Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/3230302e3131302e3230342e302f32322d3234203d3e20323730323533.roa
File:                     3230302e3131302e3230342e302f32322d3234203d3e20323730323533.roa (raw, json)
Hash identifier:          H8IC87petCm78wkpbSUVtU2ednNDZpnJVTm3tnKFXrU=
Subject key identifier:   41:57:3A:0F:8F:B0:C7:A8:33:42:13:F1:10:AC:68:E8:AB:5F:92:F2
Certificate issuer:       /CN=3FD3A12D37BF70EB945F121D5A0538B98BBCEBCD
Certificate serial:       31943586C52F780760B3C3DB4C886661978A14FA
Authority key identifier: 3F:D3:A1:2D:37:BF:70:EB:94:5F:12:1D:5A:05:38:B9:8B:BC:EB:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FD3A12D37BF70EB945F121D5A0538B98BBCEBCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/3230302e3131302e3230342e302f32322d3234203d3e20323730323533.roa
Signing time:             Wed 05 Jun 2024 19:29:23 +0000
ROA not before:           Wed 05 Jun 2024 19:24:23 +0000
ROA not after:            Wed 04 Jun 2025 19:29:23 +0000
asID:                     270253
IP address blocks:        200.110.204.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/3FD3A12D37BF70EB945F121D5A0538B98BBCEBCD.crl
                          rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/3FD3A12D37BF70EB945F121D5A0538B98BBCEBCD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FD3A12D37BF70EB945F121D5A0538B98BBCEBCD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 13:13:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:94:35:86:c5:2f:78:07:60:b3:c3:db:4c:88:66:61:97:8a:14:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FD3A12D37BF70EB945F121D5A0538B98BBCEBCD
        Validity
            Not Before: Jun  5 19:24:23 2024 GMT
            Not After : Jun  4 19:29:23 2025 GMT
        Subject: CN=41573A0F8FB0C7A8334213F110AC68E8AB5F92F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:07:7c:8f:73:69:a8:8e:8d:7e:03:ba:03:72:
                    2f:59:0d:66:80:75:da:ff:60:76:59:85:c9:94:7d:
                    36:17:9f:d7:af:5a:15:0e:25:5f:13:0f:38:de:a9:
                    e6:af:a1:59:cc:5a:d5:98:d9:69:10:dd:9f:01:8e:
                    b1:b2:3a:40:64:ca:d4:d2:2a:9d:a3:c2:cf:9c:d1:
                    d2:c5:86:27:f3:5d:8d:fb:98:f2:66:db:d2:c3:34:
                    43:08:94:c9:86:4d:eb:d5:73:7f:7c:8e:9c:7d:09:
                    be:43:d4:71:18:1e:71:e8:d0:6d:42:31:6d:01:f2:
                    af:e6:09:74:a4:85:d5:22:7e:5f:7a:7b:d8:8e:bc:
                    2b:82:2b:9d:3e:0e:a3:9d:f3:00:c5:2f:75:18:a9:
                    81:42:49:80:57:c7:22:49:7b:e4:17:56:fc:6e:e0:
                    10:60:79:8e:5e:4c:de:0e:46:fd:ea:78:c4:51:f1:
                    4f:d5:45:1e:6d:3f:20:d5:00:b9:fe:e5:3e:c7:96:
                    dc:6f:5a:ed:ce:85:39:57:c8:46:62:30:85:35:3b:
                    97:de:af:53:da:5d:b1:da:68:51:e3:69:d5:d7:23:
                    88:1e:54:37:b0:88:60:59:de:ac:87:72:e5:a9:1a:
                    36:38:5c:87:cc:d0:37:4b:21:d0:54:30:4a:2a:83:
                    fe:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:57:3A:0F:8F:B0:C7:A8:33:42:13:F1:10:AC:68:E8:AB:5F:92:F2
            X509v3 Authority Key Identifier:
                keyid:3F:D3:A1:2D:37:BF:70:EB:94:5F:12:1D:5A:05:38:B9:8B:BC:EB:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/3FD3A12D37BF70EB945F121D5A0538B98BBCEBCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FD3A12D37BF70EB945F121D5A0538B98BBCEBCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/3230302e3131302e3230342e302f32322d3234203d3e20323730323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:c9:a6:a3:08:8f:0c:94:2c:ce:9e:0b:1f:da:f3:9f:78:2c:
         52:6f:29:76:64:c7:2d:d5:5d:d3:eb:d9:0e:0f:ba:6f:e1:33:
         7b:d4:c1:8c:a5:fd:29:22:c4:50:d9:db:c9:bb:0b:9d:fd:06:
         2a:ae:03:18:e5:dd:e0:c7:b6:2e:8a:c8:73:3c:6e:2a:50:0a:
         f9:6c:9c:16:01:89:d6:4b:ef:8d:93:cd:ca:73:85:19:3c:1e:
         f1:92:78:69:fd:e7:ba:ad:d4:be:80:6d:53:8d:4c:ce:49:15:
         7d:50:0f:1b:f6:c7:a5:7b:85:57:8f:4d:7d:4d:a3:cb:37:5c:
         ce:e8:41:f2:7e:96:6a:1d:1f:5d:89:1d:95:48:43:60:4a:d0:
         ae:37:28:30:be:03:58:ce:8b:0a:ac:b2:28:55:91:31:1e:e4:
         26:47:76:3b:06:79:5f:31:8d:67:b1:0a:11:2f:7e:64:74:5f:
         2d:03:3e:d1:e2:e6:1b:ae:1c:09:d8:da:c8:fe:51:45:82:3a:
         fd:9c:35:53:a8:ba:16:02:67:aa:a7:47:78:61:9d:e5:ad:68:
         aa:0c:2f:e6:12:0d:34:6e:76:58:b3:1a:41:9a:15:c2:38:b6:
         3e:aa:20:a9:4d:6f:2d:53:73:43:f4:d3:5f:fe:d7:39:d7:f3:
         68:9c:a9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 13:25:02 2024 by rpki-client on console-ams.rpki-client.org