Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3230312e37312e36342e302f31382d3234203d3e203237363532.roa
File:                     3230312e37312e36342e302f31382d3234203d3e203237363532.roa (raw, json)
Hash identifier:          QFUEudgBlR0KoCPU1s5BaDUVfQ3MfrZPdh58Y4A5aSA=
Subject key identifier:   EA:4E:FD:30:20:A6:9C:02:A8:68:6F:2B:32:FD:9D:6F:5F:14:39:89
Certificate issuer:       /CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
Certificate serial:       5FBC29EC98A79FC5A1A1B0AB6366C3CC80B4A9E2
Authority key identifier: D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3230312e37312e36342e302f31382d3234203d3e203237363532.roa
Signing time:             Wed 03 Apr 2024 18:31:53 +0000
ROA not before:           Wed 03 Apr 2024 18:26:53 +0000
ROA not after:            Wed 02 Apr 2025 18:31:53 +0000
asID:                     27652
IP address blocks:        201.71.64.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl
                          rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 02:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:bc:29:ec:98:a7:9f:c5:a1:a1:b0:ab:63:66:c3:cc:80:b4:a9:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
        Validity
            Not Before: Apr  3 18:26:53 2024 GMT
            Not After : Apr  2 18:31:53 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:36:c0:a1:2a:e4:48:af:54:2b:80:0f:ab:13:
                    5a:1a:ab:87:20:90:fd:45:25:a5:9d:63:f4:30:a1:
                    b5:fc:da:a0:0c:e6:6b:fd:51:53:a8:c0:fa:27:63:
                    fe:21:28:21:7d:a6:13:5e:fb:38:6c:a2:84:24:f5:
                    35:be:82:3a:23:79:5d:f5:2a:a2:ab:1c:7f:20:7b:
                    85:8f:e3:5a:8b:e0:fb:d5:b4:e0:57:e8:5e:01:b0:
                    94:32:27:e5:ec:c8:f7:e0:f8:33:26:2b:ac:40:9a:
                    c2:cd:59:2e:e0:81:a8:d6:17:9c:33:c5:80:0b:3f:
                    c2:f7:fa:3a:c4:52:80:be:09:03:04:b3:2b:75:8e:
                    88:81:03:ff:c1:e9:fc:b0:d8:cd:8a:2a:34:38:c1:
                    2c:d4:16:63:df:93:6f:a5:c3:1c:62:aa:b1:f0:81:
                    00:b1:f1:86:19:67:84:88:95:c6:16:ec:25:48:20:
                    6f:63:49:51:37:ab:ad:6a:ec:35:77:57:af:df:e4:
                    42:c9:e7:3b:41:3b:3a:03:f2:f6:23:dd:1f:40:a0:
                    01:c9:15:cc:67:0f:98:04:20:b3:d3:93:2d:ef:f9:
                    f8:ee:b5:92:ad:5e:4b:26:1d:5a:05:50:39:8a:30:
                    1f:f2:4f:44:3c:86:ec:36:30:4a:c5:7a:3c:64:12:
                    44:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:4E:FD:30:20:A6:9C:02:A8:68:6F:2B:32:FD:9D:6F:5F:14:39:89
            X509v3 Authority Key Identifier:
                keyid:D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3230312e37312e36342e302f31382d3234203d3e203237363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.71.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         cf:66:f6:2f:05:95:45:fa:60:a0:61:73:72:f4:e4:48:3a:9e:
         91:c0:bd:64:14:e3:42:d2:eb:82:d7:cf:2c:39:8c:8c:fe:c1:
         0f:fc:7b:ac:e7:b8:86:59:0d:8d:84:9f:6a:ee:5c:d6:d9:82:
         24:99:d3:90:a2:0e:5e:a0:04:99:af:c5:60:01:0b:7b:d9:ca:
         4e:d5:70:ef:25:ad:ae:9a:98:2e:17:dd:32:f0:49:0e:f6:93:
         db:05:b4:51:c4:ed:73:9e:2f:37:1e:4e:e9:f4:a3:13:c1:59:
         6a:d4:6b:02:b1:70:42:e7:16:92:ec:6b:ad:41:34:a0:03:2e:
         9e:bd:43:64:fd:95:cc:fb:40:ca:1c:69:0b:13:37:69:2f:0e:
         f5:2a:3c:a4:bf:92:dd:9c:07:76:35:08:87:c7:94:d2:14:8a:
         a6:bf:02:7e:0d:1d:ef:34:cb:9e:fc:ed:ae:4c:0a:bd:e3:37:
         11:ef:23:33:61:ee:d7:5a:40:09:69:9a:24:e8:c4:ea:c8:66:
         3b:e0:9f:ee:39:02:a4:a3:3a:97:22:23:f6:1e:5c:24:1d:63:
         30:1d:ce:73:cb:06:26:41:23:8d:09:9b:d0:30:7b:6b:51:f9:
         b9:8f:88:5d:c1:fd:bb:c5:78:29:62:7c:55:1d:df:75:5b:8d:
         66:9e:4b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 04:04:06 2024 by rpki-client on console-fra.rpki-client.org