Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5cBrkPiEgDz2ebwCR1AmBGN7NzyN7G2v4SgnJbmoU7Pj/0/3230302e3131302e3230302e302f32322d3332203d3e20323730323631.roa
File:                     3230302e3131302e3230302e302f32322d3332203d3e20323730323631.roa (raw, json)
Hash identifier:          yUpm3HNV1QhJM4OcE/T4FME0K8Fc7rMQSPuA4rASYag=
Subject key identifier:   E5:5D:DA:99:05:56:04:3C:BD:C5:AB:E5:51:CE:F1:FD:F9:62:E3:BA
Certificate issuer:       /CN=21F94622ABB07C40B00A61480B9A8AE148AE33AE
Certificate serial:       49BADC87D1E774435B3EFBBDA03D05D6DE0AE7D0
Authority key identifier: 21:F9:46:22:AB:B0:7C:40:B0:0A:61:48:0B:9A:8A:E1:48:AE:33:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F94622ABB07C40B00A61480B9A8AE148AE33AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5cBrkPiEgDz2ebwCR1AmBGN7NzyN7G2v4SgnJbmoU7Pj/0/3230302e3131302e3230302e302f32322d3332203d3e20323730323631.roa
Signing time:             Thu 04 Apr 2024 11:39:13 +0000
ROA not before:           Thu 04 Apr 2024 11:34:13 +0000
ROA not after:            Thu 03 Apr 2025 11:39:13 +0000
asID:                     270261
IP address blocks:        200.110.200.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5cBrkPiEgDz2ebwCR1AmBGN7NzyN7G2v4SgnJbmoU7Pj/0/21F94622ABB07C40B00A61480B9A8AE148AE33AE.crl
                          rsync://rpki-repo.registro.br/repo/5cBrkPiEgDz2ebwCR1AmBGN7NzyN7G2v4SgnJbmoU7Pj/0/21F94622ABB07C40B00A61480B9A8AE148AE33AE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F94622ABB07C40B00A61480B9A8AE148AE33AE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 08:55:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:ba:dc:87:d1:e7:74:43:5b:3e:fb:bd:a0:3d:05:d6:de:0a:e7:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21F94622ABB07C40B00A61480B9A8AE148AE33AE
        Validity
            Not Before: Apr  4 11:34:13 2024 GMT
            Not After : Apr  3 11:39:13 2025 GMT
        Subject: CN=E55DDA990556043CBDC5ABE551CEF1FDF962E3BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c7:29:05:a9:67:b1:e2:53:95:85:32:05:8d:
                    62:86:67:31:31:8c:5c:ec:62:7f:e4:64:68:fc:9a:
                    6b:42:08:09:a1:a6:2d:28:08:7b:82:45:bb:e5:b0:
                    34:3b:a4:86:30:35:7d:56:90:4b:f5:1e:c1:86:eb:
                    fd:53:e4:73:e4:18:5b:72:4f:cd:3c:44:9e:bb:61:
                    af:ab:43:5e:9f:75:58:27:6d:07:92:0c:6c:1e:d0:
                    6f:6c:d2:33:b7:9a:95:28:dc:60:a5:7a:ba:24:1c:
                    51:03:37:1d:eb:73:38:38:8b:6b:23:9e:b3:d2:b2:
                    1e:64:48:39:55:f6:ef:44:f7:56:6e:af:57:6e:ea:
                    7d:19:2f:59:0e:0d:20:61:46:04:e0:66:ac:83:31:
                    cd:bc:10:42:e3:1c:2e:b9:5a:b2:80:3e:d4:b1:76:
                    b3:82:f4:02:53:ac:d4:c3:7e:0a:ad:9e:71:4c:a4:
                    6c:ed:96:8e:65:e6:14:5e:90:14:6e:3d:4d:fb:84:
                    8e:92:fd:c1:ac:c6:66:31:fe:90:ff:6e:72:77:e9:
                    b0:f1:68:d2:98:dc:d5:c9:cc:bc:d0:65:7e:0f:e8:
                    b9:1a:07:a4:39:7a:b1:87:61:e2:74:a8:d0:bd:af:
                    7c:22:bb:1e:84:22:8e:f6:73:a1:b8:07:ed:4c:9f:
                    6e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:5D:DA:99:05:56:04:3C:BD:C5:AB:E5:51:CE:F1:FD:F9:62:E3:BA
            X509v3 Authority Key Identifier:
                keyid:21:F9:46:22:AB:B0:7C:40:B0:0A:61:48:0B:9A:8A:E1:48:AE:33:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5cBrkPiEgDz2ebwCR1AmBGN7NzyN7G2v4SgnJbmoU7Pj/0/21F94622ABB07C40B00A61480B9A8AE148AE33AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F94622ABB07C40B00A61480B9A8AE148AE33AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5cBrkPiEgDz2ebwCR1AmBGN7NzyN7G2v4SgnJbmoU7Pj/0/3230302e3131302e3230302e302f32322d3332203d3e20323730323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:ad:fa:c5:b1:ac:c1:c1:68:d2:79:44:fe:b4:de:eb:a4:b0:
         b7:0e:1f:62:35:46:5c:4e:18:36:39:b4:ae:66:64:41:9d:d8:
         6b:a2:84:8f:cc:15:b1:ad:16:26:ef:5a:84:1d:3f:e1:49:11:
         87:8d:f3:4e:e8:df:fd:42:26:91:69:0a:4c:65:ca:57:a2:f3:
         1c:66:a4:53:60:25:20:9a:b9:58:42:68:fa:7a:e8:1e:54:ad:
         a1:87:ad:7d:d2:24:1c:97:39:83:b1:23:89:c4:6f:86:56:9b:
         34:2f:1a:34:22:eb:ac:d9:38:48:ab:4e:bc:69:e7:2b:7d:48:
         94:e5:25:a9:c6:d6:ef:df:d8:e6:12:08:72:ed:3a:5b:36:fe:
         7a:08:59:4d:36:6c:96:44:b6:8c:19:b9:0b:81:4e:5d:4c:7e:
         8c:f9:5b:fc:8e:22:4d:6f:a0:09:77:27:cf:9c:ce:6c:f9:3a:
         7b:0d:3f:4e:8a:57:b0:98:ed:c5:25:96:a4:ca:9e:7f:25:bc:
         d1:08:df:72:ee:f1:22:2e:bb:dc:76:b5:0f:d3:18:e0:69:14:
         e9:f0:be:8e:e3:29:1b:47:56:22:59:bb:d6:0a:ec:c0:52:cc:
         53:f4:e1:80:4e:62:da:79:2d:ee:74:0c:9b:e3:a7:6b:c5:09:
         f3:d9:72:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:09 2024 by rpki-client on console-ams.rpki-client.org