Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/3230302e3232392e3231322e302f32322d3234203d3e203532393638.roa
File:                     3230302e3232392e3231322e302f32322d3234203d3e203532393638.roa (raw, json)
Hash identifier:          M9b2VFevSgypAeFe9R2gqFR/SswDTBrq7YxJ/0hnnCs=
Subject key identifier:   40:50:02:8A:BD:8C:E5:76:31:93:8C:0B:09:C1:48:54:3F:25:86:88
Certificate issuer:       /CN=C27181D3D53BD228B34586DC6F756EBF5695A6B2
Certificate serial:       362A0C8936A10AF7E22E5D1BD9AA0DEF69319507
Authority key identifier: C2:71:81:D3:D5:3B:D2:28:B3:45:86:DC:6F:75:6E:BF:56:95:A6:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/3230302e3232392e3231322e302f32322d3234203d3e203532393638.roa
Signing time:             Thu 04 Apr 2024 07:08:04 +0000
ROA not before:           Thu 04 Apr 2024 07:03:04 +0000
ROA not after:            Thu 03 Apr 2025 07:08:04 +0000
asID:                     52968
IP address blocks:        200.229.212.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.crl
                          rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:24:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:2a:0c:89:36:a1:0a:f7:e2:2e:5d:1b:d9:aa:0d:ef:69:31:95:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C27181D3D53BD228B34586DC6F756EBF5695A6B2
        Validity
            Not Before: Apr  4 07:03:04 2024 GMT
            Not After : Apr  3 07:08:04 2025 GMT
        Subject: CN=4050028ABD8CE57631938C0B09C148543F258688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6e:2d:b1:66:4c:b6:f4:2c:76:f9:fb:f9:83:
                    21:f3:ed:94:b9:73:a3:d7:02:ac:61:10:99:78:cb:
                    90:c4:38:ad:9e:76:25:a3:8a:89:cf:51:87:62:2b:
                    44:e9:28:c8:1f:3d:3a:0a:ae:b8:62:02:a5:6f:a4:
                    83:de:40:20:5d:a9:ec:7e:03:aa:6f:2c:d9:41:84:
                    ee:c8:ed:3b:b2:b7:f0:aa:ea:d5:e6:67:b7:40:15:
                    04:ab:89:a3:7c:40:a2:81:de:4a:96:bc:75:3d:61:
                    10:3a:99:c3:77:13:4d:8e:4a:f5:e3:ec:9d:c4:70:
                    f5:7e:8f:e6:a9:de:43:60:39:18:66:63:c6:eb:c6:
                    28:60:bc:fb:94:78:5f:af:f4:ae:36:11:6f:96:29:
                    08:80:29:78:e8:a0:bd:5e:b8:2a:35:04:cc:9d:a0:
                    d6:42:03:89:96:34:9d:f5:38:ef:7f:f2:2c:2e:52:
                    8a:12:4c:21:de:47:a0:cd:fc:88:11:8f:14:44:e0:
                    51:fc:cf:8d:e2:b6:a6:03:e3:3e:68:1c:8b:ed:5e:
                    30:00:51:93:60:80:3b:ea:53:7a:6c:21:6c:78:f2:
                    10:55:68:b1:d3:66:b0:b1:93:9d:5a:e4:99:be:ed:
                    92:0a:c0:75:88:1c:87:41:1a:58:e5:31:f7:28:3b:
                    7c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:50:02:8A:BD:8C:E5:76:31:93:8C:0B:09:C1:48:54:3F:25:86:88
            X509v3 Authority Key Identifier:
                keyid:C2:71:81:D3:D5:3B:D2:28:B3:45:86:DC:6F:75:6E:BF:56:95:A6:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/3230302e3232392e3231322e302f32322d3234203d3e203532393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:de:04:2d:97:11:57:8f:e4:f7:64:8c:b6:af:e9:03:d5:bf:
         26:ea:35:92:31:e0:f3:84:22:3d:10:f9:93:3a:5b:e7:2f:2b:
         57:0e:05:62:22:8e:f2:27:4d:a7:d6:72:f7:44:1a:9d:33:f8:
         72:c6:27:c7:78:d2:0c:1e:38:10:0c:c6:35:3c:34:24:13:bf:
         46:23:72:cf:32:44:17:8d:ef:f2:d4:fc:22:dc:c1:2d:8a:53:
         75:8c:7d:6a:6d:d8:d2:e3:09:cb:ce:02:a6:a8:d4:79:80:a9:
         fb:68:3a:12:2a:fb:fa:f7:de:db:2f:e4:c2:e5:a9:59:bb:a4:
         22:a5:15:50:bc:f4:08:bb:61:a7:c6:5a:e9:1f:c9:92:b9:d0:
         a5:9f:ea:19:0b:31:fb:36:27:52:dc:47:ac:72:83:13:34:65:
         42:53:d6:03:41:87:a4:64:5b:6a:85:cc:03:a7:1e:6a:bd:50:
         6b:41:4b:65:0a:1e:85:c9:6b:63:80:4e:67:61:75:48:46:8c:
         f4:4d:6e:e5:d2:ee:6b:67:1d:8e:30:9c:7e:ce:fe:57:f9:31:
         d4:1a:d1:f6:77:68:f4:88:39:ad:41:14:93:ce:3e:aa:1d:ad:
         bf:5e:64:74:bc:d8:a8:3e:d9:00:b7:5e:d1:4a:e8:08:56:90:
         1f:d4:8f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:33 2024 by rpki-client on console-fra.rpki-client.org