Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/1/3230302e35322e3232382e302f32342d3235203d3e20323731303138.roa
File:                     3230302e35322e3232382e302f32342d3235203d3e20323731303138.roa (raw, json)
Hash identifier:          C96WxamtpDWuWuwZ/F0IfEmZP1B/qxQ8hcjE2vH94+w=
Subject key identifier:   78:7F:32:3F:E7:90:E8:3A:E3:AC:DD:B7:1B:BE:45:7B:C6:5B:D9:A3
Certificate issuer:       /CN=EBEA1A61631F1E68C28E0457230DB74CDB16F7F3
Certificate serial:       187EADAFAC64F949E11D09F77DD583F554C72B84
Authority key identifier: EB:EA:1A:61:63:1F:1E:68:C2:8E:04:57:23:0D:B7:4C:DB:16:F7:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBEA1A61631F1E68C28E0457230DB74CDB16F7F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/1/3230302e35322e3232382e302f32342d3235203d3e20323731303138.roa
Signing time:             Fri 05 Apr 2024 01:41:01 +0000
ROA not before:           Fri 05 Apr 2024 01:36:01 +0000
ROA not after:            Fri 04 Apr 2025 01:41:01 +0000
asID:                     271018
IP address blocks:        200.52.228.0/24 maxlen: 25

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/1/EBEA1A61631F1E68C28E0457230DB74CDB16F7F3.crl
                          rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/1/EBEA1A61631F1E68C28E0457230DB74CDB16F7F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBEA1A61631F1E68C28E0457230DB74CDB16F7F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:10:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:7e:ad:af:ac:64:f9:49:e1:1d:09:f7:7d:d5:83:f5:54:c7:2b:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBEA1A61631F1E68C28E0457230DB74CDB16F7F3
        Validity
            Not Before: Apr  5 01:36:01 2024 GMT
            Not After : Apr  4 01:41:01 2025 GMT
        Subject: CN=787F323FE790E83AE3ACDDB71BBE457BC65BD9A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:0f:cc:ac:b1:ba:3d:66:34:8f:7e:5f:4c:e9:
                    f2:bb:aa:22:7d:5d:54:88:0e:a5:e6:b4:e7:07:b4:
                    74:f6:ef:39:7b:c1:1d:03:6e:c4:f2:44:e8:81:2d:
                    05:04:1e:ca:36:4a:b8:6e:55:d5:34:d7:c6:7c:89:
                    8c:99:39:93:13:cd:e5:be:57:2a:f6:6e:72:af:00:
                    e4:c1:94:50:aa:e2:fc:0a:6c:d6:6a:a1:1b:b7:df:
                    4b:2e:a3:68:42:73:3b:c3:47:8d:48:6c:a7:5b:72:
                    65:93:03:7d:59:82:2c:84:73:d0:21:4e:5b:26:94:
                    af:76:a4:b4:ea:94:af:b0:a2:6f:4a:81:7a:a6:a9:
                    79:9c:53:e6:de:2c:93:b6:20:e4:15:73:84:93:c5:
                    88:a2:9c:7f:e6:6e:ab:6b:da:f6:6e:0d:9d:0d:7e:
                    5d:ce:a3:1b:53:e1:fc:a5:2c:ed:70:fb:69:da:46:
                    d7:71:e7:b4:04:1a:5e:bf:b9:2f:29:c5:6a:92:e1:
                    31:64:65:da:8f:7e:db:ae:8f:63:9b:85:1c:6d:27:
                    c2:1e:a6:46:b1:5d:67:2e:5c:5f:12:76:64:c2:24:
                    df:07:81:87:6b:c3:d1:9a:76:32:d1:00:b4:fa:7a:
                    57:3c:3d:55:a7:78:33:52:95:08:eb:1f:5d:2b:f3:
                    07:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:7F:32:3F:E7:90:E8:3A:E3:AC:DD:B7:1B:BE:45:7B:C6:5B:D9:A3
            X509v3 Authority Key Identifier:
                keyid:EB:EA:1A:61:63:1F:1E:68:C2:8E:04:57:23:0D:B7:4C:DB:16:F7:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/1/EBEA1A61631F1E68C28E0457230DB74CDB16F7F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBEA1A61631F1E68C28E0457230DB74CDB16F7F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/1/3230302e35322e3232382e302f32342d3235203d3e20323731303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.52.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:c5:8b:c4:a4:1b:be:70:90:27:d9:06:bc:80:ad:c3:0a:4a:
         e1:91:dd:4d:dd:47:e5:c8:fe:5f:86:32:69:c8:c1:10:2b:9a:
         67:dc:55:f7:bd:c8:60:fd:7b:84:12:d4:c8:39:c8:0f:f4:dc:
         9e:91:2a:28:49:c6:ac:04:ab:74:ca:91:22:98:26:52:d4:c4:
         51:88:5c:3e:1f:04:f7:81:cf:ac:85:9a:c2:32:37:fb:6e:ba:
         b8:02:b7:90:e0:56:86:30:72:12:1d:ea:b4:68:7b:21:82:40:
         66:82:84:3e:27:9b:2d:ec:2d:9a:a2:d1:7f:96:de:69:86:f0:
         ac:a8:2d:8b:84:2a:98:14:3f:87:01:1c:f9:ae:82:38:0e:6d:
         6d:5c:37:46:21:24:96:85:f3:62:8d:cd:80:55:c0:a7:be:cf:
         9c:f9:d8:45:32:5c:ed:37:37:92:96:ea:53:48:6a:66:48:83:
         09:1a:31:23:94:f7:97:a2:92:2c:50:27:e8:a0:27:34:61:cd:
         60:8b:2d:c0:d6:25:d6:c1:ae:a3:e8:c5:97:b3:56:40:a1:29:
         de:3c:80:3e:ff:da:38:cb:4a:57:4a:81:1e:b9:27:df:92:c4:
         10:55:8e:94:a6:8e:01:65:29:dd:38:c4:51:29:e2:3c:3c:94:
         ff:44:4f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:35 2024 by rpki-client on console-fra.rpki-client.org