Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/fXi5U94Hx8jnfcCT8H3MyQqaYtJYmrKx2GmC74boMtY/0/3230302e3130362e3137362e302f32322d3332203d3e20323731323632.roa
File:                     3230302e3130362e3137362e302f32322d3332203d3e20323731323632.roa (raw, json)
Hash identifier:          NmFVCr+5AJjSW6/yy7KHPWm16NGCxanfVuOnrfXAmms=
Subject key identifier:   F0:19:E2:28:85:70:DF:B0:58:3C:6A:89:13:C2:CC:B4:17:A0:5C:E2
Certificate issuer:       /CN=9E17AE12E54FEC7BF015C94EBD811062D85D7047
Certificate serial:       8B27647FCCD88CA260A89C513D9D6B6133D4E8
Authority key identifier: 9E:17:AE:12:E5:4F:EC:7B:F0:15:C9:4E:BD:81:10:62:D8:5D:70:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E17AE12E54FEC7BF015C94EBD811062D85D7047.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/fXi5U94Hx8jnfcCT8H3MyQqaYtJYmrKx2GmC74boMtY/0/3230302e3130362e3137362e302f32322d3332203d3e20323731323632.roa
Signing time:             Thu 11 Jul 2024 15:22:35 +0000
ROA not before:           Thu 11 Jul 2024 15:17:35 +0000
ROA not after:            Thu 10 Jul 2025 15:22:35 +0000
asID:                     271262
IP address blocks:        200.106.176.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/fXi5U94Hx8jnfcCT8H3MyQqaYtJYmrKx2GmC74boMtY/0/9E17AE12E54FEC7BF015C94EBD811062D85D7047.crl
                          rsync://rpki-repo.registro.br/repo/fXi5U94Hx8jnfcCT8H3MyQqaYtJYmrKx2GmC74boMtY/0/9E17AE12E54FEC7BF015C94EBD811062D85D7047.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E17AE12E54FEC7BF015C94EBD811062D85D7047.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 02:40:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            8b:27:64:7f:cc:d8:8c:a2:60:a8:9c:51:3d:9d:6b:61:33:d4:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E17AE12E54FEC7BF015C94EBD811062D85D7047
        Validity
            Not Before: Jul 11 15:17:35 2024 GMT
            Not After : Jul 10 15:22:35 2025 GMT
        Subject: CN=F019E2288570DFB0583C6A8913C2CCB417A05CE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d2:50:67:ac:f3:04:a1:55:c0:80:86:7f:a6:
                    00:e9:be:99:33:e1:16:f8:5e:d3:42:c2:da:79:2a:
                    ff:a4:66:ce:8b:53:85:9d:2c:f1:fa:cd:da:96:f1:
                    bc:08:7d:f5:68:7a:e0:c8:51:ad:a3:1d:3e:41:18:
                    06:a1:c8:a7:77:03:80:0f:aa:3e:fd:be:c6:a9:de:
                    c9:5d:3d:3f:7e:dc:1e:d6:c0:b1:65:27:20:32:db:
                    0b:9a:f2:34:a7:41:f7:dd:81:d5:46:11:36:99:c2:
                    48:74:46:d2:20:d0:4a:ba:f6:53:b5:7d:d8:d4:cd:
                    c5:bf:7f:00:9d:ad:36:f3:99:b5:13:db:a7:6c:93:
                    42:f1:d3:64:56:76:1d:c7:21:de:c1:f4:29:24:54:
                    14:ec:da:a9:ad:e9:0b:21:34:9f:ce:99:72:3f:b0:
                    e8:01:4a:c1:4b:0b:b6:39:da:ff:15:db:e7:a2:43:
                    ad:dd:14:01:bf:dd:d3:49:a7:a2:86:b0:fd:35:7a:
                    38:27:59:59:22:a8:96:2a:ab:37:e0:9c:51:13:e3:
                    1f:f2:28:51:a9:7a:b3:4e:57:78:55:b4:fa:3b:5d:
                    7a:fb:a5:f5:24:80:28:99:06:35:e7:30:18:05:8f:
                    a2:cd:b6:35:b6:90:a0:e5:03:2c:21:b0:0b:5d:fa:
                    17:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:19:E2:28:85:70:DF:B0:58:3C:6A:89:13:C2:CC:B4:17:A0:5C:E2
            X509v3 Authority Key Identifier:
                keyid:9E:17:AE:12:E5:4F:EC:7B:F0:15:C9:4E:BD:81:10:62:D8:5D:70:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/fXi5U94Hx8jnfcCT8H3MyQqaYtJYmrKx2GmC74boMtY/0/9E17AE12E54FEC7BF015C94EBD811062D85D7047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E17AE12E54FEC7BF015C94EBD811062D85D7047.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/fXi5U94Hx8jnfcCT8H3MyQqaYtJYmrKx2GmC74boMtY/0/3230302e3130362e3137362e302f32322d3332203d3e20323731323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:9b:52:57:b0:26:d0:ac:93:78:d3:f9:18:8c:1e:56:43:2c:
         29:bd:b1:1a:3a:a2:2e:8d:45:cc:66:e8:85:0a:13:35:88:55:
         f5:f5:35:45:37:ca:72:b2:59:a0:93:a0:81:34:6c:4e:c1:fb:
         a1:fd:45:85:db:05:d7:bb:ba:e8:67:9a:3d:4e:c3:e0:28:fe:
         16:16:27:94:78:ab:02:c0:62:e7:f3:2d:68:84:fa:2d:13:86:
         6a:ff:90:94:06:da:c9:e1:71:07:68:12:9a:64:b5:d9:27:26:
         45:be:75:aa:46:f4:c8:8d:5d:24:2e:0a:69:14:5c:56:e6:57:
         4c:a9:38:ff:bb:11:2b:0e:3e:ac:90:6d:82:66:5b:ed:26:23:
         e6:66:d4:eb:3a:9b:8a:bf:6f:dc:f9:c1:6d:13:6b:39:95:21:
         6c:fa:b1:16:c1:69:8c:be:dd:a3:0b:a5:0e:4f:7b:1b:00:1f:
         4f:6c:fe:29:b7:92:d2:09:37:a2:ea:7a:3e:2b:0d:f9:a7:0a:
         f3:f6:62:e0:52:b0:50:ee:aa:db:92:b2:91:2d:e6:fc:f7:ae:
         5b:a9:cb:7a:d1:6f:52:42:7c:67:3e:2f:6c:5e:e2:48:0c:bb:
         f6:b0:d2:94:bc:c8:b9:92:05:a2:a3:a0:87:86:64:44:68:65:
         73:20:60:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:25:43 2024 by rpki-client on console-ams.rpki-client.org