Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J4B76xgG4Yme91gGrMLsrYMpPjZgFRbWQQJnqUgcXjRL/1/3230312e3138322e3231392e302f32342d3234203d3e20323637353430.roa
File:                     3230312e3138322e3231392e302f32342d3234203d3e20323637353430.roa (raw, json)
Hash identifier:          JWOxGRqSdr6gP/zVmxbpWunT1/NIBj1UP6w5/WpAyf4=
Subject key identifier:   9F:4F:8C:1B:01:9E:4A:D3:FA:7C:1E:44:62:EA:3F:09:84:A7:4C:52
Certificate issuer:       /CN=0BA72FE6026E6A9D29C970C9BA50C497455A4CD1
Certificate serial:       5CDAB56346206C9CF8795190DC4B6FFE160A54A9
Authority key identifier: 0B:A7:2F:E6:02:6E:6A:9D:29:C9:70:C9:BA:50:C4:97:45:5A:4C:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BA72FE6026E6A9D29C970C9BA50C497455A4CD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4B76xgG4Yme91gGrMLsrYMpPjZgFRbWQQJnqUgcXjRL/1/3230312e3138322e3231392e302f32342d3234203d3e20323637353430.roa
Signing time:             Thu 04 Apr 2024 16:33:52 +0000
ROA not before:           Thu 04 Apr 2024 16:28:52 +0000
ROA not after:            Thu 03 Apr 2025 16:33:52 +0000
asID:                     267540
IP address blocks:        201.182.219.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J4B76xgG4Yme91gGrMLsrYMpPjZgFRbWQQJnqUgcXjRL/1/0BA72FE6026E6A9D29C970C9BA50C497455A4CD1.crl
                          rsync://rpki-repo.registro.br/repo/J4B76xgG4Yme91gGrMLsrYMpPjZgFRbWQQJnqUgcXjRL/1/0BA72FE6026E6A9D29C970C9BA50C497455A4CD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BA72FE6026E6A9D29C970C9BA50C497455A4CD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 14:56:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:da:b5:63:46:20:6c:9c:f8:79:51:90:dc:4b:6f:fe:16:0a:54:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BA72FE6026E6A9D29C970C9BA50C497455A4CD1
        Validity
            Not Before: Apr  4 16:28:52 2024 GMT
            Not After : Apr  3 16:33:52 2025 GMT
        Subject: CN=9F4F8C1B019E4AD3FA7C1E4462EA3F0984A74C52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ce:65:ea:78:67:30:e5:c0:97:4d:61:b1:96:
                    10:33:85:7a:69:4b:e2:57:1f:b9:31:7d:08:f9:50:
                    b6:ba:77:be:0d:06:f8:28:48:fa:b5:4c:8a:2e:a6:
                    3f:76:20:36:bd:dd:21:a2:70:5c:f4:10:31:64:51:
                    cb:85:24:ff:f6:60:b4:0d:19:15:9a:44:6c:a1:73:
                    0a:96:fe:e0:21:64:47:b5:b1:56:34:ed:18:2f:9a:
                    c3:85:4a:63:e3:13:0b:78:c7:ae:06:ea:4b:55:df:
                    11:1b:77:7a:90:9d:35:fd:be:99:27:9c:7b:1a:0f:
                    68:6f:c3:3c:54:e8:be:ad:ed:d9:d3:5a:40:f9:a5:
                    f1:f4:1e:4d:fc:7c:c0:45:e5:ac:0f:88:a1:74:a5:
                    0c:9c:a0:9a:16:0e:ee:c6:19:31:65:47:d8:cc:7e:
                    3d:67:73:61:f5:1c:b9:dc:71:5e:85:ab:8f:b2:84:
                    8c:39:98:17:ee:06:c6:18:e9:47:14:6a:63:69:34:
                    94:db:2c:86:d3:4b:70:b0:b2:1e:a5:87:6e:63:31:
                    f0:42:38:c4:64:b7:6b:1f:ab:52:26:2e:ed:8a:13:
                    20:3c:e5:7d:b3:19:99:48:65:9c:ed:3a:8b:18:55:
                    a6:06:c3:c4:95:22:d8:1b:72:dd:ab:92:fb:5c:23:
                    f4:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:4F:8C:1B:01:9E:4A:D3:FA:7C:1E:44:62:EA:3F:09:84:A7:4C:52
            X509v3 Authority Key Identifier:
                keyid:0B:A7:2F:E6:02:6E:6A:9D:29:C9:70:C9:BA:50:C4:97:45:5A:4C:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4B76xgG4Yme91gGrMLsrYMpPjZgFRbWQQJnqUgcXjRL/1/0BA72FE6026E6A9D29C970C9BA50C497455A4CD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BA72FE6026E6A9D29C970C9BA50C497455A4CD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4B76xgG4Yme91gGrMLsrYMpPjZgFRbWQQJnqUgcXjRL/1/3230312e3138322e3231392e302f32342d3234203d3e20323637353430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:f6:22:75:7c:89:a1:7b:b7:13:14:0e:c1:ec:55:43:d9:7b:
         cc:6e:56:14:f2:9e:8f:d3:50:4d:60:81:89:f1:2b:01:f6:f8:
         d1:54:aa:5e:05:24:21:9f:fa:18:df:d6:b5:4a:7f:96:cb:98:
         d1:84:b9:f0:1a:d5:7b:39:e8:f8:08:61:e6:47:64:e2:39:ec:
         31:d5:99:be:ea:09:90:47:0d:ba:19:33:fa:77:98:fe:df:fc:
         58:a5:2e:c3:c7:9b:b2:f3:19:6f:5d:bb:b2:4a:da:88:fd:2e:
         6d:b0:f5:39:25:0c:f0:95:c3:f6:a1:e1:d1:f3:b5:d1:17:10:
         bd:b4:87:35:63:40:02:4d:7d:aa:3a:b8:f1:4c:a8:34:62:f7:
         11:5d:ba:90:a2:5c:44:a4:43:78:8b:e4:4e:d0:0d:72:4f:0e:
         8b:43:e7:27:2e:aa:3d:0c:f3:e4:81:e7:c7:16:19:ef:5b:8c:
         b3:95:53:5d:24:94:2f:8d:88:20:6e:6c:30:84:27:eb:45:ff:
         3c:d7:b9:e4:d1:41:9a:63:ae:64:a1:6f:18:3b:9e:2a:91:66:
         75:2f:02:4d:89:9b:9f:1c:c6:1a:f6:00:04:c1:bc:f2:89:dc:
         08:b0:59:63:f6:d6:90:12:62:77:fe:a9:90:79:f8:7f:b2:04:
         83:22:a4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 17:08:33 2024 by rpki-client on console-ams.rpki-client.org