Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3230302e3134362e3132382e302f31382d3234203d3e203237363532.roa
File:                     3230302e3134362e3132382e302f31382d3234203d3e203237363532.roa (raw, json)
Hash identifier:          QXEBt6Yq/4+VdkpoEbW9JfVm4yXleFX9yheuZuf1bY4=
Subject key identifier:   8B:96:7F:6B:CA:8A:0A:82:3A:66:6C:29:92:99:A6:4F:44:B7:57:CD
Certificate issuer:       /CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
Certificate serial:       4803E6CF1A619CFAFEF865C1DC554D82F8A2B595
Authority key identifier: D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3230302e3134362e3132382e302f31382d3234203d3e203237363532.roa
Signing time:             Wed 03 Apr 2024 18:31:55 +0000
ROA not before:           Wed 03 Apr 2024 18:26:55 +0000
ROA not after:            Wed 02 Apr 2025 18:31:55 +0000
asID:                     27652
IP address blocks:        200.146.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl
                          rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:03:e6:cf:1a:61:9c:fa:fe:f8:65:c1:dc:55:4d:82:f8:a2:b5:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
        Validity
            Not Before: Apr  3 18:26:55 2024 GMT
            Not After : Apr  2 18:31:55 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:33:5a:14:3c:0d:c7:45:a8:50:79:fe:a0:64:
                    82:2e:8e:56:e9:a5:6a:f0:12:26:48:3f:e2:f8:c0:
                    d1:e2:aa:98:fa:4a:a6:fd:6c:5f:af:0a:31:4f:ab:
                    72:02:3b:73:47:55:11:31:87:09:d0:06:9b:f1:ef:
                    84:64:b5:ed:21:4e:84:c7:89:97:29:1a:85:7a:b8:
                    6e:17:7b:78:12:f6:dc:f9:ea:37:7e:70:47:fb:b0:
                    fd:bd:81:c6:6b:c2:80:ee:3a:48:2a:c7:ce:69:0c:
                    85:8e:bb:09:9f:b7:ce:c2:6e:39:66:dd:9c:c0:b0:
                    65:f2:8f:f7:d2:78:c7:e8:1f:5c:6e:7c:08:5a:6a:
                    02:db:7b:0b:56:58:b8:96:50:ec:1c:fd:3e:13:dc:
                    d5:10:12:f3:7e:e5:24:2a:16:38:05:99:d6:c7:ff:
                    63:fa:d6:99:ba:b6:46:15:51:da:96:a2:3b:5f:7d:
                    66:52:14:fa:6f:9e:af:63:f3:47:fd:09:84:c6:b6:
                    2b:ae:c4:05:5e:1b:4e:37:84:e6:31:90:79:38:23:
                    5b:46:3c:2f:4d:fc:12:75:68:f4:64:98:9b:8c:20:
                    bd:7d:28:c5:eb:55:89:60:ef:2f:0b:93:2c:99:ac:
                    7b:5b:7a:1a:13:03:a1:12:79:e9:36:c4:d2:9f:1b:
                    a6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:96:7F:6B:CA:8A:0A:82:3A:66:6C:29:92:99:A6:4F:44:B7:57:CD
            X509v3 Authority Key Identifier:
                keyid:D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3230302e3134362e3132382e302f31382d3234203d3e203237363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.146.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         ac:2a:a6:ff:4b:56:88:fc:b1:d7:b9:fb:9e:36:2c:4b:93:b3:
         af:32:af:91:80:a4:16:3c:bf:b9:20:a4:a1:10:aa:f0:e5:be:
         25:44:83:e7:d1:a5:44:f8:f6:4d:df:d7:31:bf:7b:e5:3f:19:
         a4:97:16:f3:db:fc:42:e3:1e:10:7a:47:5c:92:f7:44:51:cc:
         23:d2:6a:e1:8c:60:5e:85:3f:7a:ee:5b:69:3e:b9:18:d3:ac:
         51:27:c5:cd:c8:17:12:9b:3e:41:6c:8d:14:0a:da:a2:ad:24:
         cd:c6:01:0f:18:24:17:af:bc:20:28:2d:6c:76:61:4c:11:7f:
         21:1f:79:80:91:8c:2d:d0:8d:42:1e:d3:32:0a:39:61:91:e3:
         7b:de:3f:97:d1:f7:ed:36:67:25:8e:a0:8e:d7:d1:4b:6b:6f:
         b3:fd:fc:b2:a3:88:d7:c0:0f:02:1e:f2:6d:49:3d:0d:cb:84:
         b3:04:f5:36:0e:c5:32:a5:c2:67:4f:cd:08:a1:41:a6:be:8f:
         1d:bd:0b:7b:8e:3f:0e:0f:83:a2:a2:f9:4a:78:99:0a:2a:3b:
         ff:77:d1:96:60:4b:9a:a6:d8:f8:a3:ab:56:0d:e8:5e:df:df:
         b6:d5:c6:0a:ac:c5:dd:c0:b7:39:f7:6b:9e:a7:d2:dd:76:8d:
         6b:e5:dc:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:12:32 2024 by rpki-client on console-fra.rpki-client.org