9:f7:97:c5:df:e8:2e:d3:
                    a2:49:4e:d3:43:91:09:d1:58:3a:77:53:2f:5a:0c:
                    4b:3a:a9:9b:02:c2:48:c6:3b:97:7e:f1:a6:34:fe:
                    ae:12:aa:ec:bb:6c:21:2e:ad:60:b3:80:61:87:f9:
                    de:95:4a:dd:08:e9:74:92:78:cd:0c:7e:31:ed:e9:
                    ac:d9:fe:18:cd:c3:7c:92:f3:f5:03:9b:a2:ad:e6:
                    5b:59:8f:00:5a:cd:95:9d:70:d2:ff:e3:79:42:56:
                    ef:ab:f7:09:f8:ad:75:f1:5c:39:f0:11:07:fa:c3:
                    31:8e:2a:ba:b7:98:36:72:da:7c:f1:f0:33:85:ae:
                    28:c8:99:65:8d:6b:58:b4:8f:ce:33:00:9e:88:f6:
                    35:93:d1:be:c0:88:bd:92:dc:85:9e:9e:d9:53:53:
                    92:0a:de:e3:e7:0d:d4:2d:b0:e3:a9:6a:a3:77:26:
                    57:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:6F:3B:4B:AB:2A:38:0F:D1:F7:F9:09:8C:58:74:63:01:13:52:D6
            X509v3 Authority Key Identifier:
                keyid:B7:DD:BA:31:B3:E0:35:11:4E:8D:EE:74:28:E9:21:EE:90:85:B3:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/1/B7DDBA31B3E035114E8DEE7428E921EE9085B3A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7DDBA31B3E035114E8DEE7428E921EE9085B3A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/1/3230302e3231352e3137332e302f32342d3234203d3e20323632363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.215.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:e2:a3:02:07:c3:2a:8c:cc:f8:98:2f:37:71:01:05:24:f1:
         09:b6:7e:c4:78:f1:f6:61:c4:92:0b:12:d3:52:e7:77:a3:aa:
         2d:f2:45:dc:3e:96:45:ea:16:ce:66:e9:d9:30:00:50:3c:51:
         cc:86:da:2d:f6:4e:07:cf:63:dd:23:cc:6e:bf:f1:db:48:ac:
         38:06:04:ad:b6:af:19:d3:41:74:7b:92:4a:a6:b7:20:8f:2b:
         12:2a:09:32:ff:1d:49:c5:ed:67:d6:5f:47:d7:01:1d:c0:b5:
         cb:34:1e:a4:0b:70:dd:3a:02:e0:2d:db:78:8c:fa:6b:e0:f4:
         8c:af:40:8d:c4:5f:12:79:3e:f1:22:4a:2c:0b:69:aa:19:93:
         ee:58:a6:51:43:ef:f7:da:fa:f1:b5:2b:ea:15:5d:fd:c4:47:
         a3:05:de:c3:61:7d:91:a2:ea:60:ec:b5:d1:db:90:02:e4:7a:
         80:8c:a2:0e:84:85:90:d4:da:0c:99:ac:b4:fd:be:ca:b0:08:
         9c:13:7b:af:b1:3f:5e:64:80:d8:e2:3e:3a:a3:87:23:36:cf:
         92:dd:60:3c:3f:d3:4e:66:d9:41:33:24:6c:68:71:f0:7a:c5:
         49:92:a6:a3:12:4f:3e:41:da:20:56:ec:72:40:93:65:27:1d:
         81:5f:ea:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 08:00:17 2024 by rpki-client on console-ams.rpki-client.org