Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/3230302e3231382e3234382e302f32332d3233203d3e203238353934.roa
File:                     3230302e3231382e3234382e302f32332d3233203d3e203238353934.roa (raw, json)
Hash identifier:          +QlBncZ6GpZWmyaSvuvo+SADwZ8hQvIlvocDT5wUiQM=
Subject key identifier:   36:10:FF:39:5C:21:33:06:9E:38:BB:2B:01:64:3D:59:72:A3:22:AD
Certificate issuer:       /CN=9C0B0F9C917C39C4E0A392991B6A86E0D4917406
Certificate serial:       2004CEB8A85366D54B62676215FF74AB54C9DB3F
Authority key identifier: 9C:0B:0F:9C:91:7C:39:C4:E0:A3:92:99:1B:6A:86:E0:D4:91:74:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/3230302e3231382e3234382e302f32332d3233203d3e203238353934.roa
Signing time:             Thu 04 Apr 2024 00:53:37 +0000
ROA not before:           Thu 04 Apr 2024 00:48:37 +0000
ROA not after:            Thu 03 Apr 2025 00:53:37 +0000
asID:                     28594
IP address blocks:        200.218.248.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.crl
                          rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:04:ce:b8:a8:53:66:d5:4b:62:67:62:15:ff:74:ab:54:c9:db:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C0B0F9C917C39C4E0A392991B6A86E0D4917406
        Validity
            Not Before: Apr  4 00:48:37 2024 GMT
            Not After : Apr  3 00:53:37 2025 GMT
        Subject: CN=3610FF395C2133069E38BB2B01643D5972A322AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:dc:d4:c6:06:41:e3:31:72:48:ce:e9:17:b8:
                    6a:18:b2:84:75:2e:0e:f4:41:99:3a:0e:c6:5d:fa:
                    e4:06:db:c5:30:4f:4b:4f:c8:89:33:e4:c2:3b:37:
                    ed:52:44:41:49:62:ad:a3:85:e0:2e:94:b9:0f:a7:
                    8f:7c:e3:47:8f:62:0e:ee:6d:58:0b:b9:e5:fa:f2:
                    57:81:06:77:9b:3c:e0:77:a6:b1:c2:71:80:25:50:
                    0d:1a:05:e8:c7:4c:9c:5d:91:18:69:a9:cb:be:53:
                    f7:ba:50:37:1c:22:92:de:52:2b:42:78:59:20:16:
                    c9:fb:50:11:a8:d9:7a:88:af:2e:1b:d4:80:ba:d4:
                    1d:de:cb:95:a2:e2:3e:0b:72:f0:04:f4:c2:64:f7:
                    f7:ed:fc:57:a2:ff:45:61:7c:62:ea:25:ba:00:71:
                    8f:5a:6c:d4:05:ca:61:80:73:0e:0a:e4:eb:af:11:
                    64:e4:b2:e7:71:d0:1e:09:eb:7e:e1:6a:29:b2:88:
                    92:69:be:d1:39:ce:7d:6c:ef:9b:6b:d9:ba:01:ec:
                    62:4c:57:65:6a:8f:fe:f8:36:c6:b2:3c:54:7b:96:
                    53:a1:8b:84:2d:32:9f:25:6e:35:17:8c:3b:fe:03:
                    73:08:60:be:40:01:28:6c:16:04:7a:35:4f:f8:f0:
                    da:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:10:FF:39:5C:21:33:06:9E:38:BB:2B:01:64:3D:59:72:A3:22:AD
            X509v3 Authority Key Identifier:
                keyid:9C:0B:0F:9C:91:7C:39:C4:E0:A3:92:99:1B:6A:86:E0:D4:91:74:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/3230302e3231382e3234382e302f32332d3233203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ae:d7:f7:06:dc:f6:4f:dc:e7:d1:73:1a:38:04:f7:5f:10:aa:
         d9:1a:3a:e9:d3:3f:3e:67:0f:bd:e4:ed:3e:99:07:c4:7c:d5:
         23:aa:b6:9e:95:f0:75:27:49:a7:97:04:d9:19:3b:dc:e1:78:
         d0:82:02:a1:5a:89:96:80:c6:6c:b5:06:48:dc:77:9b:b3:c4:
         eb:59:d7:d3:9b:c3:72:8d:96:3b:93:05:ce:90:eb:bc:78:9b:
         b0:bb:39:d0:ca:8e:ba:18:14:3b:11:da:b9:69:7f:cb:e9:25:
         ff:d1:c3:8f:e2:91:3a:0c:f0:6a:80:49:b5:9f:c6:62:ae:df:
         c3:6d:6d:ba:f8:fd:83:20:ea:3d:ac:da:d4:f9:0e:d5:11:1e:
         cd:c3:df:59:c3:6f:34:c0:4b:14:7f:94:47:89:91:e3:36:22:
         cb:32:27:5e:4d:d8:1a:30:88:50:26:37:11:a6:61:bd:f2:ca:
         6b:4c:ca:87:62:a4:8d:42:3c:ca:dc:9f:07:61:34:a1:5b:ea:
         30:3f:c5:41:f9:60:98:0a:11:41:54:66:92:4b:a0:28:d7:ac:
         f5:7a:e6:9b:55:e5:df:95:35:5f:35:52:c9:db:d9:e6:c1:bc:
         49:d3:6c:4d:6e:5f:ad:51:c8:4a:a1:a2:af:8c:b1:ca:69:ce:
         5e:a8:71:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:15 2024 by rpki-client on console-fra.rpki-client.org