Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3m69njKPmDVzoqWNJse1XMmuaqcFM8F5xqMGR8BZr4fo/1/3230302e392e3132332e302f32342d3234203d3e20323633353136.roa
File:                     3230302e392e3132332e302f32342d3234203d3e20323633353136.roa (raw, json)
Hash identifier:          WiLgWxws4bPHaLk727pFtFFVs0wFqWCsrDH+Q4k3ats=
Subject key identifier:   1E:C5:F9:74:CB:88:DE:C3:2D:91:BF:DC:ED:6E:65:D6:C1:24:53:E4
Certificate issuer:       /CN=6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1
Certificate serial:       04534E3CE3E247A427CAC76D9FBF6C550D6A8005
Authority key identifier: 6A:0F:81:CD:4B:DD:AA:53:C1:B0:93:1E:51:E8:B1:59:E0:2A:5C:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3m69njKPmDVzoqWNJse1XMmuaqcFM8F5xqMGR8BZr4fo/1/3230302e392e3132332e302f32342d3234203d3e20323633353136.roa
Signing time:             Thu 04 Apr 2024 11:00:15 +0000
ROA not before:           Thu 04 Apr 2024 10:55:15 +0000
ROA not after:            Thu 03 Apr 2025 11:00:15 +0000
asID:                     263516
IP address blocks:        200.9.123.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3m69njKPmDVzoqWNJse1XMmuaqcFM8F5xqMGR8BZr4fo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.crl
                          rsync://rpki-repo.registro.br/repo/3m69njKPmDVzoqWNJse1XMmuaqcFM8F5xqMGR8BZr4fo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 16:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:53:4e:3c:e3:e2:47:a4:27:ca:c7:6d:9f:bf:6c:55:0d:6a:80:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1
        Validity
            Not Before: Apr  4 10:55:15 2024 GMT
            Not After : Apr  3 11:00:15 2025 GMT
        Subject: CN=1EC5F974CB88DEC32D91BFDCED6E65D6C12453E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:22:2f:c6:55:29:84:99:07:91:d3:0d:69:b9:
                    6f:0e:f1:86:91:e5:80:b4:66:9f:ea:40:4c:da:f2:
                    99:00:1d:65:49:12:d2:85:9f:28:9f:1d:a8:85:09:
                    d4:b6:65:22:36:6f:c5:b4:7c:86:48:12:19:60:2c:
                    c4:0a:ff:c4:2f:9b:6f:58:ab:4d:db:a3:ca:4c:f2:
                    61:91:61:b0:bb:33:58:c3:95:f4:31:96:1f:a1:de:
                    78:99:55:62:f9:e1:9f:48:49:bc:44:37:d7:4e:08:
                    fb:4e:50:bd:1d:7d:bc:11:26:52:bf:fb:f5:07:b7:
                    d6:1e:30:15:2a:5f:b3:9f:a6:0e:d7:4d:01:d1:3b:
                    20:13:6c:1c:15:ec:c7:d7:d7:8a:bf:a8:18:ee:12:
                    bd:45:25:da:e1:5e:a9:83:b4:c9:3a:c8:40:32:a9:
                    dd:67:6f:e7:41:45:32:95:f3:13:77:48:b9:1e:3c:
                    c0:79:54:59:43:8a:0e:34:81:84:22:f7:f2:51:6a:
                    78:9b:9c:29:9a:34:80:04:23:f8:f1:8a:cf:0a:f1:
                    7b:d1:45:7c:3e:82:86:0f:dc:96:b2:70:fa:5c:af:
                    05:3d:9d:e2:b0:71:4e:30:4b:c9:a1:c4:4f:09:d0:
                    ec:1f:44:1b:4b:96:06:e0:da:12:bb:52:e2:15:eb:
                    47:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:C5:F9:74:CB:88:DE:C3:2D:91:BF:DC:ED:6E:65:D6:C1:24:53:E4
            X509v3 Authority Key Identifier:
                keyid:6A:0F:81:CD:4B:DD:AA:53:C1:B0:93:1E:51:E8:B1:59:E0:2A:5C:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3m69njKPmDVzoqWNJse1XMmuaqcFM8F5xqMGR8BZr4fo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3m69njKPmDVzoqWNJse1XMmuaqcFM8F5xqMGR8BZr4fo/1/3230302e392e3132332e302f32342d3234203d3e20323633353136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:59:b2:ca:49:c4:7a:e9:47:0c:de:36:20:3e:f5:f3:25:dc:
         b9:9a:aa:8a:2e:3f:1e:15:ba:27:16:bd:d6:81:22:19:ed:fa:
         b1:9d:0d:a6:15:b9:66:a2:e0:b9:39:b6:c9:55:73:7f:b9:2f:
         6d:04:d6:6e:7e:00:5f:62:5d:1d:7e:fe:67:e3:93:3b:05:e3:
         92:e0:c2:37:f7:71:dc:52:60:b4:73:d4:c2:51:79:f5:d1:a3:
         2c:60:60:81:10:24:ea:f6:90:b3:0d:71:2d:43:e9:0a:df:03:
         a7:bd:55:3b:e3:e5:33:02:64:a4:d8:8e:f1:80:04:a3:4d:05:
         ee:1c:74:38:53:4f:bf:cc:c9:ac:a9:f8:d7:13:42:ff:35:9d:
         8d:f8:5c:5f:90:1c:10:54:ed:4a:42:5e:4b:12:27:31:c7:f7:
         9f:a4:20:74:70:cd:21:a1:2f:45:c6:6a:85:d6:a8:5e:36:13:
         6d:33:82:ed:97:2e:dc:c2:c7:bf:cf:d0:43:05:d3:6e:c9:ac:
         74:a1:98:88:13:35:ea:c0:f0:06:d1:4d:3c:eb:7d:b9:d9:1b:
         80:b0:89:7f:a4:df:bb:dd:62:bc:02:44:94:e1:46:16:82:76:
         b8:03:93:d1:2d:ed:d9:d6:a8:3c:47:57:c9:ac:d9:f0:cf:0a:
         5b:96:47:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 15:42:14 2024 by rpki-client on console-fra.rpki-client.org