Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/3230302e33362e3231322e302f32342d3234203d3e20323731333833.roa
File:                     3230302e33362e3231322e302f32342d3234203d3e20323731333833.roa (raw, json)
Hash identifier:          PB42dZFX64X6jpyBeyEnnB6gnckGjA5h0lrZ9hJaEYE=
Subject key identifier:   09:E7:F8:9B:EC:9E:54:37:61:52:15:EB:E1:5D:9B:41:5F:1A:10:48
Certificate issuer:       /CN=23235F2B7FAE22B78438698FD00F49F07D286674
Certificate serial:       687D6EA0829B6CF1AC906DD33FCA52045E9AA2BF
Authority key identifier: 23:23:5F:2B:7F:AE:22:B7:84:38:69:8F:D0:0F:49:F0:7D:28:66:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23235F2B7FAE22B78438698FD00F49F07D286674.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/3230302e33362e3231322e302f32342d3234203d3e20323731333833.roa
Signing time:             Mon 07 Oct 2024 18:37:59 +0000
ROA not before:           Mon 07 Oct 2024 18:32:59 +0000
ROA not after:            Mon 06 Oct 2025 18:37:59 +0000
asID:                     271383
IP address blocks:        200.36.212.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/23235F2B7FAE22B78438698FD00F49F07D286674.crl
                          rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/23235F2B7FAE22B78438698FD00F49F07D286674.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23235F2B7FAE22B78438698FD00F49F07D286674.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:7d:6e:a0:82:9b:6c:f1:ac:90:6d:d3:3f:ca:52:04:5e:9a:a2:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23235F2B7FAE22B78438698FD00F49F07D286674
        Validity
            Not Before: Oct  7 18:32:59 2024 GMT
            Not After : Oct  6 18:37:59 2025 GMT
        Subject: CN=09E7F89BEC9E5437615215EBE15D9B415F1A1048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ac:9a:96:8d:4d:81:71:3a:36:25:72:70:0b:
                    bb:c2:af:2a:c3:75:d1:00:e4:0e:ff:41:fe:c6:45:
                    a8:fb:55:fd:1a:d5:73:eb:e9:a4:a3:52:fb:f3:83:
                    f2:69:b5:06:d6:bc:83:de:c8:39:08:e5:1d:7e:bf:
                    e5:55:14:b9:22:91:86:3c:c2:a9:69:d7:d4:2b:1a:
                    d3:59:05:a5:be:8b:95:48:ce:c4:05:77:86:3f:08:
                    26:f1:5c:0b:df:03:77:e8:a8:18:d6:b2:a5:d9:af:
                    be:e8:ad:ec:51:9e:a9:71:e3:f0:c2:c6:58:b3:7d:
                    99:56:7b:3c:61:6c:86:a0:b6:08:d5:9b:18:fc:ce:
                    2c:0a:08:a3:40:31:31:1a:36:80:7f:41:b7:50:4a:
                    31:f5:ae:55:61:2d:6c:e8:9a:31:1f:b4:c0:78:7a:
                    a0:b8:4e:dd:d5:df:54:cf:e4:1b:1e:82:54:29:56:
                    c6:7b:de:d5:7b:97:03:96:09:00:5e:41:49:cd:86:
                    c1:ff:21:06:68:25:b4:12:e8:e3:8e:9c:0d:aa:db:
                    6a:0b:87:3a:e1:3b:51:35:3c:d5:67:ed:61:d3:d4:
                    36:23:dd:98:70:a4:7f:cf:1a:db:14:bd:cf:61:ea:
                    d6:99:1b:8a:d9:1a:cd:9a:9e:44:05:2b:d8:99:3f:
                    ad:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:E7:F8:9B:EC:9E:54:37:61:52:15:EB:E1:5D:9B:41:5F:1A:10:48
            X509v3 Authority Key Identifier:
                keyid:23:23:5F:2B:7F:AE:22:B7:84:38:69:8F:D0:0F:49:F0:7D:28:66:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/23235F2B7FAE22B78438698FD00F49F07D286674.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23235F2B7FAE22B78438698FD00F49F07D286674.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/3230302e33362e3231322e302f32342d3234203d3e20323731333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:28:ad:18:00:d2:20:44:e3:da:4e:60:90:a8:73:75:67:72:
         7b:0e:88:5b:33:ab:61:8e:bb:34:5c:77:5c:8f:4d:0d:dd:82:
         ad:7f:71:18:56:06:50:5a:09:02:d6:a0:af:a5:ad:eb:e9:91:
         da:b7:3b:01:78:8d:eb:1d:42:af:1f:57:3c:3d:0b:0f:cd:8d:
         78:bf:36:69:21:99:c0:ab:02:99:a5:fd:49:01:f2:01:eb:80:
         2b:82:6f:92:f4:23:96:3e:29:d3:5c:08:f5:0d:59:09:f7:29:
         f8:3f:0f:e6:52:3b:26:9e:b4:7f:16:0c:28:69:b0:d1:04:0b:
         ef:95:cd:56:15:ee:d2:68:20:ce:f1:11:65:83:15:bc:5f:88:
         48:70:28:ef:79:e7:5c:fd:ac:5f:e4:22:54:ac:1d:bd:fb:a9:
         90:6e:d0:3b:ad:9e:6f:8e:df:08:f5:69:c7:1d:33:24:25:b0:
         21:9e:5a:aa:be:cf:9e:28:76:0e:49:53:2a:9e:f5:93:f4:5c:
         da:82:c7:67:11:ed:09:ec:20:8b:7d:bf:2a:92:c6:b4:fb:18:
         cb:95:4c:e8:41:9d:f9:f3:c6:12:44:c6:66:ac:85:88:71:4a:
         b8:bb:ad:e1:f9:5c:49:f5:fd:0f:75:0d:5b:c3:b2:89:16:9b:
         1f:67:f6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:29:57 2024 by rpki-client on console-fra.rpki-client.org