Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2DtNkprMmGZFdeUzMYJnxukqUrfVmKBBRzR5tHqPVBBz/0/3230302e3131302e39362e302f32332d3233203d3e20323730323531.roa
File:                     3230302e3131302e39362e302f32332d3233203d3e20323730323531.roa (raw, json)
Hash identifier:          Rg4Yx1UTqlpbCEL8UH0fLK3M+n2dhOVZ49yuh9F6xsY=
Subject key identifier:   3C:24:E3:19:F9:E5:C6:2B:42:90:A2:B8:68:82:2E:3D:77:80:EC:14
Certificate issuer:       /CN=07A51E68F48AD6E824F4583BFEBBC55E69D4DCCB
Certificate serial:       6ADAA69145BCE95C43A084F7B7E3CBDA738E734C
Authority key identifier: 07:A5:1E:68:F4:8A:D6:E8:24:F4:58:3B:FE:BB:C5:5E:69:D4:DC:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07A51E68F48AD6E824F4583BFEBBC55E69D4DCCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2DtNkprMmGZFdeUzMYJnxukqUrfVmKBBRzR5tHqPVBBz/0/3230302e3131302e39362e302f32332d3233203d3e20323730323531.roa
Signing time:             Mon 16 Sep 2024 22:31:13 +0000
ROA not before:           Mon 16 Sep 2024 22:26:13 +0000
ROA not after:            Mon 15 Sep 2025 22:31:13 +0000
asID:                     270251
IP address blocks:        200.110.96.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2DtNkprMmGZFdeUzMYJnxukqUrfVmKBBRzR5tHqPVBBz/0/07A51E68F48AD6E824F4583BFEBBC55E69D4DCCB.crl
                          rsync://rpki-repo.registro.br/repo/2DtNkprMmGZFdeUzMYJnxukqUrfVmKBBRzR5tHqPVBBz/0/07A51E68F48AD6E824F4583BFEBBC55E69D4DCCB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07A51E68F48AD6E824F4583BFEBBC55E69D4DCCB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:da:a6:91:45:bc:e9:5c:43:a0:84:f7:b7:e3:cb:da:73:8e:73:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07A51E68F48AD6E824F4583BFEBBC55E69D4DCCB
        Validity
            Not Before: Sep 16 22:26:13 2024 GMT
            Not After : Sep 15 22:31:13 2025 GMT
        Subject: CN=3C24E319F9E5C62B4290A2B868822E3D7780EC14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:65:bb:65:81:fd:f3:8b:19:e9:d3:98:fe:b9:
                    17:90:2e:1b:35:ba:75:82:28:24:3b:56:25:e1:b2:
                    88:02:16:83:f1:b1:2e:e9:2e:85:af:6f:1d:4c:e6:
                    ac:29:93:3f:18:bc:6f:b5:ee:25:23:13:be:ed:fc:
                    c0:6e:c5:f7:1d:3d:d8:91:47:f9:ee:76:a2:3d:82:
                    b2:a4:72:1e:4c:c5:1b:ef:1f:ca:f2:77:cf:e8:87:
                    63:48:ee:ef:0e:ea:a6:f0:fe:28:3c:5b:22:07:82:
                    fd:40:68:18:a2:02:75:fa:08:77:e7:bd:aa:dc:a2:
                    40:d7:53:3a:48:1b:ad:7d:8b:cc:15:3c:c4:06:de:
                    af:eb:5d:da:73:d3:de:4d:98:86:75:84:5f:ee:05:
                    97:ef:55:70:82:c6:d5:a2:10:ac:a5:b8:b1:01:fe:
                    b9:76:09:e2:18:a4:2c:9a:59:39:f4:d2:1c:31:f5:
                    e4:2d:37:f8:5e:a0:df:e3:19:4f:f0:8a:93:49:84:
                    f4:35:09:24:a6:c5:ec:e5:07:61:a4:87:4d:1a:ea:
                    96:07:08:6b:d4:68:2d:e8:f4:ee:7a:27:ab:a1:48:
                    fa:f9:76:91:a1:db:91:42:89:1c:eb:af:d7:80:a8:
                    93:4a:cb:44:14:8a:5f:33:7f:c2:cc:ad:05:ab:6c:
                    a1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:24:E3:19:F9:E5:C6:2B:42:90:A2:B8:68:82:2E:3D:77:80:EC:14
            X509v3 Authority Key Identifier:
                keyid:07:A5:1E:68:F4:8A:D6:E8:24:F4:58:3B:FE:BB:C5:5E:69:D4:DC:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2DtNkprMmGZFdeUzMYJnxukqUrfVmKBBRzR5tHqPVBBz/0/07A51E68F48AD6E824F4583BFEBBC55E69D4DCCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07A51E68F48AD6E824F4583BFEBBC55E69D4DCCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2DtNkprMmGZFdeUzMYJnxukqUrfVmKBBRzR5tHqPVBBz/0/3230302e3131302e39362e302f32332d3233203d3e20323730323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:bb:bf:fd:53:5a:6f:2b:06:81:ff:a0:a8:6d:6f:52:ff:63:
         2c:2a:56:0b:f2:d1:f9:f7:5f:99:3d:9e:51:bd:68:eb:6c:b5:
         71:5a:be:50:59:79:6b:f9:ce:90:02:46:b3:0d:cc:06:42:08:
         a3:eb:30:21:dc:c6:2a:3a:97:80:fb:bc:b2:4f:dc:75:55:d4:
         9c:bf:4c:b0:4c:4b:50:4a:63:83:c8:5f:c0:fb:b4:5b:aa:eb:
         f2:33:84:9c:95:40:1f:45:86:eb:43:2b:b5:3b:26:ae:27:0e:
         20:55:81:0b:2f:ca:2a:e3:5b:32:d9:11:6a:93:b1:ec:41:33:
         48:71:21:e1:c8:80:bb:61:ae:16:66:35:e3:52:dd:cc:78:5a:
         a8:c5:20:82:58:a0:46:26:fe:fe:71:bf:21:f8:bf:f8:6c:5a:
         cd:44:93:a2:0a:83:f2:a4:30:c0:85:13:38:95:2a:bf:ae:68:
         76:c7:49:6f:76:90:40:1f:a6:98:d1:8d:d8:17:74:e7:70:2c:
         5e:fb:1e:8d:e0:c6:91:e4:ca:a8:f7:b9:cd:0c:a4:37:68:74:
         98:03:09:19:ed:5d:3c:18:cb:62:d4:d2:01:5a:db:b2:ba:42:
         2e:1a:ae:c4:eb:7f:0d:70:e9:4c:68:a3:d1:f8:ca:f9:25:18:
         ed:0c:f5:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:27 2024 by rpki-client on console-ams.rpki-client.org