Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/1/3230302e3231352e3232342e302f32322d3234203d3e20323731333837.roa
File:                     3230302e3231352e3232342e302f32322d3234203d3e20323731333837.roa (raw, json)
Hash identifier:          jo/UnNTO1uIQZ7EAuUx3lZExmYK/nW+LDPuu2UzZeqQ=
Subject key identifier:   51:D2:D8:13:1B:1D:9E:C4:32:78:34:D7:11:60:1A:31:16:25:0D:1D
Certificate issuer:       /CN=CEEA8A82DFD1657B45EA518ED6EED91D63C8C6BB
Certificate serial:       3D7F3835AC46956AF87AAF4C2DF7875A6B954E24
Authority key identifier: CE:EA:8A:82:DF:D1:65:7B:45:EA:51:8E:D6:EE:D9:1D:63:C8:C6:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEEA8A82DFD1657B45EA518ED6EED91D63C8C6BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/1/3230302e3231352e3232342e302f32322d3234203d3e20323731333837.roa
Signing time:             Thu 04 Apr 2024 09:07:25 +0000
ROA not before:           Thu 04 Apr 2024 09:02:25 +0000
ROA not after:            Thu 03 Apr 2025 09:07:25 +0000
asID:                     271387
IP address blocks:        200.215.224.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/1/CEEA8A82DFD1657B45EA518ED6EED91D63C8C6BB.crl
                          rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/1/CEEA8A82DFD1657B45EA518ED6EED91D63C8C6BB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEEA8A82DFD1657B45EA518ED6EED91D63C8C6BB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:7f:38:35:ac:46:95:6a:f8:7a:af:4c:2d:f7:87:5a:6b:95:4e:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEEA8A82DFD1657B45EA518ED6EED91D63C8C6BB
        Validity
            Not Before: Apr  4 09:02:25 2024 GMT
            Not After : Apr  3 09:07:25 2025 GMT
        Subject: CN=51D2D8131B1D9EC4327834D711601A3116250D1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:53:4e:c3:7e:4d:6d:d5:02:58:0e:c4:e3:ce:
                    b7:6b:00:a5:11:65:93:71:00:fe:e2:e8:a9:d6:75:
                    b7:61:d9:f5:57:83:b4:6e:dd:95:c5:fb:40:73:5f:
                    5b:09:a9:0e:da:54:0b:ec:41:3f:72:bd:62:f5:1b:
                    f1:ee:78:a8:d7:a9:17:00:86:41:cf:d0:f8:81:ef:
                    ea:4f:72:69:e1:64:69:62:d8:ef:59:d8:eb:bd:b2:
                    ca:a3:f0:a5:78:92:78:52:2c:ac:c4:66:11:da:7d:
                    7b:a0:16:24:d0:51:b4:c8:5e:08:b7:cc:4d:d3:54:
                    b2:5a:1f:1b:ee:70:57:02:8b:ed:9a:c4:ee:36:09:
                    4a:2c:e3:b8:93:5e:18:ec:8c:56:73:02:33:4f:c9:
                    c1:44:6e:eb:63:8b:19:57:39:c5:74:44:81:b6:43:
                    1d:d8:94:41:dc:53:03:d9:3c:c6:29:71:42:6a:bb:
                    51:92:f5:54:f5:ac:e5:ae:ed:ee:5f:76:58:1f:3f:
                    4e:13:b5:da:af:6a:13:41:12:45:21:a7:c1:25:3c:
                    b0:05:aa:c5:19:85:1d:b9:60:46:95:09:5e:17:e9:
                    0d:53:57:5c:b6:a4:e4:3a:22:59:3a:30:07:b0:15:
                    10:79:02:51:ea:86:5b:fe:33:1e:91:ed:35:19:aa:
                    00:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D2:D8:13:1B:1D:9E:C4:32:78:34:D7:11:60:1A:31:16:25:0D:1D
            X509v3 Authority Key Identifier:
                keyid:CE:EA:8A:82:DF:D1:65:7B:45:EA:51:8E:D6:EE:D9:1D:63:C8:C6:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/1/CEEA8A82DFD1657B45EA518ED6EED91D63C8C6BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEEA8A82DFD1657B45EA518ED6EED91D63C8C6BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/1/3230302e3231352e3232342e302f32322d3234203d3e20323731333837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.215.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c4:90:cc:fd:4e:7c:04:dd:c7:6b:b6:ae:36:1b:52:a2:b5:8d:
         10:98:8b:40:bb:53:a9:98:98:e5:b7:3b:6f:15:11:68:8d:6c:
         96:80:00:4a:99:9b:b1:9b:10:b4:11:bd:9e:73:a1:48:6f:be:
         57:43:9b:41:71:af:bc:f6:5f:cd:2c:ea:fb:82:42:82:77:f2:
         ed:6b:0c:f7:ed:fd:42:1f:b7:b1:f9:df:c6:5e:b1:b2:f1:99:
         63:41:9f:fa:e5:48:94:25:e0:c6:83:9f:c9:92:77:50:c0:38:
         e7:83:cc:50:ca:3b:d8:44:6f:fa:48:de:40:93:95:20:05:0d:
         1f:0e:3d:98:b0:84:59:2c:04:a5:e8:f6:91:90:69:c4:b8:c4:
         fa:c2:e4:8e:ed:45:48:68:e3:64:8c:32:b9:15:a4:3d:b9:ee:
         b8:75:16:ba:52:72:d1:79:97:46:80:2a:e1:88:08:bc:7c:07:
         33:24:6e:dd:92:2a:ec:5f:cb:8b:40:52:d2:39:c9:8f:bc:3e:
         c1:1c:d4:8c:8f:c5:11:e6:1c:d7:50:9f:aa:b0:c2:5e:8e:bd:
         1e:e3:34:bc:b7:b1:94:c8:6d:f6:1d:5e:78:6f:61:72:80:a3:
         0a:64:a6:ed:bf:6a:3d:3f:56:9e:02:b5:ce:b0:d0:70:fb:45:
         c7:f8:b2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:36:30 2024 by rpki-client on console-ams.rpki-client.org