Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2cb2EoyNrUB2CmFP5xzvrSw9W4ApGERRYbsuJz88Z8eW/1/3230302e302e382e302f32312d3234203d3e20323633323531.roa
File:                     3230302e302e382e302f32312d3234203d3e20323633323531.roa (raw, json)
Hash identifier:          sznHOZO+gBb1gYYidSBhGm4XD2FU6VtbDvWFdFZ4Y9I=
Subject key identifier:   96:4B:EA:61:A5:DB:AA:5C:FA:39:2A:08:99:C7:8E:CC:F8:81:04:E7
Certificate issuer:       /CN=099DF7CCFC5474CEBED5335C709CBFAE484FBA37
Certificate serial:       52EAA269942D45DD2B6627128662552E5278F673
Authority key identifier: 09:9D:F7:CC:FC:54:74:CE:BE:D5:33:5C:70:9C:BF:AE:48:4F:BA:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/099DF7CCFC5474CEBED5335C709CBFAE484FBA37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2cb2EoyNrUB2CmFP5xzvrSw9W4ApGERRYbsuJz88Z8eW/1/3230302e302e382e302f32312d3234203d3e20323633323531.roa
Signing time:             Wed 03 Apr 2024 18:32:10 +0000
ROA not before:           Wed 03 Apr 2024 18:27:10 +0000
ROA not after:            Wed 02 Apr 2025 18:32:10 +0000
asID:                     263251
IP address blocks:        200.0.8.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2cb2EoyNrUB2CmFP5xzvrSw9W4ApGERRYbsuJz88Z8eW/1/099DF7CCFC5474CEBED5335C709CBFAE484FBA37.crl
                          rsync://rpki-repo.registro.br/repo/2cb2EoyNrUB2CmFP5xzvrSw9W4ApGERRYbsuJz88Z8eW/1/099DF7CCFC5474CEBED5335C709CBFAE484FBA37.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/099DF7CCFC5474CEBED5335C709CBFAE484FBA37.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:ea:a2:69:94:2d:45:dd:2b:66:27:12:86:62:55:2e:52:78:f6:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=099DF7CCFC5474CEBED5335C709CBFAE484FBA37
        Validity
            Not Before: Apr  3 18:27:10 2024 GMT
            Not After : Apr  2 18:32:10 2025 GMT
        Subject: CN=3082010A0282010100C0DCF3A81B7654B51C3A2979BEB117A9299F9F7A1647BCFAF7E33201D10E7707BF256C05A781A2D746B7EC0A94C42CDD8238CE77BBBFA3AD98FC38DFA13E234C100E3077B4980C3783C9F7DDD6B4D9BC458A7D0F61067FF03EE8FF8BC1EF8D6F876E0032B7D9D14B9AA5775BE44DB2421EB1E28D282CE06CEC941719CB092CE36A820B1C3DC437DF0F22FF8A6442834AD6D42E9D64D4D1E4DB7F2A153B13E73E482026D8CF3CC53D07EF4230CEE522237345773DEAFD48E79CAAE8BD0064BCBCD54FA39016B77F662A4071427BD7187D05B1648F7F0738E7AAA310004BBA27173A90EDA6EB81E99476DA599328D378A7511BFE0241DB1C20D447B544A4F4CC030203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:dc:f3:a8:1b:76:54:b5:1c:3a:29:79:be:b1:
                    17:a9:29:9f:9f:7a:16:47:bc:fa:f7:e3:32:01:d1:
                    0e:77:07:bf:25:6c:05:a7:81:a2:d7:46:b7:ec:0a:
                    94:c4:2c:dd:82:38:ce:77:bb:bf:a3:ad:98:fc:38:
                    df:a1:3e:23:4c:10:0e:30:77:b4:98:0c:37:83:c9:
                    f7:dd:d6:b4:d9:bc:45:8a:7d:0f:61:06:7f:f0:3e:
                    e8:ff:8b:c1:ef:8d:6f:87:6e:00:32:b7:d9:d1:4b:
                    9a:a5:77:5b:e4:4d:b2:42:1e:b1:e2:8d:28:2c:e0:
                    6c:ec:94:17:19:cb:09:2c:e3:6a:82:0b:1c:3d:c4:
                    37:df:0f:22:ff:8a:64:42:83:4a:d6:d4:2e:9d:64:
                    d4:d1:e4:db:7f:2a:15:3b:13:e7:3e:48:20:26:d8:
                    cf:3c:c5:3d:07:ef:42:30:ce:e5:22:23:73:45:77:
                    3d:ea:fd:48:e7:9c:aa:e8:bd:00:64:bc:bc:d5:4f:
                    a3:90:16:b7:7f:66:2a:40:71:42:7b:d7:18:7d:05:
                    b1:64:8f:7f:07:38:e7:aa:a3:10:00:4b:ba:27:17:
                    3a:90:ed:a6:eb:81:e9:94:76:da:59:93:28:d3:78:
                    a7:51:1b:fe:02:41:db:1c:20:d4:47:b5:44:a4:f4:
                    cc:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:4B:EA:61:A5:DB:AA:5C:FA:39:2A:08:99:C7:8E:CC:F8:81:04:E7
            X509v3 Authority Key Identifier:
                keyid:09:9D:F7:CC:FC:54:74:CE:BE:D5:33:5C:70:9C:BF:AE:48:4F:BA:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2cb2EoyNrUB2CmFP5xzvrSw9W4ApGERRYbsuJz88Z8eW/1/099DF7CCFC5474CEBED5335C709CBFAE484FBA37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/099DF7CCFC5474CEBED5335C709CBFAE484FBA37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2cb2EoyNrUB2CmFP5xzvrSw9W4ApGERRYbsuJz88Z8eW/1/3230302e302e382e302f32312d3234203d3e20323633323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ad:82:dd:15:21:1a:79:3c:2f:cc:83:9b:a8:51:5b:10:b0:41:
         46:85:29:f9:91:75:9b:b8:07:56:7f:cb:b2:5a:d8:1a:aa:5d:
         71:b9:cc:71:ff:f1:d2:a1:45:de:cd:de:11:a3:ed:70:eb:aa:
         2f:13:ec:fe:ff:cb:f6:cd:d2:37:09:38:95:f8:4a:d0:02:d5:
         b0:63:70:5e:c0:2f:04:24:e2:70:ee:62:db:b5:64:2a:96:99:
         60:94:68:3e:6c:f0:6f:66:a1:a8:96:26:24:05:e4:a0:48:25:
         85:24:50:ba:76:cb:ec:95:e9:df:cb:88:63:10:58:a3:95:11:
         00:be:e8:ca:6d:7c:8b:58:11:ff:16:36:d3:a5:fd:68:4f:29:
         dd:8e:aa:ff:ea:35:40:2e:43:e9:ae:49:bc:be:d0:07:a7:99:
         67:b0:99:8f:04:07:f5:40:f8:bf:e8:1f:53:06:ca:31:67:50:
         69:bb:22:76:18:fa:80:51:e2:88:80:60:c1:53:8b:d6:19:2c:
         ef:2d:70:91:2e:a2:d6:9d:0b:d3:f8:38:01:26:55:e5:a0:b1:
         70:3c:5c:fd:c8:e2:18:20:55:76:6d:21:78:2b:40:7f:d7:fa:
         d9:3e:12:17:26:9b:02:48:03:20:6b:46:75:b2:bb:b2:76:ec:
         c7:e9:8e:9d
-----BEGIN CERTIFICATE-----
MIIHPTCCBiWgAwIBAgIUUuqiaZQtRd0rZicShmJVLlJ49nMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk5REY3Q0NGQzU0NzRDRUJFRDUzMzVDNzA5Q0JGQUU0
ODRGQkEzNzAeFw0yNDA0MDMxODI3MTBaFw0yNTA0MDIxODMyMTBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzBEQ0YzQTgxQjc2NTRCNTFD
M0EyOTc5QkVCMTE3QTkyOTlGOUY3QTE2NDdCQ0ZBRjdFMzMyMDFEMTBFNzcwN0JG
MjU2QzA1QTc4MUEyRDc0NkI3RUMwQTk0QzQyQ0REODIzOENFNzdCQkJGQTNBRDk4
RkMzOERGQTEzRTIzNEMxMDBFMzA3N0I0OTgwQzM3ODNDOUY3RERENkI0RDlCQzQ1
OEE3RDBGNjEwNjdGRjAzRUU4RkY4QkMxRUY4RDZGODc2RTAwMzJCN0Q5RDE0QjlB
QTU3NzVCRTQ0REIyNDIxRUIxRTI4RDI4MkNFMDZDRUM5NDE3MTlDQjA5MkNFMzZB
ODIwQjFDM0RDNDM3REYwRjIyRkY4QTY0NDI4MzRBRDZENDJFOUQ2NEQ0RDFFNERC
N0YyQTE1M0IxM0U3M0U0ODIwMjZEOENGM0NDNTNEMDdFRjQyMzBDRUU1MjIyMzcz
NDU3NzNERUFGRDQ4RTc5Q0FBRThCRDAwNjRCQ0JDRDU0RkEzOTAxNkI3N0Y2NjJB
NDA3MTQyN0JENzE4N0QwNUIxNjQ4RjdGMDczOEU3QUFBMzEwMDA0QkJBMjcxNzNB
OTBFREE2RUI4MUU5OTQ3NkRBNTk5MzI4RDM3OEE3NTExQkZFMDI0MURCMUMyMEQ0
NDdCNTQ0QTRGNENDMDMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwNzzqBt2VLUcOil5vrEXqSmfn3oWR7z69+MyAdEOdwe/JWwFp4Gi
10a37AqUxCzdgjjOd7u/o62Y/DjfoT4jTBAOMHe0mAw3g8n33da02bxFin0PYQZ/
8D7o/4vB741vh24AMrfZ0UuapXdb5E2yQh6x4o0oLOBs7JQXGcsJLONqggscPcQ3
3w8i/4pkQoNK1tQunWTU0eTbfyoVOxPnPkggJtjPPMU9B+9CMM7lIiNzRXc96v1I
55yq6L0AZLy81U+jkBa3f2YqQHFCe9cYfQWxZI9/BzjnqqMQAEu6Jxc6kO2m64Hp
lHbaWZMo03inURv+AkHbHCDUR7VEpPTMAwIDAQABo4ICSzCCAkcwHQYDVR0OBBYE
FJZL6mGl26pc+jkqCJnHjsz4gQTnMB8GA1UdIwQYMBaAFAmd98z8VHTOvtUzXHCc
v65IT7o3MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJjYjJFb3lOclVCMkNt
RlA1eHp2clN3OVc0QXBHRVJSWWJzdUp6ODhaOGVXLzEvMDk5REY3Q0NGQzU0NzRD
RUJFRDUzMzVDNzA5Q0JGQUU0ODRGQkEzNy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8wOTlERjdDQ0ZDNTQ3NENFQkVENTMzNUM3MDlDQkZBRTQ4NEZC
QTM3LmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8yY2IyRW95TnJVQjJDbUZQNXh6
dnJTdzlXNEFwR0VSUllic3VKejg4WjhlVy8xLzMyMzAzMDJlMzAyZTM4MmUzMDJm
MzIzMTJkMzIzNDIwM2QzZTIwMzIzNjMzMzIzNTMxLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDyAAIMA0G
CSqGSIb3DQEBCwUAA4IBAQCtgt0VIRp5PC/Mg5uoUVsQsEFGhSn5kXWbuAdWf8uy
Wtgaql1xucxx//HSoUXezd4Ro+1w66ovE+z+/8v2zdI3CTiV+ErQAtWwY3BewC8E
JOJw7mLbtWQqlplglGg+bPBvZqGoliYkBeSgSCWFJFC6dsvslenfy4hjEFijlREA
vujKbXyLWBH/FjbTpf1oTyndjqr/6jVALkPprkm8vtAHp5lnsJmPBAf1QPi/6B9T
BsoxZ1BpuyJ2GPqAUeKIgGDBU4vWGSzvLXCRLqLWnQvT+DgBJlXloLFwPFz9yOIY
IFV2bSF4K0B/1/rZPhIXJpsCSAMga0Z1sruyduzH6Y6d
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:13 2024 by rpki-client on console-ams.rpki-client.org