Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/1/3230302e3130362e3231322e302f32322d3234203d3e20323731323437.roa
File:                     3230302e3130362e3231322e302f32322d3234203d3e20323731323437.roa (raw, json)
Hash identifier:          goZIdH8S1admBaXny+oJoXPj5XXNyzwB3UHP6WFE+wQ=
Subject key identifier:   06:F0:4C:D0:9C:11:F3:48:67:D0:32:D9:43:05:B0:A6:93:58:61:49
Certificate issuer:       /CN=AC154D8D44795F5E54B65B3B1FF4584355304522
Certificate serial:       242F93C14C4104169C6F55EC04FE0C3B398BE6E6
Authority key identifier: AC:15:4D:8D:44:79:5F:5E:54:B6:5B:3B:1F:F4:58:43:55:30:45:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC154D8D44795F5E54B65B3B1FF4584355304522.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/1/3230302e3130362e3231322e302f32322d3234203d3e20323731323437.roa
Signing time:             Wed 03 Apr 2024 18:31:44 +0000
ROA not before:           Wed 03 Apr 2024 18:26:44 +0000
ROA not after:            Wed 02 Apr 2025 18:31:44 +0000
asID:                     271247
IP address blocks:        200.106.212.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/1/AC154D8D44795F5E54B65B3B1FF4584355304522.crl
                          rsync://rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/1/AC154D8D44795F5E54B65B3B1FF4584355304522.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC154D8D44795F5E54B65B3B1FF4584355304522.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 02:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:2f:93:c1:4c:41:04:16:9c:6f:55:ec:04:fe:0c:3b:39:8b:e6:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC154D8D44795F5E54B65B3B1FF4584355304522
        Validity
            Not Before: Apr  3 18:26:44 2024 GMT
            Not After : Apr  2 18:31:44 2025 GMT
        Subject: CN=3082010A0282010100D31ADC12A6059337F7E4A0E46A3CE9A0766276EA1332FE9FE425C99A01B880C65166221E4C20B79D80BE330C0B85F4EFFA7AA9650FCF8BCB4658CC8E6E4EBA08CC3F7871F4D9754DB0F2B96C5E63CB5E8E344DCBD33D8AFE35080275871FE7C2B89BA40D7CAF02248CA89EF4274858B8D526D8DBE5E7F3EA7EE227815B535D3252C578A1A2C5D82132A2C6DB60704C4E32A12B829FCE0F339903B613F33F0D3937C97AD0D9469A3CC2F4340326D5FA46DB3543F787779151A80F3455904FBF2775D6E0F49B659522D1DEECBF03C8D4646501022EA9B35776744188022EAEE6ACF9BEC747FA9A7A863A567AFE400D52DBDDCE1E0CD3F5202A4C27C9340A2A89090203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1a:dc:12:a6:05:93:37:f7:e4:a0:e4:6a:3c:
                    e9:a0:76:62:76:ea:13:32:fe:9f:e4:25:c9:9a:01:
                    b8:80:c6:51:66:22:1e:4c:20:b7:9d:80:be:33:0c:
                    0b:85:f4:ef:fa:7a:a9:65:0f:cf:8b:cb:46:58:cc:
                    8e:6e:4e:ba:08:cc:3f:78:71:f4:d9:75:4d:b0:f2:
                    b9:6c:5e:63:cb:5e:8e:34:4d:cb:d3:3d:8a:fe:35:
                    08:02:75:87:1f:e7:c2:b8:9b:a4:0d:7c:af:02:24:
                    8c:a8:9e:f4:27:48:58:b8:d5:26:d8:db:e5:e7:f3:
                    ea:7e:e2:27:81:5b:53:5d:32:52:c5:78:a1:a2:c5:
                    d8:21:32:a2:c6:db:60:70:4c:4e:32:a1:2b:82:9f:
                    ce:0f:33:99:03:b6:13:f3:3f:0d:39:37:c9:7a:d0:
                    d9:46:9a:3c:c2:f4:34:03:26:d5:fa:46:db:35:43:
                    f7:87:77:91:51:a8:0f:34:55:90:4f:bf:27:75:d6:
                    e0:f4:9b:65:95:22:d1:de:ec:bf:03:c8:d4:64:65:
                    01:02:2e:a9:b3:57:76:74:41:88:02:2e:ae:e6:ac:
                    f9:be:c7:47:fa:9a:7a:86:3a:56:7a:fe:40:0d:52:
                    db:dd:ce:1e:0c:d3:f5:20:2a:4c:27:c9:34:0a:2a:
                    89:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F0:4C:D0:9C:11:F3:48:67:D0:32:D9:43:05:B0:A6:93:58:61:49
            X509v3 Authority Key Identifier:
                keyid:AC:15:4D:8D:44:79:5F:5E:54:B6:5B:3B:1F:F4:58:43:55:30:45:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/1/AC154D8D44795F5E54B65B3B1FF4584355304522.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC154D8D44795F5E54B65B3B1FF4584355304522.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/1/3230302e3130362e3231322e302f32322d3234203d3e20323731323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:d2:94:7c:95:de:87:65:d6:16:6c:5f:67:46:65:ef:73:40:
         ed:46:d8:2d:57:7c:05:e1:02:db:5b:59:ad:51:04:f2:47:9c:
         49:74:2b:df:fc:38:f5:13:c6:99:27:39:a9:10:1c:a1:4e:72:
         88:bc:13:9a:6e:69:c8:5a:d3:6d:e8:05:36:20:bd:a1:5d:b2:
         e5:86:e2:1d:80:7c:6d:36:09:2d:1c:68:70:31:eb:82:ea:0a:
         ad:dd:9f:dc:3b:ff:89:46:61:83:65:6f:88:71:d6:0e:0f:c8:
         e4:b7:86:8e:3b:59:54:a9:a1:14:03:8a:f1:07:bc:f5:1b:14:
         2d:9d:2e:3e:93:49:2e:bd:bf:66:c4:9e:f3:19:03:ce:fe:9d:
         a1:ad:e5:7e:a1:72:ba:7c:be:45:0f:b4:ef:eb:fa:10:6b:47:
         9d:b5:32:8f:b9:3c:2c:f8:c0:62:d9:8a:53:d7:05:3a:5d:1a:
         3b:c6:ed:db:fb:59:d5:b1:2f:e8:bb:64:7e:3b:16:44:fb:40:
         47:3b:5d:57:2e:e2:27:17:d2:18:b1:85:90:b9:a5:c0:6b:60:
         cc:1f:5b:18:30:30:91:22:a0:ee:79:1d:16:16:0c:94:9b:9f:
         7a:8c:d3:75:03:5f:45:82:50:aa:f7:32:4c:34:87:25:4c:57:
         43:35:81:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 04:04:02 2024 by rpki-client on console-fra.rpki-client.org