Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/3230312e37362e33322e302f31392d3332203d3e203237373135.roa
File:                     3230312e37362e33322e302f31392d3332203d3e203237373135.roa (raw, json)
Hash identifier:          YnjpcNrHdYqPEJKTTDI2fCkjPO+AORzPoVAnjUpKAM8=
Subject key identifier:   C6:93:4C:00:61:D9:E5:DB:A0:20:82:BC:AA:AF:40:CF:3F:75:57:B5
Certificate issuer:       /CN=F5A757E49A3EE62BEE5F32163DBC154299BDFBA6
Certificate serial:       07EA67593C036536E86AE0AF16931EFF24988CB0
Authority key identifier: F5:A7:57:E4:9A:3E:E6:2B:EE:5F:32:16:3D:BC:15:42:99:BD:FB:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/3230312e37362e33322e302f31392d3332203d3e203237373135.roa
Signing time:             Thu 04 Apr 2024 01:16:59 +0000
ROA not before:           Thu 04 Apr 2024 01:11:59 +0000
ROA not after:            Thu 03 Apr 2025 01:16:59 +0000
asID:                     27715
IP address blocks:        201.76.32.0/19 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.crl
                          rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:ea:67:59:3c:03:65:36:e8:6a:e0:af:16:93:1e:ff:24:98:8c:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5A757E49A3EE62BEE5F32163DBC154299BDFBA6
        Validity
            Not Before: Apr  4 01:11:59 2024 GMT
            Not After : Apr  3 01:16:59 2025 GMT
        Subject: CN=C6934C0061D9E5DBA02082BCAAAF40CF3F7557B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:95:86:79:93:6a:cf:bc:23:df:4e:1f:b3:08:
                    41:5c:70:7b:b5:f8:9b:b0:b9:e7:f7:6e:82:c5:90:
                    b5:67:9d:2c:79:b8:c4:ac:ee:74:4a:95:c8:3d:6d:
                    69:52:65:d8:54:43:97:cf:07:57:ad:95:2b:cb:3b:
                    30:fb:cf:97:62:25:c3:e9:5f:a3:be:37:10:d5:78:
                    97:c8:1a:42:1f:11:82:3f:82:b9:b7:42:3d:7e:33:
                    50:ce:ac:9d:b3:99:7f:37:b8:6d:a1:1e:ce:50:d5:
                    f0:67:d3:39:00:3a:cd:ca:5c:27:30:75:98:a0:fc:
                    c3:53:f2:fa:ec:b2:7d:ce:05:77:ce:03:09:2b:87:
                    6a:09:9f:7e:0f:2a:b3:e4:cb:84:b1:f1:c3:e4:25:
                    0a:9f:4a:05:63:6a:cc:34:86:d7:41:7d:58:20:af:
                    a2:0b:d9:ee:39:78:bc:d1:6f:18:41:94:75:b3:6c:
                    42:cf:90:92:68:0d:af:76:3e:c5:53:c1:8a:a3:b6:
                    a0:03:ac:eb:e1:91:21:47:fa:3a:b8:c0:05:aa:37:
                    a5:f2:60:c4:b7:ca:10:3b:f4:70:f7:f8:88:e7:af:
                    24:83:f6:15:e6:e7:92:a4:48:ad:7f:4a:84:71:00:
                    5c:03:42:7d:14:bb:d0:a9:5d:5d:c6:f8:32:43:64:
                    a5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:93:4C:00:61:D9:E5:DB:A0:20:82:BC:AA:AF:40:CF:3F:75:57:B5
            X509v3 Authority Key Identifier:
                keyid:F5:A7:57:E4:9A:3E:E6:2B:EE:5F:32:16:3D:BC:15:42:99:BD:FB:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/3230312e37362e33322e302f31392d3332203d3e203237373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.76.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3d:51:f0:f0:81:d6:65:a9:46:d7:d7:b7:44:6c:3f:75:15:77:
         1e:01:58:68:dd:a5:ad:f3:a6:ca:49:65:f6:ed:0a:41:13:e9:
         f1:5e:96:23:ff:ca:fb:eb:6a:8a:d4:c0:8f:89:6e:6f:fb:4d:
         64:e5:8c:c9:f8:ac:1f:2f:0c:47:b1:fa:04:85:17:3e:f1:0d:
         4a:30:72:09:5a:74:9f:9b:59:9d:3b:25:1e:e4:04:05:a1:af:
         43:d7:16:de:9d:ae:5d:57:35:21:b3:09:09:1d:86:16:dc:55:
         f5:d9:0a:cc:dd:95:e6:3d:c0:db:7c:2e:4a:80:1c:f2:e2:da:
         33:c0:26:ca:fc:9d:53:47:c6:75:4f:cc:ea:77:9d:db:c7:ec:
         5a:d1:ab:68:0b:8b:b3:c2:f3:fa:f6:b1:15:34:d4:75:61:c5:
         28:89:1f:59:c4:29:59:04:3a:86:63:24:56:08:5c:db:a4:93:
         7c:f3:7a:f4:22:90:1d:9a:3c:a5:6d:ec:42:90:60:85:73:a3:
         c7:7e:87:cb:4a:dc:cd:a2:ff:f6:d5:3f:4c:2c:db:78:f6:7f:
         6a:ac:06:d9:84:68:2c:b4:c6:1c:28:d9:b7:a7:e6:e2:00:13:
         01:f1:59:2e:f4:75:83:a9:f6:b5:5d:6f:ee:3a:a4:e9:8e:5b:
         d7:45:29:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:56:36 2024 by rpki-client on console-fra.rpki-client.org