Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3230302e3136392e3131322e302f32302d3234203d3e203232303835.roa
File:                     3230302e3136392e3131322e302f32302d3234203d3e203232303835.roa (raw, json)
Hash identifier:          pEB57XDPWAQ9MuIrkPR12w3jwcBte8ObnwhYpAsBku8=
Subject key identifier:   E7:E5:05:3F:29:71:E1:FD:02:C6:89:EE:FC:5C:7D:AE:C6:3D:BE:3D
Certificate issuer:       /CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
Certificate serial:       3148A609233954E56126364546B25E289600FE83
Authority key identifier: D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3230302e3136392e3131322e302f32302d3234203d3e203232303835.roa
Signing time:             Tue 16 Jul 2024 14:30:33 +0000
ROA not before:           Tue 16 Jul 2024 14:25:33 +0000
ROA not after:            Tue 15 Jul 2025 14:30:33 +0000
asID:                     22085
IP address blocks:        200.169.112.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl
                          rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 02:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:48:a6:09:23:39:54:e5:61:26:36:45:46:b2:5e:28:96:00:fe:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
        Validity
            Not Before: Jul 16 14:25:33 2024 GMT
            Not After : Jul 15 14:30:33 2025 GMT
        Subject: CN=3082010A0282010100BCE28B1A053899B8888E78ED5780EB60AD31087F0DE2D2A4CBD87040AA2B8056771A475DD7CB4D600225BFE088F23A8E14BAF6D8EF6ABEA2FD02FAA83C544ABF8F6B192DF2B7128FE12ECA401AC0594D39BCFDCB562AF59FC4BB92F7AD2A092B68F396CD5738DEA8475C78A0EB8F9395D0B8BB8205248C30CE3723A157AD0A0F17C5157FDB2E932014420D3917EAFD2098DCA764B1B15EBF07542003A6A492C3B2AE38C5C978AF71686AAD99F9AB74243EF5D8A86CC460E1E81BA53E06A9203F1C92227518A6F091DFEA07EF9A4733EBB414585B6B783E9ABE976BF49980234131AEE2DC96AAC803D6470BFA89A3ECB8EA44CF098F45C138A456197B54FCD1050203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e2:8b:1a:05:38:99:b8:88:8e:78:ed:57:80:
                    eb:60:ad:31:08:7f:0d:e2:d2:a4:cb:d8:70:40:aa:
                    2b:80:56:77:1a:47:5d:d7:cb:4d:60:02:25:bf:e0:
                    88:f2:3a:8e:14:ba:f6:d8:ef:6a:be:a2:fd:02:fa:
                    a8:3c:54:4a:bf:8f:6b:19:2d:f2:b7:12:8f:e1:2e:
                    ca:40:1a:c0:59:4d:39:bc:fd:cb:56:2a:f5:9f:c4:
                    bb:92:f7:ad:2a:09:2b:68:f3:96:cd:57:38:de:a8:
                    47:5c:78:a0:eb:8f:93:95:d0:b8:bb:82:05:24:8c:
                    30:ce:37:23:a1:57:ad:0a:0f:17:c5:15:7f:db:2e:
                    93:20:14:42:0d:39:17:ea:fd:20:98:dc:a7:64:b1:
                    b1:5e:bf:07:54:20:03:a6:a4:92:c3:b2:ae:38:c5:
                    c9:78:af:71:68:6a:ad:99:f9:ab:74:24:3e:f5:d8:
                    a8:6c:c4:60:e1:e8:1b:a5:3e:06:a9:20:3f:1c:92:
                    22:75:18:a6:f0:91:df:ea:07:ef:9a:47:33:eb:b4:
                    14:58:5b:6b:78:3e:9a:be:97:6b:f4:99:80:23:41:
                    31:ae:e2:dc:96:aa:c8:03:d6:47:0b:fa:89:a3:ec:
                    b8:ea:44:cf:09:8f:45:c1:38:a4:56:19:7b:54:fc:
                    d1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E5:05:3F:29:71:E1:FD:02:C6:89:EE:FC:5C:7D:AE:C6:3D:BE:3D
            X509v3 Authority Key Identifier:
                keyid:D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3230302e3136392e3131322e302f32302d3234203d3e203232303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.169.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3b:ce:65:c5:3b:50:76:2b:40:89:f0:1f:3a:bf:e0:6f:3f:44:
         42:42:c6:29:86:d0:eb:92:f7:93:e0:fa:d1:30:d4:c6:c2:2b:
         b3:d5:95:31:0c:94:aa:34:c0:e5:a7:60:fd:68:6b:fc:06:00:
         8e:1c:1b:a0:9d:61:74:55:2f:e2:b8:1f:b4:12:e8:6e:68:02:
         01:eb:7a:c0:24:67:c4:0f:0c:5e:bf:d8:b2:cc:d7:29:6f:ee:
         86:d7:96:a7:ac:fd:f4:b9:bd:40:06:26:79:c7:c9:e5:d3:34:
         18:65:2d:0b:9f:47:ee:a3:77:9e:f9:a2:0d:5d:53:44:8c:f5:
         71:e9:bf:bb:a0:2a:aa:ea:29:95:22:82:de:e5:ff:68:a6:04:
         48:1a:94:ba:b8:c8:92:32:35:60:c6:2d:97:9b:8d:b6:8a:b8:
         1c:5c:b9:91:72:b2:33:8e:d5:c7:c3:04:36:e4:1b:82:85:c7:
         06:ad:61:60:56:3c:c4:f2:e4:0a:d5:4f:75:93:c5:8d:3d:da:
         bf:e3:cb:41:3e:eb:0a:8e:37:7d:48:33:01:95:37:8f:19:fb:
         17:b0:f8:0d:42:3e:d9:95:ce:71:dc:58:46:a8:21:65:1c:71:
         4d:a5:f0:88:6b:9e:a1:f0:55:fe:61:3a:b9:d0:f7:ec:e0:68:
         f9:a5:b9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:09 2024 by rpki-client on console-fra.rpki-client.org