Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/3230302e31372e3139322e302f31382d3234203d3e203130383831.roa
File:                     3230302e31372e3139322e302f31382d3234203d3e203130383831.roa (raw, json)
Hash identifier:          kzefXAWXdFHyJn4Uqti0qSaT/529Z8XN0vtOkv/h0wQ=
Subject key identifier:   22:D0:38:57:4A:8E:72:4A:06:B4:E8:70:47:39:CB:7A:83:0C:63:FD
Certificate issuer:       /CN=470BFABD451A375BCBD5E6F088E3BC9AFB00642A
Certificate serial:       360F646E44B6B0E160D785CE3E7FD5E98DD47B3C
Authority key identifier: 47:0B:FA:BD:45:1A:37:5B:CB:D5:E6:F0:88:E3:BC:9A:FB:00:64:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/3230302e31372e3139322e302f31382d3234203d3e203130383831.roa
Signing time:             Thu 04 Apr 2024 14:52:37 +0000
ROA not before:           Thu 04 Apr 2024 14:47:37 +0000
ROA not after:            Thu 03 Apr 2025 14:52:37 +0000
asID:                     10881
IP address blocks:        200.17.192.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.crl
                          rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:0f:64:6e:44:b6:b0:e1:60:d7:85:ce:3e:7f:d5:e9:8d:d4:7b:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=470BFABD451A375BCBD5E6F088E3BC9AFB00642A
        Validity
            Not Before: Apr  4 14:47:37 2024 GMT
            Not After : Apr  3 14:52:37 2025 GMT
        Subject: CN=22D038574A8E724A06B4E8704739CB7A830C63FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:10:ec:52:e8:a0:db:04:bc:50:91:1b:f4:7e:
                    ea:14:40:a5:33:3d:63:06:60:77:83:8b:01:4e:06:
                    08:23:7c:2b:b8:73:c8:6e:73:5a:ba:94:e0:5e:79:
                    8e:83:0f:86:4b:ee:9b:b9:91:c1:cf:69:3f:72:e6:
                    37:9b:81:9d:02:f5:5d:d8:48:f0:4b:b5:2f:e6:9e:
                    45:60:02:a2:af:4a:0a:87:0d:e1:63:f4:a4:33:34:
                    97:3e:af:bf:60:13:0d:13:43:ec:65:3b:05:1d:4f:
                    b1:cc:bb:b0:e9:f2:9e:99:8b:da:4f:d3:78:77:6c:
                    90:d0:af:fe:c3:d5:1b:d8:a2:22:e4:31:d7:fe:8d:
                    f7:29:ca:47:a7:53:0d:d2:3d:86:7f:c4:23:87:9b:
                    06:0f:6a:30:a4:27:46:84:5d:f3:e3:43:c1:b4:d2:
                    d6:78:63:19:0b:27:e8:f0:2d:fb:f2:d5:63:d8:d6:
                    86:58:4b:c3:54:fd:a9:0b:c8:b6:f5:ee:9e:c2:47:
                    b3:b3:82:a5:87:a3:4a:79:c0:cb:f5:b4:bb:37:47:
                    59:64:b0:54:29:31:16:90:28:31:91:08:82:be:35:
                    e0:f9:4b:b3:e9:7c:cd:c6:55:76:ac:67:e5:50:fd:
                    5b:27:16:43:d3:00:f7:56:08:91:b7:94:96:dc:91:
                    de:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:D0:38:57:4A:8E:72:4A:06:B4:E8:70:47:39:CB:7A:83:0C:63:FD
            X509v3 Authority Key Identifier:
                keyid:47:0B:FA:BD:45:1A:37:5B:CB:D5:E6:F0:88:E3:BC:9A:FB:00:64:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/3230302e31372e3139322e302f31382d3234203d3e203130383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.17.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         74:99:dc:b8:0c:4c:00:c4:cd:22:9c:0c:62:cd:28:7a:b2:0a:
         53:7e:55:42:14:06:d7:b0:b9:cf:e0:b3:c1:f5:45:49:98:ca:
         34:70:64:5a:9c:58:85:0b:dc:e8:5c:9e:80:ab:d5:96:a8:9b:
         98:c2:bb:9e:34:e5:e7:5b:b2:23:ab:7b:3a:8a:a2:7a:91:6c:
         a5:da:6f:41:9e:0e:d1:50:37:d4:1a:ba:3b:f0:a8:5d:d4:b3:
         8e:48:23:b0:92:79:fb:9c:18:e8:b0:32:3c:70:03:21:97:b6:
         2a:74:34:ca:7d:18:be:bb:2c:4e:d7:e4:fb:0a:e2:bd:29:e5:
         20:fe:0d:5d:27:45:84:3a:dc:18:74:f3:69:97:bf:33:87:be:
         fb:43:f9:d1:c2:fe:e8:8d:bb:0c:16:57:3e:09:bf:7b:22:b6:
         99:dc:db:51:66:84:22:88:41:f7:af:ab:8c:47:55:f5:90:20:
         e9:f4:dc:98:26:60:28:65:f3:a2:57:aa:cb:06:eb:31:4c:60:
         64:18:66:38:af:87:41:99:b6:a5:74:8b:13:44:8e:66:84:b4:
         f8:6e:06:9a:38:25:89:cd:0c:2b:83:4b:96:a2:f9:69:11:d4:
         1c:a3:d4:32:26:9a:03:07:13:4d:78:49:23:40:95:d2:15:0f:
         15:31:1c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:41 2024 by rpki-client on console-ams.rpki-client.org