Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/1/3230302e35322e3232392e302f32342d3234203d3e20323731303138.roa
File:                     3230302e35322e3232392e302f32342d3234203d3e20323731303138.roa (raw, json)
Hash identifier:          131jdeI7O6QnDRaAiMDmm7LZxDA7GuHhWGi4k5jgqag=
Subject key identifier:   88:1A:90:97:91:6A:1C:4D:1A:BE:31:18:A1:01:D5:56:35:E6:5D:12
Certificate issuer:       /CN=EBEA1A61631F1E68C28E0457230DB74CDB16F7F3
Certificate serial:       2B5E769F5B83CC72E5F5DE761A224F5F60135189
Authority key identifier: EB:EA:1A:61:63:1F:1E:68:C2:8E:04:57:23:0D:B7:4C:DB:16:F7:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBEA1A61631F1E68C28E0457230DB74CDB16F7F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/1/3230302e35322e3232392e302f32342d3234203d3e20323731303138.roa
Signing time:             Fri 05 Apr 2024 01:41:02 +0000
ROA not before:           Fri 05 Apr 2024 01:36:02 +0000
ROA not after:            Fri 04 Apr 2025 01:41:02 +0000
asID:                     271018
IP address blocks:        200.52.229.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/1/EBEA1A61631F1E68C28E0457230DB74CDB16F7F3.crl
                          rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/1/EBEA1A61631F1E68C28E0457230DB74CDB16F7F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBEA1A61631F1E68C28E0457230DB74CDB16F7F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 16:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:5e:76:9f:5b:83:cc:72:e5:f5:de:76:1a:22:4f:5f:60:13:51:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBEA1A61631F1E68C28E0457230DB74CDB16F7F3
        Validity
            Not Before: Apr  5 01:36:02 2024 GMT
            Not After : Apr  4 01:41:02 2025 GMT
        Subject: CN=881A9097916A1C4D1ABE3118A101D55635E65D12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:80:61:76:fe:20:4d:a0:eb:68:9f:b5:ef:23:
                    8e:fa:ad:29:c2:9f:ca:f9:18:f6:be:75:f6:9d:b0:
                    21:92:6f:ba:68:58:92:d0:fc:c6:1f:84:f4:9c:f8:
                    21:18:fa:78:d1:55:f1:a6:c9:99:9f:a2:57:8c:6a:
                    73:de:fb:09:89:ed:ca:bd:1d:ea:6c:87:21:7d:05:
                    46:b5:ba:0a:50:2f:98:38:ee:86:83:fc:57:bd:41:
                    a9:83:41:5c:d8:3e:08:c0:db:87:18:54:cc:9a:4e:
                    5a:08:fb:5d:d9:11:81:9b:46:54:4e:5d:7a:d4:2a:
                    87:e7:d4:37:9b:86:c6:62:a1:06:a7:f8:5f:f0:84:
                    26:df:c3:5c:7a:bb:ab:7a:02:82:8c:bc:62:52:96:
                    28:3e:e5:b0:30:32:bf:2c:48:17:cd:74:d0:ad:2b:
                    fc:7c:77:61:8c:94:a5:58:de:24:e7:e1:6a:29:66:
                    40:ea:3b:f6:64:b4:45:dc:b4:aa:78:a0:63:17:b0:
                    8d:d3:97:3d:82:ad:72:99:e1:a8:0f:6f:97:1e:53:
                    59:fc:00:ae:ac:a5:2c:d0:68:e1:03:01:bc:57:6a:
                    bc:f4:29:79:ea:6b:05:ab:04:53:ec:1e:01:5d:d4:
                    69:d5:0e:17:9f:4c:1a:a6:30:9e:a6:7d:0a:90:42:
                    19:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:1A:90:97:91:6A:1C:4D:1A:BE:31:18:A1:01:D5:56:35:E6:5D:12
            X509v3 Authority Key Identifier:
                keyid:EB:EA:1A:61:63:1F:1E:68:C2:8E:04:57:23:0D:B7:4C:DB:16:F7:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/1/EBEA1A61631F1E68C28E0457230DB74CDB16F7F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBEA1A61631F1E68C28E0457230DB74CDB16F7F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/1/3230302e35322e3232392e302f32342d3234203d3e20323731303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.52.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:2c:49:20:1c:2d:df:fb:16:4a:e0:85:80:7f:f3:cc:d9:5c:
         c2:38:69:74:a4:54:20:4a:73:28:9e:db:4b:27:68:21:a0:79:
         59:0c:a8:a1:cb:61:40:ce:84:35:a8:bc:58:15:48:04:7c:0d:
         ad:09:46:4a:ca:43:0f:40:1e:75:6b:03:a9:ba:04:95:12:a5:
         4b:3e:0f:bd:fc:d3:bc:4e:68:2e:39:07:aa:aa:02:b5:69:22:
         29:ba:80:6e:40:65:d0:07:53:66:61:a3:38:c3:34:de:cb:75:
         86:91:e2:19:a5:74:7f:11:4d:90:1c:87:44:8d:0c:40:c3:67:
         97:9b:73:be:64:61:43:99:3b:d9:b0:df:fe:5a:8c:f5:7b:f5:
         dc:ef:5b:da:a0:f2:71:51:66:18:db:2e:e3:7f:ec:0c:b2:0e:
         a0:8b:4f:9e:eb:5a:2a:43:0b:6f:46:db:5d:9d:03:55:64:65:
         ce:af:92:a7:10:e1:ec:ba:3f:df:ec:77:5e:03:b4:b2:e9:1d:
         de:19:8d:32:d4:33:f6:e2:16:8c:c7:71:70:af:59:77:44:f6:
         11:ce:b1:33:4c:a4:90:eb:d9:9a:7b:1e:4b:c9:52:ba:05:83:
         48:e9:b9:d9:70:2f:cc:2d:e8:c1:bb:99:4d:a8:33:e2:63:70:
         7e:e9:2e:a3
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUK152n1uDzHLl9d52GiJPX2ATUYkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUJFQTFBNjE2MzFGMUU2OEMyOEUwNDU3MjMwREI3NENE
QjE2RjdGMzAeFw0yNDA0MDUwMTM2MDJaFw0yNTA0MDQwMTQxMDJaMDMxMTAvBgNV
BAMTKDg4MUE5MDk3OTE2QTFDNEQxQUJFMzExOEExMDFENTU2MzVFNjVEMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCngGF2/iBNoOton7XvI476rSnC
n8r5GPa+dfadsCGSb7poWJLQ/MYfhPSc+CEY+njRVfGmyZmfoleManPe+wmJ7cq9
HepshyF9BUa1ugpQL5g47oaD/Fe9QamDQVzYPgjA24cYVMyaTloI+13ZEYGbRlRO
XXrUKofn1DebhsZioQan+F/whCbfw1x6u6t6AoKMvGJSlig+5bAwMr8sSBfNdNCt
K/x8d2GMlKVY3iTn4WopZkDqO/ZktEXctKp4oGMXsI3Tlz2CrXKZ4agPb5ceU1n8
AK6spSzQaOEDAbxXarz0KXnqawWrBFPsHgFd1GnVDhefTBqmMJ6mfQqQQhkpAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUiBqQl5FqHE0avjEYoQHVVjXmXRIwHwYDVR0j
BBgwFoAU6+oaYWMfHmjCjgRXIw23TNsW9/MwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9Od1ZiM3dKTEtnVFVmcmVZOWVnVTZ5NE5aQUsxSzY0Vnh1TjZIbTVmd2kx
LzEvRUJFQTFBNjE2MzFGMUU2OEMyOEUwNDU3MjMwREI3NENEQjE2RjdGMy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FQkVBMUE2MTYzMUYxRTY4QzI4
RTA0NTcyMzBEQjc0Q0RCMTZGN0YzLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9O
d1ZiM3dKTEtnVFVmcmVZOWVnVTZ5NE5aQUsxSzY0Vnh1TjZIbTVmd2kxLzEvMzIz
MDMwMmUzNTMyMmUzMjMyMzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzEz
MDMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBADINOUwDQYJKoZIhvcNAQELBQADggEBAGAsSSAcLd/7
FkrghYB/88zZXMI4aXSkVCBKcyie20snaCGgeVkMqKHLYUDOhDWovFgVSAR8Da0J
RkrKQw9AHnVrA6m6BJUSpUs+D73807xOaC45B6qqArVpIim6gG5AZdAHU2ZhozjD
NN7LdYaR4hmldH8RTZAch0SNDEDDZ5ebc75kYUOZO9mw3/5ajPV79dzvW9qg8nFR
ZhjbLuN/7AyyDqCLT57rWipDC29G212dA1VkZc6vkqcQ4ey6P9/sd14DtLLpHd4Z
jTLUM/biFozHcXCvWXdE9hHOsTNMpJDr2Zp7HkvJUroFg0jpudlwL8wt6MG7mU2o
M+JjcH7pLqM=
-----END CERTIFICATE-----
Generated at Fri Jun 28 17:08:33 2024 by rpki-client on console-ams.rpki-client.org