Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/3230302e3139362e3132382e302f32322d3234203d3e20323632343632.roa
File:                     3230302e3139362e3132382e302f32322d3234203d3e20323632343632.roa (raw, json)
Hash identifier:          Rblwuqo5acf6dWKooH9NTGgYe271Q8C9fKdF7zt4wgs=
Subject key identifier:   51:12:61:95:BC:50:4B:5D:BB:84:10:6F:D2:FE:75:55:E4:0E:E8:6C
Certificate issuer:       /CN=94C8960DB5853BB60A49187478AA5E61DA0D3288
Certificate serial:       7DA66D23950E7B60E621D235BF2440794C28633A
Authority key identifier: 94:C8:96:0D:B5:85:3B:B6:0A:49:18:74:78:AA:5E:61:DA:0D:32:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/3230302e3139362e3132382e302f32322d3234203d3e20323632343632.roa
Signing time:             Fri 05 Apr 2024 04:21:27 +0000
ROA not before:           Fri 05 Apr 2024 04:16:27 +0000
ROA not after:            Fri 04 Apr 2025 04:21:27 +0000
asID:                     262462
IP address blocks:        200.196.128.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.crl
                          rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:a6:6d:23:95:0e:7b:60:e6:21:d2:35:bf:24:40:79:4c:28:63:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94C8960DB5853BB60A49187478AA5E61DA0D3288
        Validity
            Not Before: Apr  5 04:16:27 2024 GMT
            Not After : Apr  4 04:21:27 2025 GMT
        Subject: CN=51126195BC504B5DBB84106FD2FE7555E40EE86C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7e:6f:49:26:8c:6a:b2:d5:c5:cd:a1:2c:36:
                    ce:b5:93:7b:2d:94:bc:6f:cb:12:85:35:d4:cc:f6:
                    21:ae:57:3f:4f:4e:09:24:6d:3b:df:0d:e5:1b:cf:
                    a8:c8:e5:40:fe:18:54:57:f3:c1:68:81:f3:51:39:
                    29:d7:a9:be:07:0d:07:1b:17:70:25:97:f4:3f:cb:
                    7e:da:60:a3:51:4a:96:b0:46:69:22:d0:94:86:62:
                    68:94:54:b1:b8:76:d6:b8:61:50:6a:8d:64:4d:ab:
                    50:bd:e3:0b:f9:53:40:36:44:64:2a:32:fa:12:c0:
                    b0:37:1e:10:90:6c:2c:01:c7:7f:7d:07:59:4f:6a:
                    eb:04:8e:93:4a:e1:e2:03:f9:59:d4:01:60:8e:bf:
                    67:21:cc:a0:97:00:f7:f5:4d:de:26:c0:ef:a1:70:
                    c2:39:12:8e:77:eb:c5:31:1a:00:b4:1b:28:1e:6a:
                    ec:1d:88:46:a9:ca:27:cb:78:75:55:5a:46:3a:2f:
                    49:c4:04:72:b6:b7:57:b3:cb:8f:50:78:cb:a6:56:
                    31:9a:55:92:15:16:cb:9a:cf:a3:f5:15:b6:ca:e6:
                    9d:75:5b:e8:37:97:ad:0f:67:8a:f8:18:91:fc:2d:
                    62:04:36:a8:31:e6:4f:18:07:78:c5:7a:ab:88:15:
                    a6:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:12:61:95:BC:50:4B:5D:BB:84:10:6F:D2:FE:75:55:E4:0E:E8:6C
            X509v3 Authority Key Identifier:
                keyid:94:C8:96:0D:B5:85:3B:B6:0A:49:18:74:78:AA:5E:61:DA:0D:32:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/3230302e3139362e3132382e302f32322d3234203d3e20323632343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.196.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:bd:51:3e:83:11:b1:df:07:6f:68:75:8b:81:d2:ad:78:01:
         fb:49:b7:6d:90:f5:d3:18:1b:76:53:38:db:4a:75:64:cc:8b:
         39:42:91:d8:4d:3a:96:e5:71:5b:da:b6:f2:7d:34:53:05:b1:
         16:7f:a3:5c:b2:39:0e:85:06:1c:29:00:97:86:3c:e8:5d:bb:
         7f:f5:3e:79:58:d7:9c:c0:17:2c:16:8a:44:b6:9d:6d:ff:ad:
         2f:8f:e2:76:23:0d:01:48:55:79:d6:8d:63:9c:52:b9:b2:d1:
         ec:a8:b0:b4:bb:b9:dd:f6:7a:d3:d6:91:5d:e8:83:ec:60:5d:
         4f:9c:49:9b:a9:5e:70:98:0b:af:73:b2:8b:32:4e:22:c5:0a:
         6c:46:39:00:03:75:40:5b:aa:8d:1f:a4:f2:5d:a7:d4:2f:cc:
         d5:45:b5:ab:17:c0:a4:dd:f8:62:2a:98:15:bc:e1:bb:14:59:
         a4:1c:20:24:66:1a:d9:25:35:b3:0d:d0:e5:02:54:0f:5e:8b:
         e9:a0:38:bf:23:90:38:ee:53:3f:18:3d:6e:c4:1e:ac:a5:5e:
         e6:4d:f9:aa:ca:e1:82:88:f2:2d:44:af:cd:c4:55:7c:56:d0:
         3f:57:ac:d6:9e:09:90:4a:a2:3a:44:4a:fe:f3:71:61:ee:98:
         14:8e:38:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:08 2024 by rpki-client on console-fra.rpki-client.org