Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3230302e37392e3139302e302f32332d3233203d3e20323632343434.roa
File:                     3230302e37392e3139302e302f32332d3233203d3e20323632343434.roa (raw, json)
Hash identifier:          xzW8/cxM/MS6rYJCCqzKEPh1ZEL2bkF/ec2yYI+Mm0E=
Subject key identifier:   CF:A2:38:6B:74:6C:A9:A7:C4:CC:2C:68:BE:5C:6F:68:40:2E:DB:CA
Certificate issuer:       /CN=B883529218840F471E398CF8F585B71D007A2B35
Certificate serial:       340DA3D69DEC206CBD076165EB54751C754F7F52
Authority key identifier: B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3230302e37392e3139302e302f32332d3233203d3e20323632343434.roa
Signing time:             Wed 07 Aug 2024 13:14:39 +0000
ROA not before:           Wed 07 Aug 2024 13:09:39 +0000
ROA not after:            Wed 06 Aug 2025 13:14:39 +0000
asID:                     262444
IP address blocks:        200.79.190.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl
                          rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 04:34:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:0d:a3:d6:9d:ec:20:6c:bd:07:61:65:eb:54:75:1c:75:4f:7f:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B883529218840F471E398CF8F585B71D007A2B35
        Validity
            Not Before: Aug  7 13:09:39 2024 GMT
            Not After : Aug  6 13:14:39 2025 GMT
        Subject: CN=CFA2386B746CA9A7C4CC2C68BE5C6F68402EDBCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:11:96:5c:0c:25:43:42:e0:53:52:6f:99:55:
                    71:57:c6:79:b3:d4:6e:6a:2c:36:7a:eb:3b:3b:89:
                    39:f7:91:fc:a3:04:6c:e3:34:35:25:b8:e1:83:57:
                    94:97:4c:98:75:94:57:b3:f8:56:e1:0d:ea:5b:9f:
                    09:33:98:91:a6:23:ce:39:31:bb:c5:84:85:43:f4:
                    f8:9f:58:da:6a:4f:59:03:26:4f:51:4e:31:15:3c:
                    48:51:00:f5:db:df:0d:5d:c7:df:0e:4a:69:87:3e:
                    95:e7:b3:24:14:95:b9:d6:e4:59:2c:71:8e:7d:79:
                    12:cc:8d:d4:b0:b6:76:71:66:a7:69:a4:b7:7c:f0:
                    e9:1f:c9:72:ce:0e:b0:1b:09:ff:f1:8e:cf:7e:53:
                    cd:89:f2:fb:da:9e:01:bd:5d:bd:03:6e:8c:b7:46:
                    01:92:24:3d:cf:ca:31:26:aa:00:96:b7:6b:ca:d0:
                    b7:3f:97:0c:55:c4:ca:26:da:9a:fb:da:be:2f:6e:
                    7b:48:22:ec:30:17:8d:ab:f8:16:d8:c1:c9:9b:34:
                    b6:8d:68:93:50:ba:3c:a5:d0:fa:9a:bb:47:e1:2b:
                    11:3c:6d:77:1c:9a:b1:8d:75:6f:aa:2e:10:6a:f1:
                    28:9e:3c:be:38:7d:c7:df:d0:7e:6d:d3:f9:2b:1f:
                    a3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A2:38:6B:74:6C:A9:A7:C4:CC:2C:68:BE:5C:6F:68:40:2E:DB:CA
            X509v3 Authority Key Identifier:
                keyid:B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3230302e37392e3139302e302f32332d3233203d3e20323632343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.79.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:d8:ff:8f:3d:02:1f:d7:ab:86:77:7a:f4:af:78:ba:ad:07:
         6b:4a:d6:de:1c:d4:fc:4b:b4:6c:dc:7c:28:a8:58:c6:01:4c:
         1a:bf:b9:89:ca:5c:73:cc:13:01:f0:16:4e:e7:f9:8f:e0:e2:
         1f:34:f6:77:a1:e2:d0:c1:3b:51:14:48:b1:02:b9:b0:65:4b:
         ab:0d:d4:45:bc:42:a3:47:f7:3d:13:48:dc:0d:49:ab:bc:7c:
         d7:ae:66:9f:86:56:32:c2:49:3c:e6:aa:ad:24:8e:f4:74:93:
         6c:bd:83:1e:ff:69:d9:21:0c:22:c7:92:0f:58:cd:e9:d4:27:
         b7:b9:d2:96:da:48:ca:a2:05:d3:c0:a1:9e:b6:7d:31:f6:db:
         79:63:b6:e7:f9:fd:2e:c7:f4:ff:50:34:f1:a4:29:5a:5e:8e:
         87:b5:c3:77:a6:ab:d0:bc:90:6a:e7:e1:87:5b:69:e3:76:b0:
         38:cc:5a:27:fa:f9:3a:90:27:b8:88:10:02:13:7a:a1:29:d0:
         77:2b:59:fb:f9:aa:60:23:a8:37:30:2b:56:ba:6f:84:7b:16:
         0a:6b:ad:99:90:0e:ad:33:30:03:da:6d:78:03:f2:f9:30:4c:
         6d:9b:73:00:f1:9e:39:97:ee:a6:e2:0b:33:e8:16:10:f7:45:
         32:bd:d0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:06 2024 by rpki-client on console-ams.rpki-client.org