Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/3230302e3138372e3130312e302f32342d3234203d3e20323730363833.roa
File:                     3230302e3138372e3130312e302f32342d3234203d3e20323730363833.roa (raw, json)
Hash identifier:          lJHmIb590Rof2ERWv+hOuUEwukAqSpOHJZBbNPhw/+Q=
Subject key identifier:   EE:E0:09:59:9F:ED:7A:96:08:44:1F:80:8F:94:D5:8D:A3:4E:06:DC
Certificate issuer:       /CN=8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505
Certificate serial:       7CC0D9608314A99EBBF3098B29369DA3E18E126B
Authority key identifier: 8E:A2:14:99:D9:F7:6D:A8:5E:EC:8D:8B:1A:8E:3B:06:9D:4C:75:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/3230302e3138372e3130312e302f32342d3234203d3e20323730363833.roa
Signing time:             Thu 04 Apr 2024 02:59:14 +0000
ROA not before:           Thu 04 Apr 2024 02:54:14 +0000
ROA not after:            Thu 03 Apr 2025 02:59:14 +0000
asID:                     270683
IP address blocks:        200.187.101.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.crl
                          rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:c0:d9:60:83:14:a9:9e:bb:f3:09:8b:29:36:9d:a3:e1:8e:12:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505
        Validity
            Not Before: Apr  4 02:54:14 2024 GMT
            Not After : Apr  3 02:59:14 2025 GMT
        Subject: CN=EEE009599FED7A9608441F808F94D58DA34E06DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b2:5b:a3:91:bd:88:de:37:1a:69:fb:52:57:
                    c5:64:f9:96:8a:0b:60:e2:75:da:21:a3:94:f2:2a:
                    fd:4f:cd:ff:f0:e9:fe:22:a5:6f:bc:3e:24:4c:89:
                    19:a8:dd:9e:2a:23:d1:48:e0:26:ad:20:03:44:9c:
                    88:cf:68:7e:8b:09:45:d1:d8:14:23:12:98:e1:5d:
                    d2:55:79:3e:30:93:aa:e2:35:98:0a:80:8d:f7:46:
                    7b:79:78:d3:7d:5d:61:d7:f6:56:bb:79:6d:98:bd:
                    f8:5d:21:7e:86:e4:74:12:56:05:9e:40:92:41:66:
                    01:53:f2:7c:d1:82:65:04:f8:76:6b:35:32:d4:a4:
                    ea:be:54:ed:df:65:89:9f:d3:f5:d9:91:77:76:61:
                    bb:b5:fa:b9:c5:d1:d7:98:bb:f8:98:9c:8e:d6:83:
                    06:1e:d3:63:ed:07:67:f5:dc:6e:95:63:6d:2a:8a:
                    c1:9c:d0:61:26:f3:17:28:fb:a3:bf:b8:ab:de:b9:
                    09:06:b8:77:60:b4:34:48:49:61:39:7b:40:d0:77:
                    04:8a:d9:a2:32:83:2d:a8:bd:86:b3:30:12:ce:4b:
                    02:ef:be:c3:cb:86:0a:07:d8:cd:a8:be:5b:e5:a6:
                    b1:f8:6a:13:5f:0a:96:7c:8f:27:ee:0f:db:b6:80:
                    89:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:E0:09:59:9F:ED:7A:96:08:44:1F:80:8F:94:D5:8D:A3:4E:06:DC
            X509v3 Authority Key Identifier:
                keyid:8E:A2:14:99:D9:F7:6D:A8:5E:EC:8D:8B:1A:8E:3B:06:9D:4C:75:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/3230302e3138372e3130312e302f32342d3234203d3e20323730363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.187.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:0d:e4:52:aa:b0:cb:45:0b:71:9d:21:dc:6a:f3:72:d0:33:
         24:cd:96:ab:1d:fe:86:48:63:2d:f7:87:e4:6f:c1:84:e2:c1:
         15:a9:70:b0:06:1f:67:cd:e4:d4:2e:98:ac:f6:cf:06:43:79:
         61:01:da:34:02:0f:3f:5b:e7:fe:e9:c6:34:b1:fd:63:ab:07:
         49:30:b4:22:81:5e:e4:fc:15:50:75:fa:c5:63:a4:d1:33:bf:
         c8:7d:7c:c1:63:3a:28:ac:f8:fb:7e:9f:56:b2:a3:ee:dc:d1:
         c2:d6:15:b5:6b:fd:ee:5a:7e:20:2b:66:cb:79:45:43:f2:ca:
         1c:fe:67:1d:7e:7c:c9:0c:aa:4a:db:1f:66:28:48:89:0a:38:
         49:cb:22:86:26:af:bf:64:e1:5b:cc:20:bb:0d:41:fb:5c:3c:
         e4:03:e6:08:85:c2:4f:c2:7e:74:f0:fa:91:20:9e:d7:da:79:
         bf:5c:27:08:c1:e4:ce:52:d2:6d:c5:74:4f:9c:6d:98:f3:c1:
         74:91:43:19:50:d8:8c:cb:98:be:86:9c:f2:56:44:7f:6a:a7:
         5d:e4:1e:c4:14:97:c6:91:8d:5d:ae:7f:3f:be:14:ce:28:f6:
         f0:6e:d7:ce:d6:68:bc:ff:38:29:d7:c3:4f:51:f6:ef:5b:1b:
         6f:9b:b2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:52 2024 by rpki-client on console-ams.rpki-client.org