Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hgGAdCbS3u5VtXfhrv6omPLXyrGYAA3aketkL2ZZiy4/1/3230302e3139362e3230382e302f32342d3234203d3e20333936393832.roa
File:                     3230302e3139362e3230382e302f32342d3234203d3e20333936393832.roa (raw, json)
Hash identifier:          AC25/A+Mz4cYvmJguXWi1gaOwNusczfK6gCROvZEtOE=
Subject key identifier:   9E:A6:61:07:FE:C2:AF:A3:C9:3D:DB:D7:49:F1:64:6F:51:02:4C:3E
Certificate issuer:       /CN=591A5E28538FC2E6A42ED311941B9D128D78D596
Certificate serial:       6A0FE3ED4D9C2239F8E5660BD5743308597701DF
Authority key identifier: 59:1A:5E:28:53:8F:C2:E6:A4:2E:D3:11:94:1B:9D:12:8D:78:D5:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/591A5E28538FC2E6A42ED311941B9D128D78D596.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hgGAdCbS3u5VtXfhrv6omPLXyrGYAA3aketkL2ZZiy4/1/3230302e3139362e3230382e302f32342d3234203d3e20333936393832.roa
Signing time:             Thu 04 Apr 2024 18:19:04 +0000
ROA not before:           Thu 04 Apr 2024 18:14:04 +0000
ROA not after:            Thu 03 Apr 2025 18:19:04 +0000
asID:                     396982
IP address blocks:        200.196.208.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8hgGAdCbS3u5VtXfhrv6omPLXyrGYAA3aketkL2ZZiy4/1/591A5E28538FC2E6A42ED311941B9D128D78D596.crl
                          rsync://rpki-repo.registro.br/repo/8hgGAdCbS3u5VtXfhrv6omPLXyrGYAA3aketkL2ZZiy4/1/591A5E28538FC2E6A42ED311941B9D128D78D596.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/591A5E28538FC2E6A42ED311941B9D128D78D596.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 16:51:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:0f:e3:ed:4d:9c:22:39:f8:e5:66:0b:d5:74:33:08:59:77:01:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=591A5E28538FC2E6A42ED311941B9D128D78D596
        Validity
            Not Before: Apr  4 18:14:04 2024 GMT
            Not After : Apr  3 18:19:04 2025 GMT
        Subject: CN=9EA66107FEC2AFA3C93DDBD749F1646F51024C3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5c:3c:df:1e:e3:07:14:02:58:60:0e:40:19:
                    c4:ea:3f:c8:1e:6b:48:3e:ec:b9:e9:e7:6a:52:9f:
                    b0:48:ab:92:44:2f:ea:b8:62:93:39:9b:fd:df:5e:
                    d2:92:c9:5c:f5:1d:3d:d5:04:a1:10:90:2d:15:b8:
                    8d:6b:5f:43:49:df:1d:54:8b:c2:93:c4:51:44:0e:
                    83:50:1f:09:8a:11:14:c0:28:68:7e:a9:c9:57:cc:
                    e0:9f:5a:6e:d1:79:c5:bf:2f:e1:ba:0a:f3:1d:7d:
                    03:61:82:50:17:a1:31:65:81:95:e8:24:e5:59:4d:
                    8f:3f:bd:11:9f:63:0e:66:0b:2c:5f:5d:31:43:cc:
                    ba:6f:7f:0c:21:f9:8e:b0:a5:b5:52:6a:0b:6d:2c:
                    74:1a:ba:3a:51:bc:c8:a0:db:1e:fe:4d:9f:23:dc:
                    86:3b:ca:54:14:46:1d:78:27:b0:36:fa:c8:0c:89:
                    15:8a:a5:24:86:83:2b:f6:c2:cf:44:f8:83:35:09:
                    74:a6:b0:09:e7:6e:15:d2:ca:22:2b:ec:fb:34:ba:
                    2b:e0:50:ae:cd:bf:cd:2a:eb:fa:5e:8f:53:60:ed:
                    cd:b8:97:86:59:61:bb:be:b3:8d:dd:5d:d0:30:29:
                    66:4d:86:a7:f1:17:24:3e:69:cf:1b:73:22:11:f9:
                    44:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:A6:61:07:FE:C2:AF:A3:C9:3D:DB:D7:49:F1:64:6F:51:02:4C:3E
            X509v3 Authority Key Identifier:
                keyid:59:1A:5E:28:53:8F:C2:E6:A4:2E:D3:11:94:1B:9D:12:8D:78:D5:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hgGAdCbS3u5VtXfhrv6omPLXyrGYAA3aketkL2ZZiy4/1/591A5E28538FC2E6A42ED311941B9D128D78D596.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/591A5E28538FC2E6A42ED311941B9D128D78D596.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hgGAdCbS3u5VtXfhrv6omPLXyrGYAA3aketkL2ZZiy4/1/3230302e3139362e3230382e302f32342d3234203d3e20333936393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.196.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:2b:c8:7f:6e:36:a1:41:88:42:fd:a6:e9:04:fc:f8:21:44:
         c8:fb:7a:9c:7b:52:19:92:4d:1f:4c:e2:11:3d:7c:8d:fe:8f:
         c6:8e:99:08:05:25:a2:aa:3f:2c:2d:ab:ce:c9:e3:09:8a:59:
         f5:a7:4c:82:20:c5:a9:cd:5e:b1:b6:8f:06:44:53:f8:66:0f:
         15:27:ff:08:67:26:fa:63:21:8d:be:3c:a6:84:0a:9e:d7:32:
         19:37:c1:dd:53:e3:da:6e:f7:d5:13:77:71:b9:a9:3d:7e:cf:
         c4:1c:86:db:35:5b:20:b5:13:65:61:c2:79:5f:c5:e5:96:3b:
         79:1d:97:44:34:21:11:22:b5:1f:21:22:7a:e9:d3:f9:ff:2e:
         3f:fb:2d:16:37:a9:cb:2d:5f:0f:51:8b:ba:7b:d6:9c:20:25:
         d1:32:c0:df:8d:00:79:04:b9:8a:c2:7b:9f:47:5b:55:f7:29:
         cc:f1:52:0d:a4:eb:fc:af:36:cd:da:50:e8:0f:39:f8:7b:0a:
         d3:5a:23:6a:fb:71:4a:4f:d9:9a:99:5e:d5:f9:41:da:8a:61:
         e7:14:87:8a:ab:22:72:0d:d1:a0:29:d6:5f:d0:54:7c:60:fb:
         d5:9c:e5:d2:54:3f:b9:49:e6:fc:93:6f:10:73:a3:d9:f0:0f:
         f8:01:c0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 18:33:30 2024 by rpki-client on console-fra.rpki-client.org