Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/3230312e3231362e39302e302f32342d3234203d3e20323731373236.roa
File:                     3230312e3231362e39302e302f32342d3234203d3e20323731373236.roa (raw, json)
Hash identifier:          5aVKKAEd/Q4m7f73lCTPzt2sNBq5FG4ROhiR4C/nWAg=
Subject key identifier:   A5:57:96:34:7B:38:D4:65:02:90:D9:0B:23:98:B9:73:EF:6F:71:EC
Certificate issuer:       /CN=E4A60880B8D4EC0024322D87A27CBCBDC2192A65
Certificate serial:       3B5D0C1CFD30EB0F1FB9F01D6A6AA94AEDF9D456
Authority key identifier: E4:A6:08:80:B8:D4:EC:00:24:32:2D:87:A2:7C:BC:BD:C2:19:2A:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/3230312e3231362e39302e302f32342d3234203d3e20323731373236.roa
Signing time:             Fri 06 Sep 2024 02:57:07 +0000
ROA not before:           Fri 06 Sep 2024 02:52:07 +0000
ROA not after:            Fri 05 Sep 2025 02:57:07 +0000
asID:                     271726
IP address blocks:        201.216.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.crl
                          rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 10:43:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:5d:0c:1c:fd:30:eb:0f:1f:b9:f0:1d:6a:6a:a9:4a:ed:f9:d4:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4A60880B8D4EC0024322D87A27CBCBDC2192A65
        Validity
            Not Before: Sep  6 02:52:07 2024 GMT
            Not After : Sep  5 02:57:07 2025 GMT
        Subject: CN=A55796347B38D4650290D90B2398B973EF6F71EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e7:6c:a3:47:8f:eb:75:12:14:2b:fb:94:75:
                    3f:44:e7:2e:f2:ec:5b:cc:ca:a9:94:31:f8:fa:cc:
                    3e:e3:4e:a7:1c:58:0f:a4:31:46:d5:dd:21:1d:fc:
                    39:b3:c7:65:38:49:36:51:a5:c9:f2:cc:37:90:bb:
                    47:5d:b7:41:97:7c:8a:0c:55:39:14:4a:4d:c8:79:
                    39:41:bd:d8:84:a9:e1:43:a4:67:e0:30:ef:68:03:
                    bc:8c:7c:40:e6:ae:2a:ff:34:7c:2f:3c:83:a2:7a:
                    b6:ee:79:2d:11:b9:f5:7d:2e:9b:68:f8:5e:ba:a1:
                    0d:00:a5:f4:14:7e:f8:5e:7b:fb:e6:5a:24:2c:3b:
                    a9:e7:57:80:19:f5:00:24:67:c5:93:6c:22:e5:ae:
                    69:1b:ef:a7:ab:3f:91:56:75:8e:7e:3a:16:70:c4:
                    07:85:35:dc:ca:c2:3c:de:71:75:f4:bc:53:88:81:
                    d2:47:7d:6b:8f:0c:4e:89:88:8b:31:54:3a:ef:60:
                    09:f9:28:29:19:4e:75:7a:15:85:2d:39:f0:0b:ed:
                    88:c9:41:66:4a:1b:ae:cf:0c:a5:4d:ca:b1:53:b5:
                    1d:fd:fa:3a:d1:7d:32:68:05:bb:6a:fa:7c:57:df:
                    96:50:31:54:21:ef:23:27:e2:30:eb:f6:32:90:04:
                    69:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:57:96:34:7B:38:D4:65:02:90:D9:0B:23:98:B9:73:EF:6F:71:EC
            X509v3 Authority Key Identifier:
                keyid:E4:A6:08:80:B8:D4:EC:00:24:32:2D:87:A2:7C:BC:BD:C2:19:2A:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/3230312e3231362e39302e302f32342d3234203d3e20323731373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:33:ad:7b:9f:73:89:59:e4:aa:50:cd:d7:10:a3:fd:ab:08:
         4b:5e:d3:8d:a2:ab:41:91:83:16:c4:98:04:dc:0a:c1:0c:fb:
         13:69:c8:ee:fb:41:10:6a:70:62:cc:f9:96:ea:8d:a7:6f:6e:
         68:52:30:e4:81:22:7f:d0:52:2f:73:03:1b:46:34:68:bb:a0:
         c7:f7:8f:60:12:6c:8a:85:ba:69:a8:5e:4d:60:01:2f:ef:9e:
         fb:ef:3f:9d:28:da:ce:dd:54:f2:e5:20:88:c9:2b:41:6a:be:
         55:ac:dd:08:cb:ad:b9:4b:84:bb:61:02:bf:09:0f:a6:1e:d8:
         3d:ee:4c:e1:02:a3:59:b1:f8:b0:56:52:68:30:32:73:6d:10:
         ba:39:6b:6a:ac:62:d1:b1:41:23:18:c1:49:5e:71:c4:4c:a2:
         65:ca:ca:6a:84:5e:26:f9:c6:eb:f1:10:ee:53:1f:88:78:0b:
         1f:0b:38:75:45:f5:aa:f2:31:f7:85:39:ce:e5:fb:58:cc:e3:
         c1:bf:ae:b5:89:74:ca:6c:09:99:85:79:e7:d7:c5:12:92:48:
         04:31:8f:83:61:fe:cd:3d:4a:2f:96:96:4c:0c:0b:94:e2:cc:
         17:53:ef:16:51:4c:44:32:eb:67:2b:86:da:61:57:4a:b9:87:
         85:68:69:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:08:12 2025 by rpki-client