Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/0/3230302e35332e31362e302f32302d3234203d3e20323632333931.roa
File:                     3230302e35332e31362e302f32302d3234203d3e20323632333931.roa (raw, json)
Hash identifier:          U7P9y1T0Hv7YdZku/307Agixf0bRMk0FM5CUH3Ca07k=
Subject key identifier:   8D:DA:DD:BF:10:90:9A:43:8B:F2:6B:C5:5C:12:08:9D:E1:75:F4:7D
Certificate issuer:       /CN=4EED9818567EF67A561AEB24FB9C960FF884B0BB
Certificate serial:       569AE8B43601F9CF29167487B655BB58617D2BD8
Authority key identifier: 4E:ED:98:18:56:7E:F6:7A:56:1A:EB:24:FB:9C:96:0F:F8:84:B0:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EED9818567EF67A561AEB24FB9C960FF884B0BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/0/3230302e35332e31362e302f32302d3234203d3e20323632333931.roa
Signing time:             Wed 14 Aug 2024 01:06:12 +0000
ROA not before:           Wed 14 Aug 2024 01:01:12 +0000
ROA not after:            Wed 13 Aug 2025 01:06:12 +0000
asID:                     262391
IP address blocks:        200.53.16.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/0/4EED9818567EF67A561AEB24FB9C960FF884B0BB.crl
                          rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/0/4EED9818567EF67A561AEB24FB9C960FF884B0BB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EED9818567EF67A561AEB24FB9C960FF884B0BB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 20:38:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:9a:e8:b4:36:01:f9:cf:29:16:74:87:b6:55:bb:58:61:7d:2b:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EED9818567EF67A561AEB24FB9C960FF884B0BB
        Validity
            Not Before: Aug 14 01:01:12 2024 GMT
            Not After : Aug 13 01:06:12 2025 GMT
        Subject: CN=8DDADDBF10909A438BF26BC55C12089DE175F47D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b0:4e:80:e5:16:54:5f:d8:8c:cc:f4:62:cf:
                    4b:f1:4a:19:94:d6:c1:20:39:84:04:8d:52:6f:53:
                    db:9b:44:d1:0b:78:a2:b6:12:ea:82:70:95:cc:21:
                    dc:fb:f5:8d:87:30:3e:40:08:8f:b1:0c:c8:a7:c2:
                    d9:ad:3d:a4:74:fb:55:db:e3:d2:2d:d8:1a:65:a5:
                    51:df:38:a8:d1:8e:5a:77:dc:b7:0e:4e:80:32:fa:
                    8d:02:c3:1b:77:ff:69:f3:37:71:9a:57:4c:e2:0a:
                    14:f5:26:f2:b3:36:31:e5:98:9b:9f:be:b1:44:cb:
                    66:4c:1a:ab:22:b3:84:67:a1:37:3f:2e:d6:a2:d5:
                    2d:ff:93:fd:9f:eb:bb:7b:c5:5a:ab:47:3c:a2:f6:
                    3d:c2:f0:2e:a9:0b:16:ca:d9:9f:ad:dc:bb:55:bf:
                    c4:47:c8:06:e5:e5:89:1b:0d:4c:2c:5d:4e:b1:d9:
                    7c:13:a4:2f:94:cf:32:be:d2:b4:b0:86:16:a1:ff:
                    81:2d:54:81:69:ca:3d:38:87:9a:fc:19:d5:c6:73:
                    cd:b3:49:39:ee:60:39:27:2a:57:fe:5c:a3:f7:bc:
                    cd:34:c0:02:0b:51:3e:5e:16:be:bf:d1:97:64:f9:
                    b1:6a:fc:48:e1:a8:f9:57:d7:49:f8:b9:66:89:17:
                    64:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:DA:DD:BF:10:90:9A:43:8B:F2:6B:C5:5C:12:08:9D:E1:75:F4:7D
            X509v3 Authority Key Identifier:
                keyid:4E:ED:98:18:56:7E:F6:7A:56:1A:EB:24:FB:9C:96:0F:F8:84:B0:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/0/4EED9818567EF67A561AEB24FB9C960FF884B0BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EED9818567EF67A561AEB24FB9C960FF884B0BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/0/3230302e35332e31362e302f32302d3234203d3e20323632333931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         50:bb:dc:4a:a1:68:26:7f:7e:b5:0d:19:c9:c1:fe:24:d5:1d:
         e3:3e:c8:05:5a:ad:13:b9:a4:78:38:62:b1:ef:e8:b9:e9:e1:
         c7:1a:49:00:ed:12:dc:3c:8a:b0:24:44:45:38:41:87:be:a9:
         af:1c:62:71:c9:76:4e:fc:3b:eb:16:a8:76:7e:a0:21:a7:f7:
         9b:a1:ff:d4:54:e6:1b:01:c8:eb:43:06:4e:25:03:27:c2:88:
         90:df:4f:3f:74:bd:06:c9:d6:27:e8:89:31:56:1b:34:29:4c:
         d2:72:17:a6:18:d8:23:7f:4d:9b:28:1d:2a:95:4d:cd:a1:5e:
         26:d4:0b:0d:d5:b6:2d:d3:04:ea:d2:c1:04:9d:74:75:37:fb:
         31:b8:ea:f6:0a:8b:b1:7b:d8:dd:71:41:17:98:e1:a2:4c:ff:
         fc:34:e4:5a:09:40:86:a3:4f:28:1c:17:57:90:ec:37:93:33:
         4f:61:22:1a:58:f9:85:d0:2e:5f:49:d2:b1:97:26:51:ed:6c:
         1e:d7:07:2f:da:25:5f:a0:b6:88:3b:bf:38:d2:f3:19:03:13:
         89:1c:fd:11:1c:21:4e:2a:6c:d9:88:21:3a:d1:02:fa:30:24:
         83:ec:c2:da:87:d0:79:51:24:a2:9b:7e:a5:a5:46:b1:24:ed:
         60:ee:30:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:03:02 2024 by rpki-client on console-fra.rpki-client.org