Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e3131322e302f32302d3235203d3e203231353731.roa
File:                     3230302e3135322e3131322e302f32302d3235203d3e203231353731.roa (raw, json)
Hash identifier:          H7EVag325W9tiBizzOTNiF/wLzq1NKICk3BZHCNxKCw=
Subject key identifier:   2E:67:05:3C:73:7A:EE:0A:F8:47:A5:38:6C:3E:02:2E:90:3C:AF:20
Certificate issuer:       /CN=552126A6BDB915F04BAB3D1940E642DAAE814C60
Certificate serial:       63A6B77576CC52A73562D8312E4A04142DAA6764
Authority key identifier: 55:21:26:A6:BD:B9:15:F0:4B:AB:3D:19:40:E6:42:DA:AE:81:4C:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/552126A6BDB915F04BAB3D1940E642DAAE814C60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e3131322e302f32302d3235203d3e203231353731.roa
Signing time:             Mon 25 Nov 2024 19:29:00 +0000
ROA not before:           Mon 25 Nov 2024 19:24:00 +0000
ROA not after:            Mon 24 Nov 2025 19:29:00 +0000
asID:                     21571
IP address blocks:        200.152.112.0/20 maxlen: 25

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/552126A6BDB915F04BAB3D1940E642DAAE814C60.crl
                          rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/552126A6BDB915F04BAB3D1940E642DAAE814C60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/552126A6BDB915F04BAB3D1940E642DAAE814C60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:36:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:a6:b7:75:76:cc:52:a7:35:62:d8:31:2e:4a:04:14:2d:aa:67:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552126A6BDB915F04BAB3D1940E642DAAE814C60
        Validity
            Not Before: Nov 25 19:24:00 2024 GMT
            Not After : Nov 24 19:29:00 2025 GMT
        Subject: CN=2E67053C737AEE0AF847A5386C3E022E903CAF20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:68:27:c1:ca:2e:bf:2f:79:74:c2:41:5a:02:
                    fa:e2:59:6e:6b:d1:ad:36:da:7f:dd:42:53:e1:d2:
                    23:86:f5:0d:e7:2d:7d:5f:50:1c:a5:fa:bf:ac:fa:
                    52:4d:97:c6:0e:74:32:99:53:e3:2c:34:4c:44:b8:
                    64:b5:af:24:96:19:76:2c:22:42:f0:35:ae:8f:7d:
                    c2:e0:78:a0:f0:d7:b3:65:c6:43:53:77:0c:dd:3c:
                    06:98:2d:39:4d:34:4b:f6:c7:97:a0:df:ee:b4:97:
                    af:95:b9:00:1f:d6:a0:6f:d2:ac:af:05:88:e8:e5:
                    3d:ac:8f:a6:cf:a7:fa:f5:ca:84:d6:08:34:37:cc:
                    61:48:88:af:fc:e8:cc:cc:4b:15:eb:64:5b:90:89:
                    d1:ad:90:17:86:f6:48:9e:4a:dd:7a:75:ee:e7:4c:
                    bc:9b:51:4f:a3:e7:c1:15:41:18:c6:55:36:7c:3f:
                    9c:8a:7c:54:c5:6f:23:16:64:c5:96:5b:b0:c8:f6:
                    b3:7f:19:7c:1a:dd:85:e6:3e:c2:da:aa:95:e6:94:
                    1c:a5:39:da:6e:5c:bd:57:92:d0:02:06:df:f9:39:
                    fd:e5:4d:b2:ab:8c:68:f0:41:37:d8:6d:5b:45:e2:
                    08:e8:d1:41:cf:6b:d1:71:04:d8:06:b9:77:f3:71:
                    8d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:67:05:3C:73:7A:EE:0A:F8:47:A5:38:6C:3E:02:2E:90:3C:AF:20
            X509v3 Authority Key Identifier:
                keyid:55:21:26:A6:BD:B9:15:F0:4B:AB:3D:19:40:E6:42:DA:AE:81:4C:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/552126A6BDB915F04BAB3D1940E642DAAE814C60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/552126A6BDB915F04BAB3D1940E642DAAE814C60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e3131322e302f32302d3235203d3e203231353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         61:bd:1e:19:20:66:21:55:9c:3c:69:0f:b8:13:50:5f:98:bf:
         91:e4:03:29:04:a5:5a:d3:f8:c7:70:d7:09:e6:69:a7:77:ea:
         d1:3f:b7:ef:d8:b3:95:33:c8:5b:6c:50:a3:21:6f:00:43:18:
         61:99:41:1c:f4:2b:c5:2c:d6:ad:c4:64:7a:bb:e5:0b:a8:94:
         8c:73:60:b6:90:42:e3:be:83:fc:c6:78:89:a5:c2:e4:ff:d7:
         7c:b2:ac:04:78:44:ec:0e:5d:d3:e8:e7:fe:dc:9e:b1:e3:9d:
         fc:08:9c:30:82:46:be:33:d3:62:e6:8d:15:b2:99:a4:84:a7:
         9d:d6:b5:a2:da:80:a6:51:86:e8:67:24:40:b6:e5:1b:ab:aa:
         eb:97:20:d9:e4:bd:aa:a8:2b:dc:21:bf:b7:cf:cd:10:99:63:
         80:96:20:73:c0:5e:01:6d:f9:dd:e1:41:fc:3b:3b:11:ed:f8:
         3a:0c:a9:8f:02:f3:cf:94:d9:58:6b:0e:4d:72:c8:ff:89:09:
         9a:ad:67:43:df:40:16:d1:2d:24:07:c6:d5:c8:b0:0a:32:21:
         fa:9b:6b:17:9f:38:93:e8:3a:b7:62:5d:e0:ca:89:9b:f7:1c:
         6d:68:fd:22:d1:92:13:98:6f:19:ff:03:a3:94:eb:48:09:93:
         ba:69:c2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:31:53 2024 by rpki-client on console-ams.rpki-client.org