Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/3230312e35342e3138352e302f32342d3234203d3e20323733333630.roa
File:                     3230312e35342e3138352e302f32342d3234203d3e20323733333630.roa (raw, json)
Hash identifier:          u419ig0bqSUfLVZ7Vp34HFmc++D+raUg02CsR3Sf3ns=
Subject key identifier:   A3:C4:1C:64:DD:5E:E0:5B:9A:B2:90:08:18:D4:39:A5:D3:40:C6:44
Certificate issuer:       /CN=1A7B76C05455AAE8EC63DEB880E0E825CA35DC54
Certificate serial:       0539EF634F8F151C0A3E83FE162E10733D5B6C9E
Authority key identifier: 1A:7B:76:C0:54:55:AA:E8:EC:63:DE:B8:80:E0:E8:25:CA:35:DC:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A7B76C05455AAE8EC63DEB880E0E825CA35DC54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/3230312e35342e3138352e302f32342d3234203d3e20323733333630.roa
Signing time:             Tue 06 Aug 2024 11:42:27 +0000
ROA not before:           Tue 06 Aug 2024 11:37:27 +0000
ROA not after:            Tue 05 Aug 2025 11:42:27 +0000
asID:                     273360
IP address blocks:        201.54.185.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/1A7B76C05455AAE8EC63DEB880E0E825CA35DC54.crl
                          rsync://rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/1A7B76C05455AAE8EC63DEB880E0E825CA35DC54.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A7B76C05455AAE8EC63DEB880E0E825CA35DC54.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 13:27:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:39:ef:63:4f:8f:15:1c:0a:3e:83:fe:16:2e:10:73:3d:5b:6c:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A7B76C05455AAE8EC63DEB880E0E825CA35DC54
        Validity
            Not Before: Aug  6 11:37:27 2024 GMT
            Not After : Aug  5 11:42:27 2025 GMT
        Subject: CN=A3C41C64DD5EE05B9AB2900818D439A5D340C644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cf:42:1f:9e:ca:15:71:b2:74:55:0f:74:de:
                    de:fe:13:d9:8a:d7:a5:5a:12:0d:d0:22:56:fd:32:
                    41:d3:cd:f1:d6:c6:b8:c4:fb:95:37:b1:c8:f0:ff:
                    8d:89:0a:2a:83:78:d5:c8:33:72:36:bb:5e:da:cd:
                    7a:fe:da:2b:1c:e8:f3:1a:78:5e:74:a1:34:26:1d:
                    d4:dd:01:62:87:12:0b:4c:df:91:45:00:8d:22:d2:
                    34:4b:c8:14:bd:b4:21:74:a0:3a:2c:3c:be:a1:24:
                    28:88:98:49:06:24:b1:b3:fe:88:5b:35:fd:6d:aa:
                    0e:cf:62:19:5c:41:bf:b0:80:93:c7:ef:3b:8f:64:
                    53:fe:af:5e:5a:60:6a:31:e2:c7:5c:96:9a:f4:e3:
                    48:1d:a5:4a:18:51:6d:d3:b7:a8:88:36:6d:41:6f:
                    a0:07:bf:18:8f:5d:69:17:e2:37:b6:23:00:37:94:
                    75:f6:c4:fb:33:3a:23:a7:30:39:7e:73:29:61:72:
                    57:a7:9c:db:5d:37:26:41:d3:61:be:eb:e3:2a:87:
                    35:f9:01:c6:53:fa:e3:96:a1:d3:ec:bf:b2:1c:65:
                    ee:ff:d1:f4:22:4d:9b:52:37:54:fc:b7:c3:6b:70:
                    30:69:9c:f5:4f:86:c4:37:a7:f0:ef:8b:62:31:8e:
                    81:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C4:1C:64:DD:5E:E0:5B:9A:B2:90:08:18:D4:39:A5:D3:40:C6:44
            X509v3 Authority Key Identifier:
                keyid:1A:7B:76:C0:54:55:AA:E8:EC:63:DE:B8:80:E0:E8:25:CA:35:DC:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/1A7B76C05455AAE8EC63DEB880E0E825CA35DC54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A7B76C05455AAE8EC63DEB880E0E825CA35DC54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/3230312e35342e3138352e302f32342d3234203d3e20323733333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.54.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:a2:2e:c6:60:2d:73:0c:9a:47:76:b4:36:06:a0:1f:27:7c:
         a4:a1:1c:a2:f5:7d:0f:23:e0:7c:da:59:e3:47:f6:9b:cd:b3:
         9f:3e:de:e6:9e:7c:1a:32:3b:6d:5d:87:3d:9b:d4:07:94:8a:
         b0:8a:c4:1f:2a:b5:93:2b:f2:fb:80:74:da:41:fb:e6:28:2e:
         9d:7b:76:81:c2:f4:a4:67:8f:b5:dd:57:f5:0c:e2:11:16:85:
         01:f0:9e:d3:d9:38:d9:3f:27:06:92:49:d7:87:2a:89:56:5b:
         6c:9a:71:c8:08:52:4d:7e:c1:d7:f2:23:72:dd:cd:2a:8a:3f:
         6c:fd:2a:18:1f:5e:22:51:58:2c:1a:7e:ed:de:06:45:5c:ce:
         72:18:06:f6:b7:59:0f:f3:19:1a:06:b9:66:4d:20:8a:9e:4f:
         a7:ea:0b:36:0b:30:dd:a6:6c:45:cc:4d:7b:1e:d0:3b:c6:a6:
         9f:ed:70:8c:3b:8f:23:ba:47:69:60:57:af:48:cb:1d:3a:11:
         55:6a:2a:90:f0:fe:1d:ee:2d:00:2f:24:3b:06:5a:44:d6:dd:
         9e:1c:82:03:a8:81:df:48:af:12:e6:5e:b1:0c:b5:60:6e:0a:
         2c:6c:6d:7a:f3:82:3b:e8:dd:fc:07:ce:e4:5d:75:62:69:4e:
         d6:68:8f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 13:09:38 2024 by rpki-client on console-fra.rpki-client.org