Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2i3pNdkQrPYH4cT4Vpn46Yvpaz4tsbhdQ6ozruAFNQxq/0/3230302e3132342e36342e302f32322d3234203d3e20323730323731.roa
File:                     3230302e3132342e36342e302f32322d3234203d3e20323730323731.roa (raw, json)
Hash identifier:          SfchlU+stUCj3yZ45u+vshVatRqLELVEQkolq779ETg=
Subject key identifier:   7C:3E:96:F3:38:ED:C2:6C:57:01:83:BB:D7:65:A8:7F:D0:33:DF:DB
Certificate issuer:       /CN=A7774A69190523932E4FE0BAAE66C849EEC4F6EB
Certificate serial:       12B8DF80C0D367A161D0EC8F8A04A86BCEAA92B6
Authority key identifier: A7:77:4A:69:19:05:23:93:2E:4F:E0:BA:AE:66:C8:49:EE:C4:F6:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7774A69190523932E4FE0BAAE66C849EEC4F6EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2i3pNdkQrPYH4cT4Vpn46Yvpaz4tsbhdQ6ozruAFNQxq/0/3230302e3132342e36342e302f32322d3234203d3e20323730323731.roa
Signing time:             Sat 09 Nov 2024 16:15:14 +0000
ROA not before:           Sat 09 Nov 2024 16:10:14 +0000
ROA not after:            Sat 08 Nov 2025 16:15:14 +0000
asID:                     270271
IP address blocks:        200.124.64.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2i3pNdkQrPYH4cT4Vpn46Yvpaz4tsbhdQ6ozruAFNQxq/0/A7774A69190523932E4FE0BAAE66C849EEC4F6EB.crl
                          rsync://rpki-repo.registro.br/repo/2i3pNdkQrPYH4cT4Vpn46Yvpaz4tsbhdQ6ozruAFNQxq/0/A7774A69190523932E4FE0BAAE66C849EEC4F6EB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7774A69190523932E4FE0BAAE66C849EEC4F6EB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:38:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:b8:df:80:c0:d3:67:a1:61:d0:ec:8f:8a:04:a8:6b:ce:aa:92:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7774A69190523932E4FE0BAAE66C849EEC4F6EB
        Validity
            Not Before: Nov  9 16:10:14 2024 GMT
            Not After : Nov  8 16:15:14 2025 GMT
        Subject: CN=7C3E96F338EDC26C570183BBD765A87FD033DFDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ab:1f:8e:61:f3:01:58:6e:c3:be:85:2e:25:
                    93:9d:cd:f4:43:25:41:5a:b0:ba:1d:7a:c5:c6:38:
                    5e:53:1f:f6:c3:1c:78:06:77:3b:61:0b:7c:be:53:
                    e9:df:86:47:16:17:76:00:c1:92:01:7e:8f:94:b9:
                    93:6f:2e:b1:54:69:22:b6:f8:34:ce:cb:90:09:5f:
                    06:b4:3a:88:c5:c1:40:35:ad:7c:c4:66:e6:0b:b2:
                    e8:01:38:36:69:20:a1:48:a0:90:f5:59:da:64:c3:
                    cc:3f:7e:e7:05:49:80:8f:d5:3e:aa:63:97:01:cb:
                    58:ac:52:79:c6:aa:f0:fa:c2:0d:b0:04:ac:87:c9:
                    db:e1:b5:ea:f4:f7:61:eb:f0:68:62:35:0a:c8:07:
                    90:53:69:f6:0b:a4:ba:48:19:ae:20:4b:70:71:f2:
                    be:b6:a0:7b:35:77:9c:a6:30:ba:3f:45:93:0a:18:
                    ab:92:9c:2c:cc:e8:0b:d6:44:96:5a:56:c2:d8:5f:
                    44:c9:eb:20:9b:17:28:bf:f0:1a:b5:a8:89:52:d5:
                    1c:13:7b:d0:dd:55:73:a6:e0:fe:c6:6f:c7:83:c2:
                    29:55:9e:4f:1a:d0:80:5f:b4:cc:38:a3:59:a4:f5:
                    fe:b3:6e:ee:20:20:de:16:65:98:36:08:1a:f2:96:
                    fc:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:3E:96:F3:38:ED:C2:6C:57:01:83:BB:D7:65:A8:7F:D0:33:DF:DB
            X509v3 Authority Key Identifier:
                keyid:A7:77:4A:69:19:05:23:93:2E:4F:E0:BA:AE:66:C8:49:EE:C4:F6:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2i3pNdkQrPYH4cT4Vpn46Yvpaz4tsbhdQ6ozruAFNQxq/0/A7774A69190523932E4FE0BAAE66C849EEC4F6EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7774A69190523932E4FE0BAAE66C849EEC4F6EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2i3pNdkQrPYH4cT4Vpn46Yvpaz4tsbhdQ6ozruAFNQxq/0/3230302e3132342e36342e302f32322d3234203d3e20323730323731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:d4:f5:aa:31:59:c7:fd:97:e4:00:39:a2:16:5c:43:52:26:
         41:90:bc:7a:2b:1e:d8:bf:0a:a7:6a:57:80:90:df:e0:f8:73:
         09:30:94:9c:2c:4a:9e:b2:1b:a1:83:93:a9:92:e3:d2:fe:e9:
         59:c8:85:20:39:3d:8c:b8:a8:47:b5:1f:ba:ac:0b:71:ad:9d:
         af:63:02:3e:a2:81:ce:95:88:b2:ab:0a:f8:a0:c1:be:81:de:
         5f:9e:71:86:7e:cf:73:8f:82:51:16:90:76:75:4d:76:d5:e6:
         c3:55:c5:5b:83:c1:f3:80:0e:b3:08:4c:5c:ea:56:8f:9d:ba:
         0b:de:c9:f2:93:06:eb:9f:51:54:e8:4e:cc:9e:fb:ea:b9:99:
         a5:a4:08:4f:fc:21:86:11:12:03:bb:95:f6:c4:85:26:da:6b:
         a9:0b:a4:7f:b3:6c:71:29:63:b1:9d:30:ac:5a:01:1a:76:07:
         54:93:1a:ea:d9:8a:09:d9:54:2e:2a:27:c3:00:5c:37:49:83:
         72:39:c5:94:4e:15:3c:cb:f0:53:92:75:21:9a:35:1a:18:e3:
         dd:68:1a:d3:06:76:d2:78:dc:b3:d9:ed:c2:92:36:1d:c4:ce:
         b9:1b:a5:43:3a:3a:46:ca:f3:04:1b:39:2a:fd:c5:7c:3a:5b:
         c1:a2:de:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:25:27 2024 by rpki-client on console-ams.rpki-client.org