Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/3230302e3138372e3130302e302f32332d3233203d3e20323730363833.roa
File:                     3230302e3138372e3130302e302f32332d3233203d3e20323730363833.roa (raw, json)
Hash identifier:          C4H6zy5Gq5BfzwVmyTjeX736AiyNBOiUn68/HotVq8w=
Subject key identifier:   7C:44:F9:4F:2A:33:A9:19:90:25:E5:35:CF:73:44:B8:C0:2B:64:08
Certificate issuer:       /CN=8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505
Certificate serial:       05B3155603FD6947773E658C9A68D6D9A153125C
Authority key identifier: 8E:A2:14:99:D9:F7:6D:A8:5E:EC:8D:8B:1A:8E:3B:06:9D:4C:75:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/3230302e3138372e3130302e302f32332d3233203d3e20323730363833.roa
Signing time:             Thu 04 Apr 2024 02:59:16 +0000
ROA not before:           Thu 04 Apr 2024 02:54:16 +0000
ROA not after:            Thu 03 Apr 2025 02:59:16 +0000
asID:                     270683
IP address blocks:        200.187.100.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.crl
                          rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:b3:15:56:03:fd:69:47:77:3e:65:8c:9a:68:d6:d9:a1:53:12:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505
        Validity
            Not Before: Apr  4 02:54:16 2024 GMT
            Not After : Apr  3 02:59:16 2025 GMT
        Subject: CN=7C44F94F2A33A9199025E535CF7344B8C02B6408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f6:f6:58:3e:c1:a7:92:fd:b8:19:a3:d0:45:
                    92:26:f6:df:cc:2a:a3:40:36:e7:0e:f5:80:44:9e:
                    47:af:8b:2b:00:f8:4e:04:e8:be:f2:3b:1d:d3:85:
                    53:7e:f0:c2:e7:3d:9f:40:ef:2b:23:a3:d5:da:f8:
                    ae:e9:4d:76:05:91:f0:6f:bb:1d:3d:fd:db:43:f1:
                    aa:fa:f9:be:32:96:76:7a:23:98:4c:43:e6:72:bc:
                    db:04:27:0e:42:4b:ef:2f:8c:b2:0a:67:6b:c2:15:
                    5b:33:7b:3f:ea:e5:8e:93:a4:3a:28:01:34:5b:df:
                    97:23:63:20:46:08:70:98:8e:84:94:da:7a:a8:88:
                    4d:84:e9:6e:82:93:67:2a:e8:a2:04:29:7e:63:dd:
                    cf:23:58:39:dc:01:6e:63:3b:4f:14:d4:59:01:10:
                    89:c4:0e:cf:c7:7c:28:d8:7b:5f:5c:cb:c6:2e:b5:
                    d8:0f:09:bf:44:bb:4f:79:8a:7e:a3:8e:22:c2:ed:
                    10:02:58:07:04:09:85:2a:7c:6d:fa:b4:73:9e:08:
                    c5:58:5b:c8:97:65:8f:6c:71:0e:52:27:6e:81:5b:
                    16:7c:e4:54:90:6d:2b:43:48:47:5e:83:f6:a6:c6:
                    a7:1f:81:9b:18:3a:34:13:a5:41:c2:b1:d7:b6:f1:
                    f8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:44:F9:4F:2A:33:A9:19:90:25:E5:35:CF:73:44:B8:C0:2B:64:08
            X509v3 Authority Key Identifier:
                keyid:8E:A2:14:99:D9:F7:6D:A8:5E:EC:8D:8B:1A:8E:3B:06:9D:4C:75:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/3230302e3138372e3130302e302f32332d3233203d3e20323730363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.187.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:bf:6a:6b:c6:3a:0a:27:03:0e:6b:0d:6f:c5:6b:f7:b6:7e:
         da:ba:11:6e:fc:89:d4:2a:75:89:2e:70:69:79:2c:40:89:64:
         6d:9e:0c:18:db:0d:94:cd:a4:a3:93:31:58:c7:bb:8e:a0:bd:
         cb:13:3d:64:68:85:68:9d:e9:f5:71:d4:e8:45:33:dc:17:a4:
         f7:2c:b4:0e:8e:1a:3d:be:cb:f2:65:6e:a6:77:59:51:c1:58:
         c4:02:eb:f0:d0:bc:0b:25:88:5a:32:d6:2d:59:f6:c4:47:f1:
         05:a5:b6:23:89:bd:14:53:86:f3:8f:14:a5:06:14:e0:56:85:
         c8:43:af:4e:fb:d6:4a:08:3e:60:ab:d9:f1:52:02:28:0d:d0:
         cc:b0:3c:ab:b8:30:71:e2:9a:c1:4b:49:fc:8a:a8:3d:8a:f8:
         41:28:a6:54:27:d6:a1:53:ae:0b:bb:58:c7:b1:24:af:22:66:
         09:d6:ab:f6:ed:b9:d1:3d:d2:c8:a5:2d:51:0c:65:ea:3b:d2:
         ac:a6:58:44:99:43:c7:17:97:08:53:97:cf:35:49:28:c6:1e:
         5c:63:9f:23:8e:9e:bb:26:01:a7:00:c4:86:40:ff:c6:d3:dc:
         ec:e3:cb:b4:93:64:ba:a8:84:d3:46:d1:5c:e3:b4:60:9e:48:
         58:d2:a6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:05 2024 by rpki-client on console-fra.rpki-client.org