Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e39362e302f32302d3235203d3e203231353731.roa
File:                     3230302e3135322e39362e302f32302d3235203d3e203231353731.roa (raw, json)
Hash identifier:          IsJNzEJip7a7OsaKQ9+wHQsMWFDh7PlvHDfJcF5mYYI=
Subject key identifier:   A1:E2:F3:03:39:E1:16:72:59:FB:12:8F:38:14:B8:5E:3C:05:FF:8B
Certificate issuer:       /CN=552126A6BDB915F04BAB3D1940E642DAAE814C60
Certificate serial:       2D9DC3F9783D5A3795ABFE678345C674DA3969B3
Authority key identifier: 55:21:26:A6:BD:B9:15:F0:4B:AB:3D:19:40:E6:42:DA:AE:81:4C:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/552126A6BDB915F04BAB3D1940E642DAAE814C60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e39362e302f32302d3235203d3e203231353731.roa
Signing time:             Mon 25 Nov 2024 19:27:43 +0000
ROA not before:           Mon 25 Nov 2024 19:22:43 +0000
ROA not after:            Mon 24 Nov 2025 19:27:43 +0000
asID:                     21571
IP address blocks:        200.152.96.0/20 maxlen: 25

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/552126A6BDB915F04BAB3D1940E642DAAE814C60.crl
                          rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/552126A6BDB915F04BAB3D1940E642DAAE814C60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/552126A6BDB915F04BAB3D1940E642DAAE814C60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:36:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:9d:c3:f9:78:3d:5a:37:95:ab:fe:67:83:45:c6:74:da:39:69:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552126A6BDB915F04BAB3D1940E642DAAE814C60
        Validity
            Not Before: Nov 25 19:22:43 2024 GMT
            Not After : Nov 24 19:27:43 2025 GMT
        Subject: CN=A1E2F30339E1167259FB128F3814B85E3C05FF8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1c:0b:9e:53:fa:ac:e0:fd:09:ef:0c:5c:13:
                    d8:7a:10:b5:e1:82:21:1f:c1:62:47:2e:85:bd:2c:
                    0e:0c:44:2d:35:fe:12:3b:46:c0:2d:f4:5b:ee:42:
                    11:b4:eb:38:46:f5:95:dc:c9:fd:4c:9f:2b:9f:af:
                    f3:0a:17:51:1a:3e:6e:0a:1d:e1:20:92:14:b0:5f:
                    76:bf:38:fe:af:94:3e:f1:6a:7b:46:f7:7a:f8:6a:
                    80:a5:55:30:8e:88:52:7f:7f:92:9f:71:e2:fa:25:
                    55:e4:17:38:19:6f:04:5f:03:f2:83:64:cc:9b:1c:
                    ee:6c:27:77:bc:e6:cb:7f:42:35:0f:ed:09:47:71:
                    de:7f:77:ad:fd:77:0f:bb:e9:44:0d:b7:99:2f:31:
                    f9:9d:09:c1:dc:e1:9c:7e:9d:b4:d7:ee:fc:8d:1a:
                    43:1a:d6:fc:de:ef:15:4b:f5:1f:54:aa:50:e6:be:
                    60:ba:6e:51:42:25:96:4b:32:46:01:8a:da:e6:4e:
                    ad:60:a1:5f:c9:fe:62:20:a6:ad:8f:38:94:44:a0:
                    c1:4c:2b:c5:62:fe:4f:f2:59:0e:a0:31:ae:1d:93:
                    3e:91:4b:f1:3e:c0:42:02:52:fa:0c:91:79:9e:34:
                    79:a4:19:cc:ea:48:d3:56:13:94:66:fe:d9:ed:34:
                    da:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:E2:F3:03:39:E1:16:72:59:FB:12:8F:38:14:B8:5E:3C:05:FF:8B
            X509v3 Authority Key Identifier:
                keyid:55:21:26:A6:BD:B9:15:F0:4B:AB:3D:19:40:E6:42:DA:AE:81:4C:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/552126A6BDB915F04BAB3D1940E642DAAE814C60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/552126A6BDB915F04BAB3D1940E642DAAE814C60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230302e3135322e39362e302f32302d3235203d3e203231353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a0:b1:f7:ae:2e:bf:09:6b:dd:6b:ca:b9:a2:e3:bd:2f:46:4e:
         43:4d:c1:17:61:96:42:d1:0e:0b:db:7b:53:1e:3b:f4:19:c7:
         1d:4d:c7:99:45:93:ce:d0:fe:62:03:b6:23:4b:45:f4:e2:de:
         0d:2d:e1:a4:6b:68:41:4c:23:1a:47:a4:ce:97:cb:66:55:22:
         fd:56:df:1e:65:7d:d9:02:85:81:db:00:58:b3:ec:3a:08:e6:
         d8:b2:63:22:25:70:a4:a0:27:e4:3a:cd:e7:ec:b5:cb:9d:c0:
         13:01:3b:b6:92:7c:85:79:f0:b5:90:a7:27:79:81:4d:e4:8a:
         8a:81:1f:14:e6:00:8c:95:71:e4:7a:92:fb:61:9b:91:9e:05:
         b2:1c:14:38:17:d3:1c:ba:66:08:66:c3:b8:51:71:16:95:3f:
         8f:56:cf:47:81:09:34:26:be:bd:5e:58:71:18:da:87:2d:1d:
         b0:bd:bf:d1:e8:35:de:dc:42:0b:bc:4b:c2:4c:68:c4:94:d5:
         63:e9:d9:ca:87:b7:fd:cb:e2:9b:1b:7e:1b:3e:ce:61:3d:b0:
         50:7a:31:4c:47:27:8f:18:a5:a2:9b:63:fc:44:1a:f6:47:58:
         7c:d1:26:e7:f5:0b:a8:a8:04:7e:c5:f6:66:04:a2:0d:ee:3b:
         6b:0b:01:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:31:53 2024 by rpki-client on console-ams.rpki-client.org