Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230312e32332e3232342e302f31392d3234203d3e203231353731.roa
File:                     3230312e32332e3232342e302f31392d3234203d3e203231353731.roa (raw, json)
Hash identifier:          aJt5KcVgywepi/rt8lby+b4i47dckb/FKTktULU0NTs=
Subject key identifier:   36:99:B9:E6:F0:D2:71:D0:54:49:F7:57:97:E8:71:A9:86:78:7C:D3
Certificate issuer:       /CN=552126A6BDB915F04BAB3D1940E642DAAE814C60
Certificate serial:       4FFD24F8D0D25D6B0972859CD8655747CF9D181C
Authority key identifier: 55:21:26:A6:BD:B9:15:F0:4B:AB:3D:19:40:E6:42:DA:AE:81:4C:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/552126A6BDB915F04BAB3D1940E642DAAE814C60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230312e32332e3232342e302f31392d3234203d3e203231353731.roa
Signing time:             Mon 25 Nov 2024 20:23:48 +0000
ROA not before:           Mon 25 Nov 2024 20:18:48 +0000
ROA not after:            Mon 24 Nov 2025 20:23:48 +0000
asID:                     21571
IP address blocks:        201.23.224.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/552126A6BDB915F04BAB3D1940E642DAAE814C60.crl
                          rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/552126A6BDB915F04BAB3D1940E642DAAE814C60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/552126A6BDB915F04BAB3D1940E642DAAE814C60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:fd:24:f8:d0:d2:5d:6b:09:72:85:9c:d8:65:57:47:cf:9d:18:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552126A6BDB915F04BAB3D1940E642DAAE814C60
        Validity
            Not Before: Nov 25 20:18:48 2024 GMT
            Not After : Nov 24 20:23:48 2025 GMT
        Subject: CN=3699B9E6F0D271D05449F75797E871A986787CD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:9d:9a:6f:10:e2:c9:43:4c:3d:4e:07:37:d0:
                    ce:ca:85:98:de:61:b0:e6:59:af:34:98:53:8e:b4:
                    8d:e7:c7:14:d0:79:da:99:d8:89:ed:8a:5f:27:1f:
                    b2:a0:e7:d1:fe:be:b9:66:8c:89:40:b0:55:f7:0f:
                    57:01:2c:7b:8d:77:99:a8:b5:b9:bb:63:71:bd:30:
                    b7:9d:11:3c:fd:cf:50:4c:cc:dc:5c:7d:e5:14:eb:
                    a7:aa:9e:49:32:fd:3d:56:f0:6f:df:42:af:22:eb:
                    13:66:e7:1f:4f:57:a8:fc:13:69:84:a5:ee:ea:0c:
                    55:1f:ce:cb:9e:e7:c3:eb:e6:ee:e9:91:7e:6e:da:
                    84:b1:64:7b:82:48:27:17:d7:93:1c:e2:1f:dc:39:
                    21:1b:4f:74:7f:ca:30:9f:c1:08:64:97:23:d1:d9:
                    a2:ef:77:8f:67:4b:07:80:b3:03:d7:9e:61:54:38:
                    0d:57:bb:8e:a6:c0:86:60:59:b8:71:80:36:28:7f:
                    e5:41:33:25:6f:35:09:9d:50:a3:8b:ea:67:10:b0:
                    3a:64:48:6f:7e:37:c8:af:44:66:40:b4:4b:be:69:
                    25:bd:e9:e8:05:67:a0:ca:be:32:ba:f4:9a:0a:56:
                    10:3f:ec:ff:dd:57:8b:41:fd:4d:94:3e:9c:b5:c6:
                    03:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:99:B9:E6:F0:D2:71:D0:54:49:F7:57:97:E8:71:A9:86:78:7C:D3
            X509v3 Authority Key Identifier:
                keyid:55:21:26:A6:BD:B9:15:F0:4B:AB:3D:19:40:E6:42:DA:AE:81:4C:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/552126A6BDB915F04BAB3D1940E642DAAE814C60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/552126A6BDB915F04BAB3D1940E642DAAE814C60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230312e32332e3232342e302f31392d3234203d3e203231353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.23.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         52:57:9b:1f:3f:09:9c:cb:f3:72:32:27:21:3a:9b:1d:af:0c:
         ac:39:9e:94:ca:c3:b8:ee:af:3b:01:e6:2f:39:da:08:02:8e:
         8d:55:84:e1:b6:55:64:a9:c4:25:7e:ff:fd:9f:2b:d1:ad:aa:
         b4:7b:8f:e7:37:b3:c4:10:bc:ca:d2:9e:ad:9b:d2:51:23:0c:
         7b:76:50:5e:4c:d7:8e:8e:fc:9e:4a:27:2d:ea:52:a0:70:6a:
         6a:76:f9:2f:ab:d3:29:7a:ad:19:57:79:ec:db:aa:68:4d:ec:
         14:48:6d:f9:9f:98:fa:81:a8:4b:f8:ce:64:23:e3:00:3f:38:
         b5:c6:62:43:e8:a8:fe:87:83:f1:17:95:60:49:62:80:43:ea:
         74:34:dc:a6:bd:59:fc:9e:89:21:a9:bd:d7:e9:29:91:60:b3:
         13:82:aa:ba:5d:9e:35:1c:c3:62:64:12:4f:b0:10:9a:cc:09:
         af:da:49:1d:8a:a4:ae:12:0f:ca:bd:ee:83:66:8b:de:ab:ec:
         99:07:1a:67:8f:d9:69:c0:36:fc:b8:31:a4:0a:de:32:6b:10:
         32:0b:85:4c:1c:6b:68:28:17:de:af:72:53:97:3b:0b:dd:20:
         21:3a:04:46:37:63:16:95:09:a2:94:c0:94:71:b6:3a:a2:42:
         1c:e1:aa:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:03:00 2024 by rpki-client on console-fra.rpki-client.org