Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3230302e37392e3138382e302f32322d3232203d3e20323632343434.roa
File:                     3230302e37392e3138382e302f32322d3232203d3e20323632343434.roa (raw, json)
Hash identifier:          BSx9VpvjMlCURiCef+UH2lv0qAz2SPyj07EOJkSweOQ=
Subject key identifier:   18:7A:DF:B7:F2:2A:79:79:71:F6:81:3E:3B:D8:DE:15:D3:99:46:8B
Certificate issuer:       /CN=B883529218840F471E398CF8F585B71D007A2B35
Certificate serial:       6E296E50F9FB8BBB27D0EF22228C16085052A2B9
Authority key identifier: B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3230302e37392e3138382e302f32322d3232203d3e20323632343434.roa
Signing time:             Wed 07 Aug 2024 13:14:41 +0000
ROA not before:           Wed 07 Aug 2024 13:09:41 +0000
ROA not after:            Wed 06 Aug 2025 13:14:41 +0000
asID:                     262444
IP address blocks:        200.79.188.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl
                          rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 04:34:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:29:6e:50:f9:fb:8b:bb:27:d0:ef:22:22:8c:16:08:50:52:a2:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B883529218840F471E398CF8F585B71D007A2B35
        Validity
            Not Before: Aug  7 13:09:41 2024 GMT
            Not After : Aug  6 13:14:41 2025 GMT
        Subject: CN=187ADFB7F22A797971F6813E3BD8DE15D399468B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:35:3c:00:e4:f8:13:7e:a5:e6:db:60:d9:32:
                    24:0a:1f:9d:86:70:bf:75:51:21:cd:33:7b:9a:c0:
                    83:fb:16:ef:c7:21:d4:70:aa:7d:64:4a:15:fa:aa:
                    35:69:97:ee:ef:1e:fa:ef:cf:6c:4b:77:b8:9d:88:
                    2d:ab:42:ad:45:a4:98:68:73:20:33:8e:66:14:f8:
                    65:b0:42:73:14:89:ad:c6:28:e9:cf:64:44:95:4b:
                    12:9f:8c:b3:3e:fe:9c:4c:b9:cc:67:06:58:2e:81:
                    ee:82:01:10:00:b1:49:47:db:50:21:ed:7a:b9:01:
                    18:27:37:0a:e6:93:40:d7:30:55:35:1d:ed:20:01:
                    b9:37:bd:28:ae:28:05:75:36:8b:b4:a2:99:cf:d1:
                    91:d5:76:e4:3d:c2:9d:fb:95:5d:6d:13:fd:ee:ac:
                    09:dc:d1:04:23:7e:44:0e:61:90:9b:67:5f:f9:5e:
                    14:f5:a5:d7:9c:65:ab:fd:f1:9b:f4:01:00:95:4d:
                    04:3f:ae:a7:72:d1:1b:41:a8:1b:58:19:25:b7:e7:
                    f4:31:22:66:65:5f:e2:cf:0e:7e:31:cd:12:a2:c3:
                    e9:c6:00:8f:7b:45:f7:11:1f:e4:4a:8e:7a:ba:10:
                    21:c4:d2:9f:03:25:a3:d6:16:ae:c4:81:0c:0b:f5:
                    db:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:7A:DF:B7:F2:2A:79:79:71:F6:81:3E:3B:D8:DE:15:D3:99:46:8B
            X509v3 Authority Key Identifier:
                keyid:B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3230302e37392e3138382e302f32322d3232203d3e20323632343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.79.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cb:47:d7:da:0c:30:5d:ee:8e:e9:b2:08:c8:8b:28:97:ad:2e:
         f9:d4:90:95:46:5c:8a:7c:40:28:01:e2:59:2e:c2:e6:f0:fd:
         ff:cb:c3:4e:78:ca:a7:5e:81:41:f4:2f:3f:83:08:d2:ab:40:
         0f:69:43:d2:a2:5c:df:0a:37:37:a0:eb:58:7a:9a:b1:4d:f4:
         23:25:9b:d6:84:23:38:84:49:5b:70:03:2d:e6:41:b4:6c:18:
         d4:b6:d4:5a:d5:fd:cb:42:c8:33:05:a7:6e:e7:25:01:80:32:
         22:e3:96:99:94:de:42:a4:e6:f4:ef:98:a9:e9:68:8c:12:32:
         4d:56:37:1d:bd:bf:59:31:48:b1:c2:c2:9e:5c:65:0f:04:9c:
         dc:be:0b:91:42:bb:22:88:dd:9c:34:19:d7:16:56:05:13:69:
         6a:a5:d4:a7:9f:fc:b0:8a:6a:88:69:7e:fd:5e:b7:df:3a:48:
         65:5e:ba:b9:1d:b4:28:a6:5d:8e:68:19:2c:08:cf:ff:7f:dd:
         f3:1d:7b:83:43:54:6e:dd:8e:11:15:7b:43:74:50:1e:0c:97:
         a6:53:68:15:36:c1:54:c0:26:b6:5c:8a:43:8e:51:45:d6:e8:
         95:ba:1d:af:9c:9d:f7:ac:33:1e:ae:be:5b:17:5a:58:c8:35:
         26:7e:a6:14
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUbiluUPn7i7sn0O8iIowWCFBSorkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjg4MzUyOTIxODg0MEY0NzFFMzk4Q0Y4RjU4NUI3MUQw
MDdBMkIzNTAeFw0yNDA4MDcxMzA5NDFaFw0yNTA4MDYxMzE0NDFaMDMxMTAvBgNV
BAMTKDE4N0FERkI3RjIyQTc5Nzk3MUY2ODEzRTNCRDhERTE1RDM5OTQ2OEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8NTwA5PgTfqXm22DZMiQKH52G
cL91USHNM3uawIP7Fu/HIdRwqn1kShX6qjVpl+7vHvrvz2xLd7idiC2rQq1FpJho
cyAzjmYU+GWwQnMUia3GKOnPZESVSxKfjLM+/pxMucxnBlguge6CARAAsUlH21Ah
7Xq5ARgnNwrmk0DXMFU1He0gAbk3vSiuKAV1Nou0opnP0ZHVduQ9wp37lV1tE/3u
rAnc0QQjfkQOYZCbZ1/5XhT1pdecZav98Zv0AQCVTQQ/rqdy0RtBqBtYGSW35/Qx
ImZlX+LPDn4xzRKiw+nGAI97RfcRH+RKjnq6ECHE0p8DJaPWFq7EgQwL9dtPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUGHrft/IqeXlx9oE+O9jeFdOZRoswHwYDVR0j
BBgwFoAUuINSkhiED0ceOYz49YW3HQB6KzUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlFlZFp0SFM5eXFONjNvMXJzVEFMblhhQmFtTnZ0OW1MQWdlQmFnTjVQ
bjQvMS9CODgzNTI5MjE4ODQwRjQ3MUUzOThDRjhGNTg1QjcxRDAwN0EyQjM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I4ODM1MjkyMTg4NDBGNDcx
RTM5OENGOEY1ODVCNzFEMDA3QTJCMzUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJRZWRadEhTOXlxTjYzbzFyc1RBTG5YYUJhbU52dDltTEFnZUJhZ041UG40LzEv
MzIzMDMwMmUzNzM5MmUzMTM4MzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzIzNDM0MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALIT7wwDQYJKoZIhvcNAQELBQADggEBAMtH19oM
MF3ujumyCMiLKJetLvnUkJVGXIp8QCgB4lkuwubw/f/Lw054yqdegUH0Lz+DCNKr
QA9pQ9KiXN8KNzeg61h6mrFN9CMlm9aEIziESVtwAy3mQbRsGNS21FrV/ctCyDMF
p27nJQGAMiLjlpmU3kKk5vTvmKnpaIwSMk1WNx29v1kxSLHCwp5cZQ8EnNy+C5FC
uyKI3Zw0GdcWVgUTaWql1Kef/LCKaohpfv1et986SGVeurkdtCimXY5oGSwIz/9/
3fMde4NDVG7djhEVe0N0UB4Ml6ZTaBU2wVTAJrZcikOOUUXW6JW6Ha+cnfesMx6u
vlsXWljINSZ+phQ=
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:50 2024 by rpki-client on console-fra.rpki-client.org