Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3230312e32332e3136302e302f31392d3234203d3e203232303835.roa
File:                     3230312e32332e3136302e302f31392d3234203d3e203232303835.roa (raw, json)
Hash identifier:          jlE3Wm8JlcLuLKQ3usXi8YIdJGc3WcbQpJpMYAqH7k8=
Subject key identifier:   DF:A8:EE:B9:26:91:EF:63:9F:DA:E5:38:30:C0:67:50:2D:4A:DC:60
Certificate issuer:       /CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
Certificate serial:       0CC95C4A30D555858A82B12F5DF848C0118C9FA4
Authority key identifier: D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3230312e32332e3136302e302f31392d3234203d3e203232303835.roa
Signing time:             Tue 16 Jul 2024 14:31:29 +0000
ROA not before:           Tue 16 Jul 2024 14:26:29 +0000
ROA not after:            Tue 15 Jul 2025 14:31:29 +0000
asID:                     22085
IP address blocks:        201.23.160.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl
                          rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:c9:5c:4a:30:d5:55:85:8a:82:b1:2f:5d:f8:48:c0:11:8c:9f:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
        Validity
            Not Before: Jul 16 14:26:29 2024 GMT
            Not After : Jul 15 14:31:29 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:50:d0:67:ef:6e:28:bf:d7:1b:a1:ea:30:fe:
                    65:1c:27:62:90:f3:53:7b:38:81:4d:69:98:11:36:
                    fc:03:53:2d:4e:cc:33:56:4a:3f:2d:b3:8b:f2:28:
                    4f:97:da:d8:08:26:40:5a:df:2d:f4:a3:48:42:5a:
                    bb:15:ba:6e:42:ea:cb:01:aa:2e:f4:5b:09:19:8e:
                    f8:2e:0a:74:01:af:10:b4:0a:8b:0b:b0:03:44:16:
                    45:21:c4:51:1f:59:fe:a1:75:5e:ec:db:df:22:f0:
                    cb:a0:f7:b0:11:00:bc:4d:f5:13:27:ae:0e:c0:f8:
                    ae:09:68:b3:df:bd:cf:fd:6c:f6:f6:d3:ca:0e:35:
                    e2:bb:8f:c0:5d:cb:34:22:a0:5d:66:b5:7b:22:dc:
                    df:f1:e0:b3:de:56:3f:dc:8d:fc:5f:30:c1:78:29:
                    13:93:f9:d7:ab:5a:0d:64:62:06:65:15:69:53:df:
                    b3:8c:fc:75:79:a6:68:9f:b6:5d:8b:49:bd:b0:cd:
                    5d:6c:8d:80:c5:4e:14:56:f5:35:b8:05:b6:4e:7c:
                    02:30:dc:92:00:2e:c7:9b:54:e8:07:5e:0b:13:23:
                    68:99:2d:24:96:49:1f:08:ea:03:ef:b9:f3:95:1d:
                    9f:6a:ca:6c:ff:9a:e2:1c:9a:5f:68:68:41:09:af:
                    f7:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:A8:EE:B9:26:91:EF:63:9F:DA:E5:38:30:C0:67:50:2D:4A:DC:60
            X509v3 Authority Key Identifier:
                keyid:D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3230312e32332e3136302e302f31392d3234203d3e203232303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.23.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3b:c5:ae:45:16:84:d6:5c:cc:1d:a0:65:bc:31:c5:93:f5:98:
         7e:b9:51:f2:c3:45:f8:88:0c:d2:98:bd:7b:fe:2e:d3:5e:46:
         0b:25:b1:a8:b2:4e:5f:89:ab:b3:17:b7:85:c3:65:8c:d4:95:
         07:d6:4b:e3:65:c6:03:1f:be:fe:02:77:c8:7a:61:7a:cb:74:
         01:95:1a:ee:c5:1f:ef:59:5e:fb:85:b2:de:14:09:be:24:31:
         e7:ed:11:cf:9a:80:2e:31:2c:43:57:3f:f3:79:ac:9c:15:38:
         67:aa:ed:26:b8:96:d6:c7:2c:a6:82:90:d2:95:fb:9d:09:46:
         96:ba:09:dc:05:48:6c:91:a3:a7:c6:f1:ae:72:c7:28:ad:85:
         9e:51:04:bb:e2:97:f0:64:8e:ea:67:62:25:e8:9a:a1:87:0f:
         5f:1c:a7:0a:a8:37:54:ef:c0:f7:16:2d:a5:b4:17:16:a8:d1:
         23:05:0b:3b:fa:3d:3c:7c:a9:ba:94:66:d9:62:f6:39:21:5d:
         18:ed:8c:8e:f3:fc:2f:45:74:26:8c:eb:0d:49:fc:da:66:0d:
         30:4f:eb:7e:ae:65:4d:6d:e1:b9:4f:ca:6b:fc:81:b7:5b:60:
         af:dd:b9:22:01:91:77:f4:f7:56:96:ed:43:36:8b:56:0c:7f:
         29:e2:2d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:46 2024 by rpki-client on console-ams.rpki-client.org