Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/3230302e3132342e3136342e302f32322d3234203d3e20323730323737.roa
File:                     3230302e3132342e3136342e302f32322d3234203d3e20323730323737.roa (raw, json)
Hash identifier:          ORnPBDE/P+yYSZFuvzINfqYZcjpKEeBONIglbHf4xm0=
Subject key identifier:   57:43:6E:D4:DB:7B:1A:23:46:99:62:DE:C4:35:59:D8:FD:85:73:59
Certificate issuer:       /CN=FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9
Certificate serial:       65D6E5A60765D580CD9A5FE86EEAFFA3B82E485A
Authority key identifier: FD:3C:84:64:3C:F0:CF:DE:C3:F3:2D:E5:AE:63:E8:8B:CF:A9:F7:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/3230302e3132342e3136342e302f32322d3234203d3e20323730323737.roa
Signing time:             Thu 04 Apr 2024 13:50:26 +0000
ROA not before:           Thu 04 Apr 2024 13:45:26 +0000
ROA not after:            Thu 03 Apr 2025 13:50:26 +0000
asID:                     270277
IP address blocks:        200.124.164.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.crl
                          rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:38:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:d6:e5:a6:07:65:d5:80:cd:9a:5f:e8:6e:ea:ff:a3:b8:2e:48:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9
        Validity
            Not Before: Apr  4 13:45:26 2024 GMT
            Not After : Apr  3 13:50:26 2025 GMT
        Subject: CN=57436ED4DB7B1A23469962DEC43559D8FD857359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6b:1f:e0:7e:43:53:43:57:7d:8c:3b:20:ea:
                    2f:1c:a5:b1:01:2a:02:a5:b4:bc:f6:20:db:c8:63:
                    c4:23:0f:35:5d:f7:c9:0a:ea:c4:31:f4:1a:01:1f:
                    2c:ba:31:cb:90:07:0a:9b:3b:3b:58:39:45:91:49:
                    07:4b:48:14:26:11:6f:46:88:d1:0d:c2:57:29:ef:
                    8a:1f:4d:d7:33:04:0c:14:3a:66:94:79:7a:b7:74:
                    a4:5a:97:d8:43:49:9b:f5:23:bf:39:59:f2:e0:fa:
                    28:b3:12:35:99:cd:c5:fd:48:93:97:13:13:c0:d6:
                    6f:0f:a4:94:ad:15:b1:ce:32:a9:a9:27:b6:d1:01:
                    42:62:57:a8:24:aa:eb:d3:83:b8:45:72:07:23:62:
                    a1:6e:ce:fb:1a:52:43:32:8c:c1:92:85:f5:a2:58:
                    d7:78:20:82:08:31:f6:02:08:8e:d0:77:0b:0a:f8:
                    8a:dd:6e:3d:b2:9b:06:82:8c:c9:94:61:1e:1b:82:
                    80:da:72:93:82:4f:82:01:9f:09:9b:04:3e:3e:55:
                    7f:5e:f9:6e:3e:5d:90:e8:75:7a:74:78:97:02:a9:
                    e2:02:3b:c6:f1:7f:bb:d9:85:c6:59:ca:df:50:6d:
                    38:44:aa:de:d9:86:95:3c:b1:51:03:9e:0d:3f:bb:
                    66:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:43:6E:D4:DB:7B:1A:23:46:99:62:DE:C4:35:59:D8:FD:85:73:59
            X509v3 Authority Key Identifier:
                keyid:FD:3C:84:64:3C:F0:CF:DE:C3:F3:2D:E5:AE:63:E8:8B:CF:A9:F7:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/3230302e3132342e3136342e302f32322d3234203d3e20323730323737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:4f:b0:5c:d9:9b:c8:8d:b5:52:dc:04:26:ce:fa:ce:d2:2c:
         2e:5a:89:e4:57:35:9b:2a:de:a6:e0:8a:fe:0e:4d:ad:df:3d:
         45:64:a9:c8:01:69:23:13:9a:0b:bc:0d:24:f0:6e:bd:d2:f9:
         f9:f6:42:67:05:da:15:ff:04:c4:55:74:b7:0c:36:a8:0f:6a:
         d3:a0:93:cc:d2:09:58:95:39:1e:3a:df:a8:fa:25:59:74:28:
         54:3b:23:18:43:51:92:fc:f3:af:72:5a:19:6d:83:66:27:d0:
         36:f5:0c:13:54:8e:45:85:01:21:59:64:2a:83:52:7f:d1:8b:
         c9:b6:94:7a:97:69:23:8a:2c:ba:a2:a6:f3:a8:aa:3a:19:29:
         fd:29:46:0b:8f:45:1d:e0:d8:b8:10:58:14:22:a0:2a:5b:a1:
         4d:73:46:5a:5d:99:11:9e:cb:24:b7:85:53:b1:c8:fc:c7:7d:
         d1:92:79:5c:ee:ab:26:72:f7:50:35:b2:2b:3c:f2:26:68:ad:
         f1:4d:e5:c7:18:cd:99:35:bc:97:4c:36:ab:40:89:59:ec:40:
         8d:cc:d0:1d:d7:e2:f1:e6:9b:e5:dd:bd:04:b8:ce:7a:84:62:
         0c:8e:b7:e2:85:d2:63:b0:3e:af:de:7a:11:ff:af:e1:e6:13:
         6b:5c:bd:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:58 2024 by rpki-client on console-ams.rpki-client.org