Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/3230302e3231382e3234302e302f32312d3231203d3e203238353934.roa
File:                     3230302e3231382e3234302e302f32312d3231203d3e203238353934.roa (raw, json)
Hash identifier:          DnDYAPz5nIO5Wl7pxK9TVLBVzHSyb5Ee+51zJjNfE7c=
Subject key identifier:   29:FC:26:63:30:08:5D:EB:98:78:2E:C8:6F:F5:16:21:22:E1:5F:07
Certificate issuer:       /CN=9C0B0F9C917C39C4E0A392991B6A86E0D4917406
Certificate serial:       10D8BDE841C1F8D4771A2BC4540D485D6B42EEBB
Authority key identifier: 9C:0B:0F:9C:91:7C:39:C4:E0:A3:92:99:1B:6A:86:E0:D4:91:74:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/3230302e3231382e3234302e302f32312d3231203d3e203238353934.roa
Signing time:             Thu 04 Apr 2024 00:53:36 +0000
ROA not before:           Thu 04 Apr 2024 00:48:36 +0000
ROA not after:            Thu 03 Apr 2025 00:53:36 +0000
asID:                     28594
IP address blocks:        200.218.240.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.crl
                          rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:d8:bd:e8:41:c1:f8:d4:77:1a:2b:c4:54:0d:48:5d:6b:42:ee:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C0B0F9C917C39C4E0A392991B6A86E0D4917406
        Validity
            Not Before: Apr  4 00:48:36 2024 GMT
            Not After : Apr  3 00:53:36 2025 GMT
        Subject: CN=29FC266330085DEB98782EC86FF5162122E15F07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:76:16:53:b3:84:22:fe:a5:cf:50:8e:52:f9:
                    60:6b:9d:e7:1f:28:d8:d6:88:27:0f:fb:be:c9:b5:
                    e5:41:bb:d9:a9:9b:2d:7b:a8:a5:bb:e4:e0:d2:92:
                    bc:d8:40:52:be:7c:51:8f:9a:7b:2b:39:5a:2a:bf:
                    fe:25:0e:21:e5:9b:01:52:8d:18:d2:40:d2:f2:37:
                    1e:59:21:4d:d6:15:95:4e:f5:c9:37:30:91:53:47:
                    1d:d1:6c:60:cc:61:77:d9:b7:a6:96:38:9a:79:2f:
                    88:6c:0f:2b:55:d1:fc:63:0d:03:4c:85:5f:b7:bd:
                    3c:4e:04:c1:06:87:d7:7b:f7:d9:5a:13:cc:bc:6e:
                    91:af:97:d4:84:62:19:1d:6a:73:3d:51:e3:93:46:
                    29:36:3e:58:92:89:fa:64:c9:dc:65:1d:4d:22:cc:
                    bb:d2:b0:67:75:05:e4:a3:1a:06:4d:1d:e4:69:6b:
                    1a:9a:97:a8:c4:8e:c2:a5:9c:92:de:a9:0f:2e:75:
                    82:00:3c:e4:7d:85:e4:3c:23:c5:fd:d5:0b:0d:e8:
                    43:7d:3e:62:ba:2a:7f:b6:aa:54:22:0e:18:31:77:
                    90:ca:27:ef:c7:59:df:5c:e3:41:59:07:2a:d5:a0:
                    1f:f6:cc:fc:d8:40:bc:fe:56:7c:38:4d:20:c7:71:
                    6a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:FC:26:63:30:08:5D:EB:98:78:2E:C8:6F:F5:16:21:22:E1:5F:07
            X509v3 Authority Key Identifier:
                keyid:9C:0B:0F:9C:91:7C:39:C4:E0:A3:92:99:1B:6A:86:E0:D4:91:74:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/3230302e3231382e3234302e302f32312d3231203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         34:2d:1c:40:d2:96:85:5b:05:dd:93:d6:20:3b:35:ce:42:1e:
         d3:1e:6a:2c:21:d4:05:17:20:7f:ab:8a:3d:55:01:04:a9:c1:
         a7:7c:84:74:d3:76:d4:01:4e:e6:13:33:6a:3a:79:37:d2:a9:
         8f:fc:92:2f:e3:31:70:30:a0:68:e1:f6:9e:c8:ed:6a:8e:cf:
         44:42:58:94:22:10:f4:81:65:5d:af:2c:ec:16:34:f6:75:35:
         d6:dd:05:a1:d0:3e:4b:a7:5b:b1:aa:37:c5:6c:a9:41:fb:d6:
         cb:2d:be:89:e4:4b:e6:b9:03:12:ae:e0:44:a2:2a:bb:3c:dd:
         66:d3:38:77:c1:99:9f:c1:08:1d:b5:78:af:b7:77:8e:91:ea:
         cd:c8:6e:09:16:bf:9b:6b:0e:db:8f:b2:da:f3:4c:fe:85:66:
         4a:de:42:ef:d6:2e:c9:ae:a4:c5:5e:9c:fc:5b:4b:81:95:c4:
         d8:67:b9:8e:7c:b9:57:05:ba:73:42:90:89:b6:f6:e8:72:86:
         96:b8:fb:37:d5:94:0b:25:66:ab:c0:34:79:75:1c:af:ad:e3:
         12:06:34:ad:69:db:9c:b7:f6:0c:8a:af:18:46:41:f7:c3:e1:
         7a:3e:56:fa:b1:34:66:70:46:de:1c:b1:cc:2e:2d:53:2a:b8:
         d9:74:ab:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:15 2024 by rpki-client on console-ams.rpki-client.org