Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGRbPQREs7xGNG6W2GchxZ6CpWDQ37bjenESruCQKcD9/1/3230302e35302e3231322e302f32322d3234203d3e20323730343530.roa
File:                     3230302e35302e3231322e302f32322d3234203d3e20323730343530.roa (raw, json)
Hash identifier:          FLPlbnqf0z8JyABY6M+0kjiN4q9Mf5DWUQOFKEzhOp4=
Subject key identifier:   1F:E4:50:42:CA:80:A9:8C:CA:6D:AC:4C:57:34:30:C8:CF:D5:76:35
Certificate issuer:       /CN=51957F338D0DF1C49A0FAB7BE086D4F2F6F01DAF
Certificate serial:       27856D7AFE520B225D87BD2617D6BB71F6B18462
Authority key identifier: 51:95:7F:33:8D:0D:F1:C4:9A:0F:AB:7B:E0:86:D4:F2:F6:F0:1D:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51957F338D0DF1C49A0FAB7BE086D4F2F6F01DAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGRbPQREs7xGNG6W2GchxZ6CpWDQ37bjenESruCQKcD9/1/3230302e35302e3231322e302f32322d3234203d3e20323730343530.roa
Signing time:             Thu 04 Apr 2024 05:37:02 +0000
ROA not before:           Thu 04 Apr 2024 05:32:02 +0000
ROA not after:            Thu 03 Apr 2025 05:37:02 +0000
asID:                     270450
IP address blocks:        200.50.212.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GGRbPQREs7xGNG6W2GchxZ6CpWDQ37bjenESruCQKcD9/1/51957F338D0DF1C49A0FAB7BE086D4F2F6F01DAF.crl
                          rsync://rpki-repo.registro.br/repo/GGRbPQREs7xGNG6W2GchxZ6CpWDQ37bjenESruCQKcD9/1/51957F338D0DF1C49A0FAB7BE086D4F2F6F01DAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51957F338D0DF1C49A0FAB7BE086D4F2F6F01DAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:32:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:85:6d:7a:fe:52:0b:22:5d:87:bd:26:17:d6:bb:71:f6:b1:84:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51957F338D0DF1C49A0FAB7BE086D4F2F6F01DAF
        Validity
            Not Before: Apr  4 05:32:02 2024 GMT
            Not After : Apr  3 05:37:02 2025 GMT
        Subject: CN=1FE45042CA80A98CCA6DAC4C573430C8CFD57635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:41:e0:df:01:76:bd:44:64:e6:25:9a:31:71:
                    75:be:b4:c3:44:a8:93:ff:d9:a7:51:9a:79:a1:0d:
                    58:60:e0:71:d4:c3:70:7c:de:cc:ff:c1:2e:98:3b:
                    e4:18:08:d1:00:d2:8a:56:2e:e0:50:4e:f8:fd:f4:
                    56:7a:11:94:c0:bd:4f:4e:88:e6:7b:4f:98:48:a3:
                    b7:9b:1e:6a:06:81:2b:9e:d0:39:12:83:5d:34:00:
                    30:66:57:99:4b:a4:72:bd:8c:de:1b:1a:05:c6:03:
                    c1:2b:64:a1:ab:f6:27:82:8d:6a:00:35:09:0a:dd:
                    28:c3:eb:22:12:85:53:e1:b7:c6:f8:16:5e:e4:01:
                    a5:92:b8:d6:0b:f1:5d:a9:57:85:8c:ca:63:83:f5:
                    9e:9c:05:d1:95:37:83:36:69:b1:99:85:b2:6a:2a:
                    2d:ba:31:14:95:ab:77:96:d8:37:71:77:bc:ce:3e:
                    7d:81:c3:64:f0:6e:8d:9f:8d:f2:37:0a:98:3d:1e:
                    04:c1:b5:a2:af:15:5f:a9:a2:43:7b:f9:63:df:0e:
                    18:09:da:8f:ea:40:5f:1d:9f:16:c0:f7:fc:8a:77:
                    0e:04:a4:76:8d:af:b8:e6:a5:5c:f9:3a:49:80:64:
                    c1:d0:bd:5f:b4:fb:f6:37:f4:66:11:35:1a:93:1d:
                    ca:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:E4:50:42:CA:80:A9:8C:CA:6D:AC:4C:57:34:30:C8:CF:D5:76:35
            X509v3 Authority Key Identifier:
                keyid:51:95:7F:33:8D:0D:F1:C4:9A:0F:AB:7B:E0:86:D4:F2:F6:F0:1D:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGRbPQREs7xGNG6W2GchxZ6CpWDQ37bjenESruCQKcD9/1/51957F338D0DF1C49A0FAB7BE086D4F2F6F01DAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51957F338D0DF1C49A0FAB7BE086D4F2F6F01DAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGRbPQREs7xGNG6W2GchxZ6CpWDQ37bjenESruCQKcD9/1/3230302e35302e3231322e302f32322d3234203d3e20323730343530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:3b:58:28:45:70:82:82:46:4d:a3:0a:14:fa:41:8d:02:e4:
         78:51:a7:33:c9:ee:87:92:90:18:4a:77:03:97:23:2d:f0:6c:
         71:09:66:6c:22:0e:74:ce:d3:da:99:00:16:47:93:02:f9:4c:
         39:9e:a6:71:16:e3:a1:b4:eb:78:12:77:b8:33:0e:4f:cf:1d:
         92:43:98:3f:e9:27:0a:3e:1d:4c:6e:0d:ae:03:3c:96:7d:24:
         93:48:7e:de:ce:0d:a7:3f:fe:c9:82:ad:7b:96:36:b1:33:c0:
         64:5f:a1:78:f4:2c:a7:b5:67:bd:6d:42:b1:34:33:2d:62:bd:
         e1:c4:6c:a8:03:10:a5:3d:fb:1f:88:1c:f2:a8:80:52:85:b1:
         4c:9e:0d:7e:7e:c2:69:8c:dc:3d:b8:a3:89:81:f9:f1:b2:08:
         c5:d6:e6:ed:b2:c0:ed:ef:1a:46:0c:0f:da:63:80:34:65:75:
         aa:cf:58:81:99:21:0b:e6:b7:ed:82:ab:e0:6a:1a:ff:ad:4a:
         96:6c:74:88:8e:ee:04:53:db:e1:11:0f:78:67:11:55:e6:3d:
         a4:77:d7:23:71:55:ad:ee:71:ab:62:19:aa:d2:4d:44:3c:f8:
         60:d8:aa:bb:fc:b8:e0:3c:8b:6c:d0:04:cb:84:45:af:7f:90:
         a8:a2:47:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:15 2024 by rpki-client on console-ams.rpki-client.org