Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/3230302e3234302e3232342e302f31392d3234203d3e203238323833.roa
File:                     3230302e3234302e3232342e302f31392d3234203d3e203238323833.roa (raw, json)
Hash identifier:          1vJ7mHpHCyTcujL/BQhj3o7E1xrj2f3rjPvJQBZzX/0=
Subject key identifier:   B7:69:1F:C1:C2:6A:72:B9:03:02:14:DB:13:F8:B2:92:AA:57:06:8D
Certificate issuer:       /CN=A690240C3E88B330B9BD0B91791F519DB5BE8C59
Certificate serial:       7130BAF76AA44221EE670B67B574717A77D8B6BA
Authority key identifier: A6:90:24:0C:3E:88:B3:30:B9:BD:0B:91:79:1F:51:9D:B5:BE:8C:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/3230302e3234302e3232342e302f31392d3234203d3e203238323833.roa
Signing time:             Wed 03 Apr 2024 19:00:01 +0000
ROA not before:           Wed 03 Apr 2024 18:55:01 +0000
ROA not after:            Thu 03 Apr 2025 19:00:01 +0000
asID:                     28283
IP address blocks:        200.240.224.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.crl
                          rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:30:ba:f7:6a:a4:42:21:ee:67:0b:67:b5:74:71:7a:77:d8:b6:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A690240C3E88B330B9BD0B91791F519DB5BE8C59
        Validity
            Not Before: Apr  3 18:55:01 2024 GMT
            Not After : Apr  3 19:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:30:65:fd:94:85:be:d8:1f:f2:7b:d0:9a:7e:
                    24:90:68:29:37:d0:81:60:ff:80:6d:af:ea:4f:36:
                    cc:39:9d:11:43:7b:cf:6e:e3:82:d0:7a:48:41:f2:
                    44:07:df:58:69:f4:63:6b:c6:46:e2:79:bf:63:3a:
                    3f:a5:b6:99:10:bb:3c:e0:ce:82:27:7b:f2:fc:1f:
                    68:96:57:76:03:5a:34:fb:69:85:be:5f:d1:58:e6:
                    04:ee:d6:de:ba:2a:f2:eb:2d:59:6e:16:d0:67:12:
                    ba:59:b5:5a:ff:b4:ed:83:c3:e5:12:65:44:b3:1f:
                    3e:a6:49:a5:94:f3:34:58:ec:6f:0a:d3:d2:49:77:
                    79:93:bb:29:4a:6a:9e:06:53:c0:08:9b:48:af:7e:
                    93:4f:c1:bb:c8:a1:e5:97:f5:10:0e:53:e6:39:73:
                    4c:45:5e:ef:f0:84:5a:c6:fc:b0:ab:9c:17:6e:87:
                    8e:0a:5f:3c:f8:71:ed:55:16:b8:37:fc:61:c7:cb:
                    12:f1:26:fe:a5:a8:da:bc:65:60:d2:c5:8c:eb:15:
                    0e:f0:a3:4b:58:d7:0d:63:08:12:c4:ff:56:ed:38:
                    9f:f7:7b:2c:dc:d4:ca:a7:05:38:9e:e0:14:6e:66:
                    33:42:29:f3:5c:ca:89:54:9d:09:bb:8a:a4:a0:2c:
                    1d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:69:1F:C1:C2:6A:72:B9:03:02:14:DB:13:F8:B2:92:AA:57:06:8D
            X509v3 Authority Key Identifier:
                keyid:A6:90:24:0C:3E:88:B3:30:B9:BD:0B:91:79:1F:51:9D:B5:BE:8C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/3230302e3234302e3232342e302f31392d3234203d3e203238323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.240.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         c9:0d:56:7c:67:f2:87:39:8a:a5:bc:09:92:c8:1a:77:79:70:
         45:0b:2e:e4:6e:49:d9:fb:62:a8:a0:64:bc:e9:50:f3:4d:f1:
         b4:6e:8a:62:b1:e2:09:d1:6e:38:b3:43:df:68:06:ac:cd:c8:
         9a:e6:96:be:27:5a:a2:7c:69:29:db:1a:a1:ff:49:39:b7:9e:
         46:25:60:43:46:7a:4a:94:44:4b:4c:37:b6:6c:f3:3b:98:75:
         ce:d7:2e:d9:fc:d8:ba:7f:9c:5d:46:ad:8e:18:1d:4d:56:1d:
         0e:da:ca:49:65:80:02:ab:42:d3:6d:29:02:74:22:4b:fa:85:
         50:85:91:ef:ce:dc:2c:d5:7f:4d:09:3d:ee:3a:c8:6e:44:93:
         84:93:2c:ec:ea:59:c9:dc:ad:d1:d4:ce:59:4c:b7:1e:65:b2:
         92:14:a7:50:34:08:ca:e0:43:58:f8:25:0f:73:41:cc:56:a7:
         0b:2b:ea:f8:5c:39:20:bc:04:37:db:ac:6a:80:67:c3:b6:bf:
         cd:dd:f9:be:55:f3:63:e6:d6:36:20:fb:7b:9b:a3:79:46:01:
         5b:e9:d4:57:99:40:87:f7:f4:f4:4e:45:d3:35:12:cc:63:70:
         fe:af:b5:7b:24:97:53:e5:27:fd:76:3c:36:d1:ec:ea:39:d2:
         06:1c:1c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:30 2024 by rpki-client on console-fra.rpki-client.org