Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/3230302e33362e3231342e302f32332d3233203d3e20323731333833.roa
File:                     3230302e33362e3231342e302f32332d3233203d3e20323731333833.roa (raw, json)
Hash identifier:          rIJaahbKt/taa3OAsA7i3ZR6lQ3DsiLRmPZmP+ZMDN4=
Subject key identifier:   90:A0:F1:7E:DA:EB:3C:65:D6:2F:66:79:2C:DB:C9:C8:05:5F:F8:40
Certificate issuer:       /CN=23235F2B7FAE22B78438698FD00F49F07D286674
Certificate serial:       0342901EE9C5C5028740DB3B5D958A61B2CF3CAE
Authority key identifier: 23:23:5F:2B:7F:AE:22:B7:84:38:69:8F:D0:0F:49:F0:7D:28:66:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23235F2B7FAE22B78438698FD00F49F07D286674.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/3230302e33362e3231342e302f32332d3233203d3e20323731333833.roa
Signing time:             Mon 07 Oct 2024 18:38:01 +0000
ROA not before:           Mon 07 Oct 2024 18:33:01 +0000
ROA not after:            Mon 06 Oct 2025 18:38:01 +0000
asID:                     271383
IP address blocks:        200.36.214.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/23235F2B7FAE22B78438698FD00F49F07D286674.crl
                          rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/23235F2B7FAE22B78438698FD00F49F07D286674.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23235F2B7FAE22B78438698FD00F49F07D286674.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:42:90:1e:e9:c5:c5:02:87:40:db:3b:5d:95:8a:61:b2:cf:3c:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23235F2B7FAE22B78438698FD00F49F07D286674
        Validity
            Not Before: Oct  7 18:33:01 2024 GMT
            Not After : Oct  6 18:38:01 2025 GMT
        Subject: CN=90A0F17EDAEB3C65D62F66792CDBC9C8055FF840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:86:87:d4:5a:11:dd:24:20:bf:9d:2b:7a:37:
                    97:10:f3:ce:b3:5f:6a:ae:1c:7c:ef:8d:0d:6f:4b:
                    10:7b:fb:0e:83:3d:88:f3:72:51:fe:92:fd:0f:c6:
                    9e:70:fc:d5:86:e4:f6:54:f6:e0:43:6a:6d:54:c5:
                    9f:c6:86:3d:45:fd:f2:33:8f:b9:37:44:3e:4d:c2:
                    9a:bd:a1:b6:6c:38:0c:fd:67:2f:ba:99:34:8e:68:
                    57:58:62:40:f3:75:a4:cc:e6:29:74:34:33:5e:31:
                    c3:46:b8:d3:f4:17:73:b8:4d:0c:85:f9:41:55:46:
                    d6:2f:f9:7f:90:01:5f:a7:23:cf:6e:e4:f9:9e:d6:
                    01:5a:11:06:6f:64:23:05:be:8a:a7:f5:fa:16:bb:
                    b8:d8:ef:0a:bc:11:2e:89:80:6c:96:d8:7a:d2:4e:
                    22:c1:bb:6e:68:f6:85:bd:fa:53:d1:c9:cd:73:d0:
                    1b:ee:90:95:41:29:d4:0c:8c:40:1e:aa:09:75:45:
                    27:65:63:8f:aa:cc:d5:d7:13:c0:0d:9e:0d:23:4c:
                    73:92:79:bd:63:0d:35:77:d3:66:19:33:6d:57:3e:
                    46:1c:89:9f:7c:2f:03:51:b6:d0:c4:16:44:e8:26:
                    ae:77:12:b4:7f:9c:1b:a0:02:74:63:6e:cc:10:25:
                    4e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:A0:F1:7E:DA:EB:3C:65:D6:2F:66:79:2C:DB:C9:C8:05:5F:F8:40
            X509v3 Authority Key Identifier:
                keyid:23:23:5F:2B:7F:AE:22:B7:84:38:69:8F:D0:0F:49:F0:7D:28:66:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/23235F2B7FAE22B78438698FD00F49F07D286674.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23235F2B7FAE22B78438698FD00F49F07D286674.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/3230302e33362e3231342e302f32332d3233203d3e20323731333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:fa:62:2c:b7:f6:71:15:15:79:48:49:b5:6d:1c:33:1a:c8:
         24:e7:92:8e:65:83:7f:da:3e:08:11:33:98:d5:a8:25:82:80:
         e1:44:7b:cf:8e:c2:1d:e9:8e:76:7d:de:ee:a5:e8:e3:6d:8d:
         bd:4f:1b:af:bb:9a:ce:5b:1f:70:a5:7c:b7:a3:f8:5b:66:99:
         18:8f:e0:47:5c:44:37:00:1c:6b:8d:b6:71:8e:e6:dc:3a:19:
         24:60:49:ab:f8:5c:e8:24:02:89:b5:72:28:95:69:bc:20:02:
         bb:5e:15:38:62:12:9f:dd:4e:65:73:d9:85:af:84:28:b5:47:
         34:f5:c0:ba:b0:9c:3b:5a:c3:f3:5a:aa:3b:b6:6b:a4:ff:19:
         33:1b:e0:42:17:bc:28:9d:7e:39:26:9b:86:4a:79:2c:94:06:
         db:a6:c8:d0:5d:30:19:26:4b:0b:7e:73:55:a8:93:4a:4e:cc:
         0f:ba:1d:aa:56:aa:47:d1:34:d6:3f:b0:62:c5:c9:9a:a9:b1:
         f3:53:f4:ce:45:0b:05:79:60:08:de:a2:ba:97:d8:9b:87:f3:
         45:9f:18:0f:ee:4a:41:6e:6b:13:b0:0f:a0:c4:66:69:e9:3e:
         c3:42:0a:1b:7b:d7:4d:af:62:71:93:53:72:bd:e3:96:fc:a4:
         ea:fc:99:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:29:57 2024 by rpki-client on console-fra.rpki-client.org