Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/3230302e3231382e3235322e302f32332d3233203d3e203238353934.roa
File:                     3230302e3231382e3235322e302f32332d3233203d3e203238353934.roa (raw, json)
Hash identifier:          xW5zdiRc4GprFWvoAgj5hwHXXB64OPw3wPYSaSfmWTQ=
Subject key identifier:   A6:DA:69:98:0F:97:AE:C4:D7:63:E3:1B:1D:3D:4B:4E:30:B9:82:D7
Certificate issuer:       /CN=9C0B0F9C917C39C4E0A392991B6A86E0D4917406
Certificate serial:       6474A709DE707FDC92544AD156D52DF8D6E720FD
Authority key identifier: 9C:0B:0F:9C:91:7C:39:C4:E0:A3:92:99:1B:6A:86:E0:D4:91:74:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/3230302e3231382e3235322e302f32332d3233203d3e203238353934.roa
Signing time:             Thu 04 Apr 2024 00:53:36 +0000
ROA not before:           Thu 04 Apr 2024 00:48:36 +0000
ROA not after:            Thu 03 Apr 2025 00:53:36 +0000
asID:                     28594
IP address blocks:        200.218.252.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.crl
                          rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:74:a7:09:de:70:7f:dc:92:54:4a:d1:56:d5:2d:f8:d6:e7:20:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C0B0F9C917C39C4E0A392991B6A86E0D4917406
        Validity
            Not Before: Apr  4 00:48:36 2024 GMT
            Not After : Apr  3 00:53:36 2025 GMT
        Subject: CN=A6DA69980F97AEC4D763E31B1D3D4B4E30B982D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ae:33:f8:e7:cf:be:45:e4:cd:00:36:3f:6b:
                    1d:20:8f:e0:6d:cc:cf:8b:a1:b4:b1:95:b1:79:e4:
                    60:90:01:ea:44:8a:0a:de:0f:d8:b2:ab:3a:04:31:
                    84:e5:60:6e:6f:62:77:d9:1d:7f:8b:bb:48:38:39:
                    1c:15:0b:c4:96:1a:3f:5c:ea:7a:1d:21:9b:f2:33:
                    1f:c6:43:26:52:36:fc:64:e4:7c:73:00:cc:e4:6e:
                    87:42:93:57:37:5f:53:06:b4:49:74:9b:ff:0b:7c:
                    28:16:1c:e5:fe:33:86:d7:6f:1f:f1:ea:38:6e:fa:
                    ea:43:f0:75:86:d1:32:14:81:97:97:46:83:81:0b:
                    6d:88:43:1d:e6:70:2b:82:66:44:a4:49:dd:29:c0:
                    f8:63:42:a9:9e:6a:d1:03:bc:dd:2a:5a:e0:4b:2c:
                    59:ea:f9:94:71:f2:ac:ad:30:28:6e:de:21:ce:eb:
                    b7:fa:77:76:e1:af:2f:fb:7d:73:45:d1:73:24:65:
                    04:f5:8e:14:d8:18:c7:1c:f5:45:b3:1e:51:05:a3:
                    7d:06:c0:81:a4:40:13:bf:2f:f5:81:d5:d4:de:15:
                    58:f4:7c:be:89:78:96:6b:e5:4e:8a:ab:05:f5:bd:
                    69:27:ad:87:19:29:3a:6c:76:ff:89:34:14:94:54:
                    38:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:DA:69:98:0F:97:AE:C4:D7:63:E3:1B:1D:3D:4B:4E:30:B9:82:D7
            X509v3 Authority Key Identifier:
                keyid:9C:0B:0F:9C:91:7C:39:C4:E0:A3:92:99:1B:6A:86:E0:D4:91:74:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/3230302e3231382e3235322e302f32332d3233203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:29:f8:71:7f:3f:f4:fc:13:73:3f:3a:51:30:28:8e:30:12:
         1f:9d:4e:32:44:1f:1b:2f:ab:a0:5f:8d:48:3b:be:97:2f:c0:
         be:ef:84:31:9b:14:58:6b:a6:90:30:ea:10:59:1a:c4:c2:40:
         4b:d8:29:ef:b0:68:33:ad:4d:d3:fe:0b:54:d4:af:a4:4a:cb:
         21:5e:92:10:be:35:fb:44:37:1a:c8:1c:9e:f1:3e:ce:97:63:
         b3:50:0c:ea:aa:47:fa:3f:30:bc:7c:de:b7:d4:b7:d6:22:df:
         ed:06:50:d1:f9:27:36:d0:c0:ba:89:e7:ec:f1:78:97:85:3e:
         ca:c8:28:5b:a0:9e:83:71:1e:ea:d1:01:9a:05:cd:3a:75:8a:
         f7:bf:6f:39:e3:b4:81:da:66:c7:fe:1a:fc:48:29:6a:13:38:
         23:40:88:de:47:b9:2f:c0:4d:1b:1e:c1:fb:54:91:13:02:6e:
         4d:ef:35:ca:ca:21:7d:5a:23:09:f3:3e:76:66:63:35:6f:05:
         16:ff:d2:62:1a:ca:05:c1:f8:3f:6d:95:28:45:1e:eb:a3:57:
         c8:58:4c:b3:00:46:ee:81:06:6b:9d:49:53:c6:dd:32:65:20:
         ea:67:00:bd:6b:9e:db:56:94:b8:ec:bd:11:36:5d:79:b2:b2:
         86:ef:eb:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:15 2024 by rpki-client on console-fra.rpki-client.org