Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3136312e302f32342d3234203d3e20323632353835.roa
File:                     3230312e35352e3136312e302f32342d3234203d3e20323632353835.roa (raw, json)
Hash identifier:          oWTK/QpIYQ/22gzFRYxFeicm2Rmn0lTfttEGehS23xI=
Subject key identifier:   AA:E0:AD:47:AF:BE:FC:0A:77:44:6C:18:8D:E6:90:8F:60:D8:DB:04
Certificate issuer:       /CN=5AC853AE3F9CB62CC01BAF4379BF8072926B07A7
Certificate serial:       01F9016B425F28FA3EC2A36CA05E6116E16EDD8A
Authority key identifier: 5A:C8:53:AE:3F:9C:B6:2C:C0:1B:AF:43:79:BF:80:72:92:6B:07:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3136312e302f32342d3234203d3e20323632353835.roa
Signing time:             Thu 14 Nov 2024 15:12:26 +0000
ROA not before:           Thu 14 Nov 2024 15:07:26 +0000
ROA not after:            Thu 13 Nov 2025 15:12:26 +0000
asID:                     262585
IP address blocks:        201.55.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.crl
                          rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 15:22:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:f9:01:6b:42:5f:28:fa:3e:c2:a3:6c:a0:5e:61:16:e1:6e:dd:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AC853AE3F9CB62CC01BAF4379BF8072926B07A7
        Validity
            Not Before: Nov 14 15:07:26 2024 GMT
            Not After : Nov 13 15:12:26 2025 GMT
        Subject: CN=AAE0AD47AFBEFC0A77446C188DE6908F60D8DB04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4e:75:b8:94:c0:f3:3a:58:e2:63:64:54:7d:
                    75:ac:61:df:35:de:8b:55:27:c3:ea:8f:3e:a7:5d:
                    31:b8:cd:a0:75:91:02:c7:1f:6c:8c:71:66:73:b6:
                    75:76:b1:61:07:20:a5:20:56:e1:25:6c:ce:fd:ac:
                    d5:d7:f8:7c:7c:2e:ea:94:92:e4:ed:bf:e7:d8:87:
                    e8:55:99:1d:1e:39:9d:42:aa:ea:bb:04:16:06:af:
                    22:5a:a2:f9:09:5a:e0:ed:3d:c2:2b:8b:9e:87:78:
                    b9:b8:80:11:d4:b3:79:95:dd:11:59:6c:42:a9:18:
                    0d:52:3d:67:7c:ba:bf:40:b2:73:f2:00:62:c8:ef:
                    63:bf:6e:18:a7:1b:b0:a7:da:1f:ac:79:40:b6:3c:
                    e4:2f:67:63:ed:76:7b:52:d9:60:8e:ac:f1:18:5a:
                    f2:44:68:2f:a2:ac:72:fe:eb:a1:5c:0b:ec:8c:9d:
                    ee:da:e1:e3:9e:c4:5e:85:0d:1b:c1:bb:9a:06:8b:
                    b2:6a:1b:82:b3:62:38:08:a0:94:04:99:f8:25:6d:
                    8e:13:22:3b:9d:e8:44:84:9a:2d:cd:95:36:03:34:
                    43:3a:10:d1:42:72:fb:e9:9e:d7:8d:c8:f0:c2:4c:
                    9e:23:8d:8e:a5:03:3f:23:2c:3b:79:de:0f:51:1c:
                    b4:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:E0:AD:47:AF:BE:FC:0A:77:44:6C:18:8D:E6:90:8F:60:D8:DB:04
            X509v3 Authority Key Identifier:
                keyid:5A:C8:53:AE:3F:9C:B6:2C:C0:1B:AF:43:79:BF:80:72:92:6B:07:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3136312e302f32342d3234203d3e20323632353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.55.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:b8:04:6b:07:15:fc:e0:60:0a:db:ba:ab:35:7b:27:44:86:
         c7:98:0b:94:ba:4f:f2:0d:dd:c8:ed:f7:11:e9:db:8a:57:90:
         3b:3a:c2:8a:aa:06:4d:ea:a9:bc:9b:4c:75:4a:a6:81:8c:72:
         cb:78:d2:2e:39:36:f3:57:d6:0e:4a:fb:7e:37:41:e5:6e:e2:
         a5:0a:ef:3f:30:eb:b3:19:48:be:6c:19:8e:9b:dc:4e:93:f7:
         a7:17:b5:99:e1:94:ba:0a:8e:f2:61:7b:f5:4e:97:59:38:6e:
         d6:9f:5f:02:c3:3b:d2:f9:1d:4d:c9:08:f3:1f:01:f4:16:14:
         5d:92:64:3b:72:52:2d:e6:03:76:4f:15:ed:5b:8b:32:73:26:
         99:53:80:ca:43:49:4c:a7:8c:12:e1:63:d5:3a:6e:79:42:00:
         46:0a:15:23:1e:b5:66:07:57:21:57:0a:61:bd:87:4e:f0:f9:
         72:54:ba:31:3a:3a:2f:3f:f7:a5:15:f3:72:ad:a8:50:6a:0a:
         84:a7:86:6a:d6:25:17:3e:04:f1:ac:25:a2:3f:84:cb:fc:f9:
         be:e3:50:6f:f1:bc:d7:05:1b:6c:2f:bd:79:a0:69:0d:72:fa:
         63:5f:14:2e:50:cf:72:88:ee:88:83:b1:a3:e9:85:31:f1:f7:
         65:51:f6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:24:44 2025 by rpki-client