Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/3230302e3231382e3234342e302f32332d3233203d3e203238353934.roa
File:                     3230302e3231382e3234342e302f32332d3233203d3e203238353934.roa (raw, json)
Hash identifier:          OCnMwetSJYwT/OVvtMs8pIk0fyAvSoHawYjL3UQBABY=
Subject key identifier:   6E:38:D3:70:5F:3E:E9:96:7E:4F:3A:5F:0D:EE:E3:82:5A:9E:C5:A8
Certificate issuer:       /CN=9C0B0F9C917C39C4E0A392991B6A86E0D4917406
Certificate serial:       490D73395FF272B946446817AF1EB9625CACFEB9
Authority key identifier: 9C:0B:0F:9C:91:7C:39:C4:E0:A3:92:99:1B:6A:86:E0:D4:91:74:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/3230302e3231382e3234342e302f32332d3233203d3e203238353934.roa
Signing time:             Thu 04 Apr 2024 00:53:38 +0000
ROA not before:           Thu 04 Apr 2024 00:48:38 +0000
ROA not after:            Thu 03 Apr 2025 00:53:38 +0000
asID:                     28594
IP address blocks:        200.218.244.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.crl
                          rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:0d:73:39:5f:f2:72:b9:46:44:68:17:af:1e:b9:62:5c:ac:fe:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C0B0F9C917C39C4E0A392991B6A86E0D4917406
        Validity
            Not Before: Apr  4 00:48:38 2024 GMT
            Not After : Apr  3 00:53:38 2025 GMT
        Subject: CN=6E38D3705F3EE9967E4F3A5F0DEEE3825A9EC5A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2d:05:6a:40:83:ea:94:a9:32:1e:7f:a6:9e:
                    ee:84:b0:fd:b9:1b:67:34:6b:54:61:eb:54:0a:c1:
                    3f:e2:f3:a2:1d:86:4d:54:0f:b6:bc:c9:2f:5d:04:
                    48:f3:f8:b4:b9:74:3d:f4:66:df:0f:e0:0a:51:7e:
                    a7:7b:60:17:10:5d:6c:75:86:92:d5:a1:41:fa:89:
                    6e:f3:07:76:13:fb:91:a2:69:d4:ad:46:66:44:5b:
                    8e:ea:19:fa:e0:30:c8:e6:33:07:4f:9e:91:3d:57:
                    f3:e6:3a:b9:54:d5:9d:a3:b1:1f:fe:a5:2a:33:b8:
                    0e:bc:e5:b4:7a:9f:30:0e:87:e5:71:67:76:16:19:
                    74:59:ac:d9:09:c3:1d:68:09:73:a1:90:63:c0:1a:
                    de:a0:0b:f4:e1:f2:22:00:07:b1:c7:ed:7f:f9:7b:
                    3b:73:26:c0:ed:1d:69:53:9c:1d:ed:b7:af:21:40:
                    b1:54:e2:97:32:f7:ac:8e:2d:5c:aa:4c:0c:6a:d5:
                    61:80:39:a5:f5:e3:d5:b1:cf:a2:55:35:d8:14:4b:
                    42:47:6f:a5:38:7a:34:97:87:a0:b5:5b:3e:f7:44:
                    d2:fe:f4:a3:00:41:35:d5:8b:eb:83:78:27:80:13:
                    11:a4:0d:13:04:03:98:8f:05:00:14:52:79:c3:ac:
                    62:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:38:D3:70:5F:3E:E9:96:7E:4F:3A:5F:0D:EE:E3:82:5A:9E:C5:A8
            X509v3 Authority Key Identifier:
                keyid:9C:0B:0F:9C:91:7C:39:C4:E0:A3:92:99:1B:6A:86:E0:D4:91:74:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/3230302e3231382e3234342e302f32332d3233203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a8:6c:47:92:b8:13:cd:3d:67:ce:ac:1e:0d:97:9d:3d:1f:15:
         87:e0:a3:2e:a1:21:72:14:5e:61:54:7b:31:98:35:0b:40:a6:
         f1:cb:88:0b:a8:84:97:f4:f1:4f:9d:da:cc:98:ba:e9:43:26:
         55:06:ed:dd:ab:4f:61:4d:54:74:c6:67:65:12:b2:5f:e6:86:
         17:71:b7:b9:f4:ce:fd:6d:dc:19:02:ef:68:ba:fa:c8:79:af:
         54:07:86:47:de:18:6c:c4:b7:d0:13:76:de:bb:81:b4:ce:c6:
         4f:27:82:60:be:0b:a7:6a:31:33:d9:3e:eb:f7:51:e1:bd:82:
         95:3e:50:ee:c9:a2:bc:fe:00:76:d4:d3:f7:b4:47:3a:f9:3a:
         59:14:fa:07:14:4e:85:1f:2d:02:15:42:67:cd:90:d5:ad:39:
         a7:8e:36:96:83:b9:7f:35:56:4e:85:08:f7:fb:b5:ac:6e:ce:
         51:7b:a2:4c:75:1d:5b:55:83:2a:0f:3a:cc:a7:41:c9:c6:ae:
         19:fb:a8:f1:a1:dd:e5:4b:10:b2:38:dd:37:e4:7a:bd:a8:95:
         12:2b:ef:85:4e:af:29:ed:be:2a:5a:86:96:7d:71:ea:cf:44:
         d3:33:2f:59:26:13:5b:10:8e:12:a4:9f:1e:7d:8c:fd:55:d5:
         28:be:f1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:15 2024 by rpki-client on console-ams.rpki-client.org