Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaTnimA75AzPmXN7SS36PbzagoFnghVxjiRux2MKEnfC/0/3230312e3135382e35362e302f32322d3332203d3e203631383130.roa
File:                     3230312e3135382e35362e302f32322d3332203d3e203631383130.roa (raw, json)
Hash identifier:          J21NwCdIZbGgqyXPiDgTTNdaCNpbvqGd3fYcSrgUNLw=
Subject key identifier:   18:50:D6:0A:60:1B:DF:42:23:D7:EE:84:31:BC:80:A7:F8:64:9C:E3
Certificate issuer:       /CN=C1D7B4D4776503EAD063C1F2B7498814CC2598BE
Certificate serial:       63704F2D329DEE84971F4F60379A4A3ED27BFCEC
Authority key identifier: C1:D7:B4:D4:77:65:03:EA:D0:63:C1:F2:B7:49:88:14:CC:25:98:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1D7B4D4776503EAD063C1F2B7498814CC2598BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaTnimA75AzPmXN7SS36PbzagoFnghVxjiRux2MKEnfC/0/3230312e3135382e35362e302f32322d3332203d3e203631383130.roa
Signing time:             Thu 07 Nov 2024 14:04:49 +0000
ROA not before:           Thu 07 Nov 2024 13:59:49 +0000
ROA not after:            Thu 06 Nov 2025 14:04:49 +0000
asID:                     61810
IP address blocks:        201.158.56.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HaTnimA75AzPmXN7SS36PbzagoFnghVxjiRux2MKEnfC/0/C1D7B4D4776503EAD063C1F2B7498814CC2598BE.crl
                          rsync://rpki-repo.registro.br/repo/HaTnimA75AzPmXN7SS36PbzagoFnghVxjiRux2MKEnfC/0/C1D7B4D4776503EAD063C1F2B7498814CC2598BE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1D7B4D4776503EAD063C1F2B7498814CC2598BE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 18:25:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:70:4f:2d:32:9d:ee:84:97:1f:4f:60:37:9a:4a:3e:d2:7b:fc:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1D7B4D4776503EAD063C1F2B7498814CC2598BE
        Validity
            Not Before: Nov  7 13:59:49 2024 GMT
            Not After : Nov  6 14:04:49 2025 GMT
        Subject: CN=1850D60A601BDF4223D7EE8431BC80A7F8649CE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:55:95:af:2f:44:ba:95:60:f1:11:55:7b:57:
                    7e:63:0e:d7:8b:25:a2:ff:b6:51:a2:d6:47:a9:c7:
                    98:c0:92:4e:0a:11:ec:cb:db:3e:22:54:32:90:65:
                    01:dd:b1:14:c5:e4:51:4a:88:e0:06:2f:e5:eb:aa:
                    fd:74:40:c7:94:29:0b:c0:34:d7:fb:05:60:cb:ca:
                    1a:38:34:fd:5e:8f:21:96:ed:bf:10:46:76:d4:4d:
                    6b:6f:a9:12:e6:26:fd:43:3e:72:a7:7c:1c:c2:ce:
                    6a:63:0e:7f:5f:02:dc:4c:f5:a9:0c:94:96:50:38:
                    4e:44:22:7a:b4:7b:97:a8:ce:d6:8e:e1:ce:ca:ae:
                    80:d9:63:dc:fc:a5:ca:14:0a:dd:41:ce:35:0a:1b:
                    61:9d:d8:8f:5b:99:e4:7c:33:a5:68:1f:ef:b1:fb:
                    07:ba:06:7b:e1:32:cf:aa:7f:2e:87:04:0e:c0:da:
                    07:59:b1:71:96:e4:0d:50:4b:b2:b7:7f:a6:75:98:
                    d7:b4:81:4d:5e:ce:9a:a2:a2:94:c6:0e:24:10:79:
                    1d:52:98:d1:f4:76:7c:60:38:51:ba:cb:21:73:f7:
                    a0:81:8f:ac:8b:a0:66:fb:44:7b:58:78:04:67:6b:
                    48:c3:59:27:49:ca:f0:32:ff:82:ea:c8:7e:33:50:
                    86:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:50:D6:0A:60:1B:DF:42:23:D7:EE:84:31:BC:80:A7:F8:64:9C:E3
            X509v3 Authority Key Identifier:
                keyid:C1:D7:B4:D4:77:65:03:EA:D0:63:C1:F2:B7:49:88:14:CC:25:98:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaTnimA75AzPmXN7SS36PbzagoFnghVxjiRux2MKEnfC/0/C1D7B4D4776503EAD063C1F2B7498814CC2598BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1D7B4D4776503EAD063C1F2B7498814CC2598BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaTnimA75AzPmXN7SS36PbzagoFnghVxjiRux2MKEnfC/0/3230312e3135382e35362e302f32322d3332203d3e203631383130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.158.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:be:c6:ee:7f:08:ed:b6:aa:26:e0:ef:8b:4b:2c:ef:31:6a:
         fc:b9:a1:30:24:dc:d5:b7:96:35:f7:80:21:d4:4a:c1:f7:24:
         f1:cc:d4:56:b1:1e:db:91:5a:56:5b:54:6d:8b:f6:a6:b2:6c:
         a7:da:b8:b3:fe:6d:78:86:18:d9:73:3d:f8:d3:d4:2b:86:b7:
         51:04:55:71:08:db:cf:1c:5c:6c:f8:49:77:5a:61:e9:93:2b:
         d2:8e:27:53:d6:4c:0d:b2:db:c1:0e:2d:26:02:93:7c:ce:b3:
         d2:ad:9d:26:f8:b6:1f:2c:22:e5:d5:fa:bd:4b:cd:cf:09:c6:
         89:61:b7:60:57:e1:a4:81:b8:1e:8a:ed:63:20:53:2d:21:69:
         63:df:9a:33:a7:36:71:17:59:e5:c9:db:5d:86:f1:79:e9:f7:
         c6:41:35:6d:c5:00:03:e7:7d:d0:32:50:4a:87:c4:16:96:65:
         ed:21:e2:e7:63:8d:6b:c2:1f:0a:62:11:fe:af:32:c3:32:c2:
         7d:14:2c:6c:de:b9:69:73:bc:df:c4:f6:0c:b0:10:70:15:2d:
         96:e7:59:a2:b8:ba:d3:36:be:06:b7:d3:72:77:30:a1:cc:85:
         d9:38:be:4c:95:31:c4:3c:ac:d2:1b:8d:eb:9d:e1:4a:a1:8f:
         d7:0f:67:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:43:32 2024 by rpki-client on console-ams.rpki-client.org