Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/3230302e3231382e3234302e302f32302d3230203d3e203238353934.roa
File:                     3230302e3231382e3234302e302f32302d3230203d3e203238353934.roa (raw, json)
Hash identifier:          lDsT8kfMZrWI2cZX4ANPDK1SW+dtGkRIARyCU5oErC0=
Subject key identifier:   55:4E:F6:0D:73:FC:06:0C:4C:91:D1:91:07:30:9D:96:4D:39:D4:BF
Certificate issuer:       /CN=9C0B0F9C917C39C4E0A392991B6A86E0D4917406
Certificate serial:       1394DB31DF33B77D127B0E18F74E1449FBC3E44F
Authority key identifier: 9C:0B:0F:9C:91:7C:39:C4:E0:A3:92:99:1B:6A:86:E0:D4:91:74:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/3230302e3231382e3234302e302f32302d3230203d3e203238353934.roa
Signing time:             Thu 04 Apr 2024 00:53:37 +0000
ROA not before:           Thu 04 Apr 2024 00:48:37 +0000
ROA not after:            Thu 03 Apr 2025 00:53:37 +0000
asID:                     28594
IP address blocks:        200.218.240.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.crl
                          rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 21:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:94:db:31:df:33:b7:7d:12:7b:0e:18:f7:4e:14:49:fb:c3:e4:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C0B0F9C917C39C4E0A392991B6A86E0D4917406
        Validity
            Not Before: Apr  4 00:48:37 2024 GMT
            Not After : Apr  3 00:53:37 2025 GMT
        Subject: CN=554EF60D73FC060C4C91D19107309D964D39D4BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a0:ac:1c:f5:e3:05:9e:18:62:b7:0d:da:23:
                    02:80:24:8c:75:c3:9d:01:ed:2d:2c:7f:14:ac:82:
                    60:fa:f1:8c:9b:6a:f3:36:45:8a:de:50:95:86:4c:
                    37:c7:11:29:b4:8a:2e:5f:15:b6:ba:30:ad:50:ef:
                    b4:1f:fb:f0:ac:c6:19:3a:a6:3b:b9:47:11:89:73:
                    0c:0c:ed:65:55:e9:67:0b:2d:ae:83:30:12:a2:6c:
                    ad:57:1e:ce:68:56:04:b4:67:16:11:76:b7:c2:42:
                    ca:ab:ef:fb:6d:d5:1a:68:af:36:e9:97:17:19:e4:
                    32:97:0e:e5:03:42:c2:c2:4b:50:98:d1:a6:2d:ac:
                    b8:8c:88:22:57:72:d2:5f:84:72:68:42:e4:45:e5:
                    57:91:23:66:3a:37:7a:e5:ee:37:d1:8a:ab:04:ee:
                    38:43:b9:be:3b:1b:a6:b6:1a:7f:61:f5:f5:35:d8:
                    f1:8a:22:8c:7c:e3:db:4e:6f:3a:ac:2b:8f:4c:57:
                    93:13:c5:d1:c3:10:2f:47:e5:4c:2e:e0:f4:60:a9:
                    2e:e7:91:c7:e8:ad:9e:1d:04:f5:c5:4a:ce:9c:a2:
                    df:78:e1:f0:ab:d9:87:3e:1f:6b:a5:6f:0f:50:41:
                    99:12:49:91:d9:a4:a2:d8:1f:a3:12:cd:7a:17:5d:
                    09:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:4E:F6:0D:73:FC:06:0C:4C:91:D1:91:07:30:9D:96:4D:39:D4:BF
            X509v3 Authority Key Identifier:
                keyid:9C:0B:0F:9C:91:7C:39:C4:E0:A3:92:99:1B:6A:86:E0:D4:91:74:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/3230302e3231382e3234302e302f32302d3230203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7b:2b:0a:43:c7:a6:e4:86:8e:e7:e5:fc:0d:18:7d:f8:aa:31:
         2a:fc:df:ce:28:5e:ad:f1:27:2e:53:54:be:88:bf:5b:35:1a:
         78:77:c1:85:30:11:b5:f9:41:62:2f:d8:d1:41:d6:11:01:0e:
         b5:10:e2:e8:35:e9:2a:b1:b1:5d:f5:cb:b4:e2:7a:c3:c8:1b:
         f2:fb:ae:a8:3a:1b:cd:2e:7e:2e:1f:85:39:1e:0e:96:d4:d4:
         1c:bd:32:16:d2:fb:82:9b:e3:82:8c:e7:9a:94:03:75:66:90:
         38:28:77:d2:de:57:e8:5d:9e:c2:a7:72:78:9a:ab:bc:2e:5b:
         9f:97:7e:6e:72:2a:dd:89:ba:2b:82:99:50:6d:5e:fc:79:d6:
         cc:5e:2b:39:65:eb:5f:8d:05:be:d4:95:e1:30:44:1f:6b:f9:
         80:9e:8a:28:eb:55:0c:00:bc:4d:e3:15:8d:21:5a:15:a2:59:
         81:c0:6c:40:96:fd:f4:eb:c3:04:d3:d4:e0:5e:bc:26:dc:08:
         f3:54:5d:de:d1:08:0a:7e:50:e2:06:6c:27:d4:57:c0:28:12:
         a0:a4:c0:9b:ad:bc:03:0f:23:04:a4:c8:e0:32:f8:04:ba:2e:
         28:74:66:35:b2:93:f5:30:c1:90:63:51:20:ad:41:2f:e0:98:
         9b:dd:78:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 21:52:35 2024 by rpki-client on console-fra.rpki-client.org