Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2DtNkprMmGZFdeUzMYJnxukqUrfVmKBBRzR5tHqPVBBz/0/3230302e3131302e39362e302f32322d3232203d3e20323730323531.roa
File:                     3230302e3131302e39362e302f32322d3232203d3e20323730323531.roa (raw, json)
Hash identifier:          hKYa0XbKNfJRQFDWJyAF3yDn0KoJ66sLvcAG63RmbkM=
Subject key identifier:   0D:6E:2F:10:30:A7:0C:51:A2:29:7E:45:81:72:02:CE:0B:D6:26:23
Certificate issuer:       /CN=07A51E68F48AD6E824F4583BFEBBC55E69D4DCCB
Certificate serial:       0BEE4A2448C30CD51F3483C00B1D82C7F2179F3D
Authority key identifier: 07:A5:1E:68:F4:8A:D6:E8:24:F4:58:3B:FE:BB:C5:5E:69:D4:DC:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07A51E68F48AD6E824F4583BFEBBC55E69D4DCCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2DtNkprMmGZFdeUzMYJnxukqUrfVmKBBRzR5tHqPVBBz/0/3230302e3131302e39362e302f32322d3232203d3e20323730323531.roa
Signing time:             Mon 16 Sep 2024 22:31:10 +0000
ROA not before:           Mon 16 Sep 2024 22:26:10 +0000
ROA not after:            Mon 15 Sep 2025 22:31:10 +0000
asID:                     270251
IP address blocks:        200.110.96.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2DtNkprMmGZFdeUzMYJnxukqUrfVmKBBRzR5tHqPVBBz/0/07A51E68F48AD6E824F4583BFEBBC55E69D4DCCB.crl
                          rsync://rpki-repo.registro.br/repo/2DtNkprMmGZFdeUzMYJnxukqUrfVmKBBRzR5tHqPVBBz/0/07A51E68F48AD6E824F4583BFEBBC55E69D4DCCB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07A51E68F48AD6E824F4583BFEBBC55E69D4DCCB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:ee:4a:24:48:c3:0c:d5:1f:34:83:c0:0b:1d:82:c7:f2:17:9f:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07A51E68F48AD6E824F4583BFEBBC55E69D4DCCB
        Validity
            Not Before: Sep 16 22:26:10 2024 GMT
            Not After : Sep 15 22:31:10 2025 GMT
        Subject: CN=0D6E2F1030A70C51A2297E45817202CE0BD62623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ec:8c:ce:90:3f:99:f4:42:59:31:55:6e:20:
                    3b:6a:98:0f:7b:a0:b1:ec:d6:f2:af:b4:bc:7b:81:
                    e1:20:65:1f:ce:32:38:76:c9:5b:e9:cd:77:2e:0e:
                    fd:7d:8f:df:b1:88:22:e9:6c:86:23:fe:49:76:90:
                    36:ce:44:d3:75:43:f3:74:1f:0c:76:fb:d8:3d:0a:
                    bc:04:d6:0d:91:4f:cd:e5:4d:cf:a7:bc:2e:e9:d2:
                    2a:13:76:01:b5:1e:f4:41:b4:00:da:80:76:a6:f6:
                    90:b1:10:95:64:9b:d9:41:e4:00:88:02:77:6a:4a:
                    f5:f0:36:0c:43:19:bb:a6:a9:95:23:41:2d:cb:ed:
                    82:54:a9:5c:e3:bd:e2:f0:50:f5:26:a8:25:37:cf:
                    fd:6c:ec:99:2e:ab:16:a8:2d:81:0a:1a:06:e4:81:
                    cd:e8:cb:61:a0:20:a0:8f:6d:99:ae:39:da:9e:9f:
                    e0:e5:e8:ac:b1:0d:f7:4b:ee:5e:16:1e:ad:ea:b4:
                    79:98:30:36:25:a1:6c:d6:72:f9:07:7b:9c:1a:7f:
                    a8:3e:83:0a:26:84:c1:60:e2:d1:f9:27:58:0e:4a:
                    c4:4f:b6:45:eb:78:09:10:39:e7:76:09:40:7b:3f:
                    b3:93:94:25:06:21:29:0a:21:05:f3:94:84:6a:ed:
                    4c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:6E:2F:10:30:A7:0C:51:A2:29:7E:45:81:72:02:CE:0B:D6:26:23
            X509v3 Authority Key Identifier:
                keyid:07:A5:1E:68:F4:8A:D6:E8:24:F4:58:3B:FE:BB:C5:5E:69:D4:DC:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2DtNkprMmGZFdeUzMYJnxukqUrfVmKBBRzR5tHqPVBBz/0/07A51E68F48AD6E824F4583BFEBBC55E69D4DCCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07A51E68F48AD6E824F4583BFEBBC55E69D4DCCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2DtNkprMmGZFdeUzMYJnxukqUrfVmKBBRzR5tHqPVBBz/0/3230302e3131302e39362e302f32322d3232203d3e20323730323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:a2:cd:50:5b:48:87:3b:ec:41:26:dd:33:f0:f3:91:0d:40:
         c0:40:12:6a:99:d7:80:76:52:de:60:54:08:be:b2:83:b3:f5:
         85:e6:b6:a5:dc:0a:67:a2:83:62:35:4d:b1:94:0c:17:69:bf:
         4f:d8:e4:be:56:db:94:6b:1c:85:34:66:97:57:b2:2c:72:2e:
         77:0e:f0:dc:1d:a9:10:7c:2c:2e:4f:9e:ba:f4:12:ec:94:b4:
         04:88:4e:4a:d2:67:88:de:11:b3:01:ea:eb:a2:6b:2f:0e:23:
         1d:27:27:7e:cb:f8:07:79:b7:70:98:42:d7:0d:ae:e7:28:47:
         68:5f:24:68:9d:7c:a8:f5:d4:d8:5b:c1:34:e7:43:31:6c:11:
         90:4b:d6:c9:61:e3:0e:a6:1b:57:71:ee:89:72:b6:5a:48:b6:
         e4:37:c7:24:66:96:12:c6:b1:fe:4d:94:dd:66:4f:c0:41:30:
         45:22:a8:37:d2:7b:91:23:a2:9e:0f:d8:4e:27:7d:29:0b:8a:
         e3:2f:9e:2b:22:1a:6c:d2:56:ae:df:1d:ac:19:d4:f8:ae:94:
         10:41:23:f9:b0:33:0f:e6:7d:09:30:24:51:b0:c8:0e:49:4b:
         64:64:6c:d6:42:b9:01:37:90:ff:5f:92:b8:2d:01:1a:c1:23:
         3d:9a:24:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:27 2024 by rpki-client on console-ams.rpki-client.org