Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/3230302e3138372e3130322e302f32332d3233203d3e20323730363833.roa
File:                     3230302e3138372e3130322e302f32332d3233203d3e20323730363833.roa (raw, json)
Hash identifier:          m/W3pGGcVb56GWMySDqhgLahlN78TFNqIF8q6w2stfE=
Subject key identifier:   A1:83:FE:27:13:AF:40:39:89:8C:A6:0E:D3:ED:7B:B9:DC:4C:3B:12
Certificate issuer:       /CN=8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505
Certificate serial:       1B3791A9022239AC5EA22011B2433E3B1413FECE
Authority key identifier: 8E:A2:14:99:D9:F7:6D:A8:5E:EC:8D:8B:1A:8E:3B:06:9D:4C:75:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/3230302e3138372e3130322e302f32332d3233203d3e20323730363833.roa
Signing time:             Thu 04 Apr 2024 02:59:15 +0000
ROA not before:           Thu 04 Apr 2024 02:54:15 +0000
ROA not after:            Thu 03 Apr 2025 02:59:15 +0000
asID:                     270683
IP address blocks:        200.187.102.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.crl
                          rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:37:91:a9:02:22:39:ac:5e:a2:20:11:b2:43:3e:3b:14:13:fe:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505
        Validity
            Not Before: Apr  4 02:54:15 2024 GMT
            Not After : Apr  3 02:59:15 2025 GMT
        Subject: CN=A183FE2713AF4039898CA60ED3ED7BB9DC4C3B12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2f:90:cc:93:b4:46:9e:b0:c8:55:43:92:1e:
                    1b:e4:17:24:d9:7a:f7:a1:09:62:34:9e:9c:c9:f6:
                    a3:fd:68:aa:ec:99:55:79:19:37:b3:21:f1:90:06:
                    a1:09:e5:95:b9:75:3a:f1:d7:9b:06:3c:17:48:ac:
                    8a:e7:58:41:5e:70:99:8d:33:1b:51:bf:57:65:af:
                    92:19:53:f0:46:3c:2c:54:b2:67:57:d5:e7:f9:c4:
                    28:17:f0:ef:8f:2e:a6:de:69:c0:cc:6b:5b:48:12:
                    b7:91:cd:80:bd:46:ba:d5:36:c0:9d:c4:2b:18:28:
                    05:e0:6a:ae:f4:3e:76:6f:35:b7:fe:bf:7f:4c:ac:
                    f4:d8:dc:8d:ce:c0:d8:c1:6f:93:5c:8f:f1:a7:bb:
                    0e:96:09:e7:30:a0:0a:0e:a1:fd:f0:84:65:4b:eb:
                    a2:81:e7:a3:50:e3:09:6d:0b:22:66:fe:80:b2:12:
                    0e:1b:79:da:64:dc:5d:fd:c5:a7:8f:8a:9e:0f:05:
                    37:ef:2b:cf:a9:0c:d3:57:bb:71:14:c3:b3:65:25:
                    b2:3f:68:19:b1:7b:ce:ba:a5:d9:d2:30:17:ac:ef:
                    f1:e7:e1:11:f8:bf:5c:47:62:3b:eb:cc:f9:ed:b8:
                    70:02:52:db:58:85:78:d2:09:86:82:20:08:d4:cd:
                    b8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:83:FE:27:13:AF:40:39:89:8C:A6:0E:D3:ED:7B:B9:DC:4C:3B:12
            X509v3 Authority Key Identifier:
                keyid:8E:A2:14:99:D9:F7:6D:A8:5E:EC:8D:8B:1A:8E:3B:06:9D:4C:75:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/3230302e3138372e3130322e302f32332d3233203d3e20323730363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.187.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:85:31:19:a9:f8:85:f0:3b:16:ef:96:0e:b8:3e:cc:36:6c:
         b6:72:71:dd:37:f2:93:b5:a4:52:a7:13:bb:2e:73:16:87:96:
         3f:5f:ef:c2:12:04:84:52:81:4b:d4:5b:bb:39:ea:f0:65:80:
         9e:16:15:5c:e1:53:50:ea:0a:06:5b:62:3e:b2:ba:53:21:76:
         8f:0b:de:05:e7:4c:9a:38:e0:7a:e9:ac:40:72:b7:1a:ed:2f:
         63:ca:18:24:02:b6:21:8e:98:33:c5:7a:18:ce:26:79:a6:7e:
         71:4b:10:e3:ae:33:8f:04:dd:ad:98:f5:2a:e2:9b:52:77:46:
         d2:d3:58:43:80:74:9d:99:d6:64:d7:c6:42:30:30:3d:3e:f6:
         6b:e1:0f:cf:30:60:2e:57:f5:f6:e6:fe:c1:4f:eb:34:b3:75:
         c2:fa:45:f5:6f:97:fd:ba:17:38:a8:b0:fb:49:4a:f1:5f:bd:
         f6:3a:93:c3:af:c1:fe:7c:b2:bb:a3:6f:33:97:3e:b4:99:37:
         8d:3c:85:04:5a:ab:45:82:2d:bf:c9:15:33:3d:19:80:d0:5e:
         e3:37:41:b6:47:e5:0c:2f:9e:d7:1c:0f:f1:03:ff:a8:b7:84:
         66:9c:f9:43:70:e2:c5:12:5e:c0:b9:9f:2f:a0:4d:26:fd:ad:
         ce:78:c8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:53:00 2024 by rpki-client on console-ams.rpki-client.org