Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4FsHYPbVJBKvd2wf55jUHYa8v2PHjN5Cj8W62KyAwL3p/0/3230302e3231352e3234302e302f32342d3234203d3e20323730363134.roa
File:                     3230302e3231352e3234302e302f32342d3234203d3e20323730363134.roa (raw, json)
Hash identifier:          /w+UTjNDvuzSwcEgotSVjIdyewvJucvVDDRRAkeQuNk=
Subject key identifier:   9E:63:C6:B9:58:7A:3A:8D:93:F0:D8:C3:75:72:C0:4B:E6:AA:E8:D1
Certificate issuer:       /CN=8688B4FDDDBEB800A5969D7ADEDCD084034F4906
Certificate serial:       1F3FD928939C5B3587EBD513ACED58102C291F35
Authority key identifier: 86:88:B4:FD:DD:BE:B8:00:A5:96:9D:7A:DE:DC:D0:84:03:4F:49:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8688B4FDDDBEB800A5969D7ADEDCD084034F4906.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4FsHYPbVJBKvd2wf55jUHYa8v2PHjN5Cj8W62KyAwL3p/0/3230302e3231352e3234302e302f32342d3234203d3e20323730363134.roa
Signing time:             Tue 23 Apr 2024 19:21:21 +0000
ROA not before:           Tue 23 Apr 2024 19:16:21 +0000
ROA not after:            Tue 22 Apr 2025 19:21:21 +0000
asID:                     270614
IP address blocks:        200.215.240.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4FsHYPbVJBKvd2wf55jUHYa8v2PHjN5Cj8W62KyAwL3p/0/8688B4FDDDBEB800A5969D7ADEDCD084034F4906.crl
                          rsync://rpki-repo.registro.br/repo/4FsHYPbVJBKvd2wf55jUHYa8v2PHjN5Cj8W62KyAwL3p/0/8688B4FDDDBEB800A5969D7ADEDCD084034F4906.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8688B4FDDDBEB800A5969D7ADEDCD084034F4906.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 13:36:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:3f:d9:28:93:9c:5b:35:87:eb:d5:13:ac:ed:58:10:2c:29:1f:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8688B4FDDDBEB800A5969D7ADEDCD084034F4906
        Validity
            Not Before: Apr 23 19:16:21 2024 GMT
            Not After : Apr 22 19:21:21 2025 GMT
        Subject: CN=9E63C6B9587A3A8D93F0D8C37572C04BE6AAE8D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8f:84:7a:fe:67:ee:ed:b7:bf:a5:05:4a:5c:
                    a1:e3:ec:05:9e:2c:98:85:b7:90:50:39:39:6f:43:
                    54:d3:1c:8b:c6:b7:09:68:58:43:78:b2:45:59:54:
                    5b:3b:70:e3:e7:fd:3d:77:f5:31:9f:d1:16:78:8f:
                    d1:b2:6e:ea:b1:e7:47:0b:f2:c9:27:ee:c3:89:c6:
                    37:05:90:c7:70:7c:98:7e:48:68:01:45:79:0a:68:
                    7f:7d:6b:c5:28:9d:2e:d2:fa:6f:19:fb:58:af:9f:
                    32:98:75:e6:b7:52:9d:05:34:d8:58:9a:30:fa:7f:
                    dd:e4:8c:d0:e8:ba:11:ad:e2:0f:bc:97:31:0e:25:
                    cc:75:b4:0d:58:28:94:f0:e9:96:7f:eb:21:ae:ba:
                    8a:a4:bc:8f:b6:ff:ef:e4:1a:ea:58:89:32:4f:ef:
                    88:a7:d4:e5:72:b3:53:50:e2:72:d9:5c:8f:4f:f0:
                    85:7f:08:87:69:90:58:1c:be:4a:3c:6c:3f:24:b2:
                    02:db:c5:89:b0:73:de:e8:2f:3d:97:e2:55:2d:43:
                    34:2b:09:86:ce:6b:04:b2:fa:1c:05:d8:0a:0d:88:
                    a1:d5:89:58:50:5a:d1:b8:cf:85:86:30:7d:a3:75:
                    54:c8:1a:e0:6b:d5:c9:81:ce:05:54:99:5d:4b:61:
                    0e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:63:C6:B9:58:7A:3A:8D:93:F0:D8:C3:75:72:C0:4B:E6:AA:E8:D1
            X509v3 Authority Key Identifier:
                keyid:86:88:B4:FD:DD:BE:B8:00:A5:96:9D:7A:DE:DC:D0:84:03:4F:49:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4FsHYPbVJBKvd2wf55jUHYa8v2PHjN5Cj8W62KyAwL3p/0/8688B4FDDDBEB800A5969D7ADEDCD084034F4906.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8688B4FDDDBEB800A5969D7ADEDCD084034F4906.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4FsHYPbVJBKvd2wf55jUHYa8v2PHjN5Cj8W62KyAwL3p/0/3230302e3231352e3234302e302f32342d3234203d3e20323730363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.215.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:57:33:29:ac:2f:ad:cc:56:fc:6b:c1:0b:cb:ff:25:d0:c2:
         8f:60:d4:f9:25:b8:ea:f6:3c:a3:6d:8c:00:1c:af:26:43:f6:
         40:94:39:e6:96:03:40:ae:c9:76:9b:97:67:c9:61:14:4d:c5:
         0e:ed:c6:5d:5f:18:a2:27:05:e4:42:88:f8:9d:e9:3f:b8:7a:
         f7:2d:7e:5e:96:12:6b:0d:15:8b:22:a0:48:8a:6b:38:07:3b:
         68:b1:51:3d:df:f8:78:e7:db:73:7b:78:c2:86:80:0b:af:6c:
         31:ca:51:49:b1:1d:70:a3:21:a9:da:18:46:34:87:3e:ba:21:
         75:65:44:a9:78:c1:72:bb:ef:fc:54:24:8e:3e:44:02:e9:ce:
         70:e6:9c:ed:54:0e:08:e5:2c:72:72:4e:74:13:d9:d8:e0:b2:
         40:cd:c5:84:58:4c:86:47:ae:de:bc:a2:91:98:ce:98:18:5c:
         24:44:9b:c1:af:c9:26:67:95:62:31:79:e7:44:36:87:5f:cf:
         ef:de:35:b0:ce:59:cc:3f:f1:91:d2:f1:d8:90:c9:b3:10:75:
         05:ac:3d:10:e8:a5:d4:dd:4e:54:8d:42:60:fe:57:49:54:e6:
         34:57:13:d3:85:97:36:8b:bf:11:df:c1:ac:b5:6c:af:73:6d:
         b2:f2:f8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 14:42:37 2024 by rpki-client on console-ams.rpki-client.org