Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/3230312e3231362e38382e302f32342d3234203d3e20323731373236.roa
File:                     3230312e3231362e38382e302f32342d3234203d3e20323731373236.roa (raw, json)
Hash identifier:          r0whVN0rDFxYYxwMnAiBG6BICisszwEPpPkU/IG9ZT0=
Subject key identifier:   76:67:31:21:84:30:55:0A:0C:7B:C1:2D:0C:46:60:35:C2:46:83:56
Certificate issuer:       /CN=E4A60880B8D4EC0024322D87A27CBCBDC2192A65
Certificate serial:       384CE7000ADD6EEA027233B19B9367BB9E9F9814
Authority key identifier: E4:A6:08:80:B8:D4:EC:00:24:32:2D:87:A2:7C:BC:BD:C2:19:2A:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/3230312e3231362e38382e302f32342d3234203d3e20323731373236.roa
Signing time:             Fri 06 Sep 2024 02:56:59 +0000
ROA not before:           Fri 06 Sep 2024 02:51:59 +0000
ROA not after:            Fri 05 Sep 2025 02:56:59 +0000
asID:                     271726
IP address blocks:        201.216.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.crl
                          rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:4c:e7:00:0a:dd:6e:ea:02:72:33:b1:9b:93:67:bb:9e:9f:98:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4A60880B8D4EC0024322D87A27CBCBDC2192A65
        Validity
            Not Before: Sep  6 02:51:59 2024 GMT
            Not After : Sep  5 02:56:59 2025 GMT
        Subject: CN=766731218430550A0C7BC12D0C466035C2468356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:36:63:1f:e2:50:41:f7:e7:82:fc:8c:52:8f:
                    c9:e4:18:4c:c6:3a:34:4d:fb:70:d1:19:2f:95:bf:
                    60:c7:ff:c1:e5:e8:49:ef:de:a0:6a:cd:0b:f0:2d:
                    0b:73:90:65:b2:04:ed:aa:ca:12:2a:e9:38:20:a5:
                    de:fd:9f:12:2a:c2:58:e6:ce:0f:1f:b6:dd:d4:9b:
                    16:b3:c1:fc:a5:4c:3e:b6:66:e5:97:f4:18:4f:31:
                    9b:cf:00:ed:c0:0a:1f:7f:63:c0:25:58:72:83:18:
                    7f:26:eb:f0:bc:e2:da:8c:08:a0:49:28:5b:a9:4a:
                    b9:4d:bd:09:73:8b:d5:71:05:68:41:80:a0:6b:b0:
                    0a:ae:cd:4a:36:70:b2:d2:95:79:91:d5:ed:19:ba:
                    e7:dc:2d:99:8f:ca:3c:41:90:05:a6:74:8f:ac:ef:
                    92:09:54:49:26:20:56:38:77:10:0c:da:51:c2:d5:
                    e9:16:1b:87:b6:7d:9e:87:64:ae:b1:92:1f:6c:91:
                    c9:bc:ba:d5:75:9c:4a:5f:7c:b7:4c:95:9b:b5:69:
                    30:8c:25:0a:e5:a0:45:f0:1c:81:ee:92:65:d9:cd:
                    d7:e2:aa:c1:a0:66:3e:9d:f7:e7:ed:22:8e:dc:ef:
                    57:b4:89:68:be:46:ce:a5:cf:9a:7a:51:bb:1f:3e:
                    4c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:67:31:21:84:30:55:0A:0C:7B:C1:2D:0C:46:60:35:C2:46:83:56
            X509v3 Authority Key Identifier:
                keyid:E4:A6:08:80:B8:D4:EC:00:24:32:2D:87:A2:7C:BC:BD:C2:19:2A:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/3230312e3231362e38382e302f32342d3234203d3e20323731373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:7a:40:04:f3:d2:47:3b:15:ff:b7:af:f4:03:b9:d9:d0:41:
         e9:ea:c3:a9:ed:bd:9f:cc:26:2c:73:7e:18:fe:9a:9e:16:69:
         60:99:61:92:45:9e:54:35:e5:d4:51:61:95:b1:26:d4:b6:e9:
         b0:5f:97:40:48:77:44:73:c2:e6:5b:a6:c5:fb:62:5d:00:d5:
         0d:ec:33:5b:2d:9a:76:3d:81:18:66:d8:1f:60:5c:ee:ba:a7:
         c2:2b:80:12:e2:8f:ab:2c:86:65:1c:8a:2a:0e:17:00:d6:60:
         5b:c4:a2:d1:c9:d9:7c:f0:01:76:e8:f4:53:a8:8c:4b:c8:2d:
         54:0e:a4:ff:e1:1e:0c:4c:c1:8f:7f:e3:1d:b6:c3:4b:8b:de:
         71:06:4c:3c:92:01:0c:a7:aa:d6:1f:73:3f:a6:96:7e:03:f0:
         e6:a2:c0:17:bd:c5:59:82:d3:ec:99:b1:6c:70:2d:af:4a:a2:
         67:b1:8e:38:ad:58:09:09:c4:5f:8a:b7:83:0f:60:87:e8:a8:
         75:d6:af:c8:9c:28:b2:60:36:d6:f7:ae:c7:42:de:62:27:82:
         b6:69:8c:02:65:21:40:42:2e:99:c5:1f:bb:eb:25:1e:50:07:
         76:8c:37:80:fc:57:8b:77:5e:03:fb:48:fb:da:c6:ef:5b:e0:
         0a:94:db:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:13 2024 by rpki-client on console-fra.rpki-client.org