Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/1/3230302e3139362e34332e302f32342d3234203d3e20323733343132.roa
File:                     3230302e3139362e34332e302f32342d3234203d3e20323733343132.roa (raw, json)
Hash identifier:          qpx4dsMFPlxY08D+bQ3Q3BlcXukQjsNnRYzmqBEaA60=
Subject key identifier:   E6:4B:F3:AB:70:88:91:EC:29:28:08:74:4A:26:64:64:7F:26:D1:B8
Certificate issuer:       /CN=4055DA0ACB382D3CF1F290979963231C8BAB34C2
Certificate serial:       05ECAF1D034CF0A7DD2A871435400A71C628AB2B
Authority key identifier: 40:55:DA:0A:CB:38:2D:3C:F1:F2:90:97:99:63:23:1C:8B:AB:34:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4055DA0ACB382D3CF1F290979963231C8BAB34C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/1/3230302e3139362e34332e302f32342d3234203d3e20323733343132.roa
Signing time:             Thu 04 Apr 2024 06:19:53 +0000
ROA not before:           Thu 04 Apr 2024 06:14:53 +0000
ROA not after:            Thu 03 Apr 2025 06:19:53 +0000
asID:                     273412
IP address blocks:        200.196.43.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/1/4055DA0ACB382D3CF1F290979963231C8BAB34C2.crl
                          rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/1/4055DA0ACB382D3CF1F290979963231C8BAB34C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4055DA0ACB382D3CF1F290979963231C8BAB34C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 17:50:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:ec:af:1d:03:4c:f0:a7:dd:2a:87:14:35:40:0a:71:c6:28:ab:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4055DA0ACB382D3CF1F290979963231C8BAB34C2
        Validity
            Not Before: Apr  4 06:14:53 2024 GMT
            Not After : Apr  3 06:19:53 2025 GMT
        Subject: CN=E64BF3AB708891EC292808744A2664647F26D1B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2c:ce:fa:b8:71:52:79:df:88:b7:f2:c9:08:
                    15:9f:95:3b:68:fe:8c:b9:e0:14:c8:67:15:c1:57:
                    91:99:03:84:7b:16:d5:a7:94:17:06:3f:41:26:ca:
                    fe:e3:58:4e:69:41:40:15:5f:0f:d7:bd:d0:a0:32:
                    54:d1:58:ba:d6:49:b2:53:36:bc:63:a4:82:02:d3:
                    8c:33:df:6a:4f:2d:f1:6f:2a:ad:e7:74:c5:74:ab:
                    f2:2a:72:b5:40:a2:c8:93:13:e3:fc:dd:2c:62:f8:
                    97:3b:55:aa:6e:e5:7f:cd:8d:0f:3c:0e:71:a1:26:
                    18:ab:0e:5e:d0:f7:02:34:cf:27:cf:9d:c3:20:b7:
                    fe:90:cf:60:47:2f:e6:fa:d5:7c:33:05:0b:43:02:
                    99:96:c9:68:dc:3d:0f:ce:23:82:e2:15:7b:84:de:
                    4a:1b:3f:8e:92:00:68:2e:e7:d1:da:63:25:e1:5a:
                    de:09:fc:17:35:44:16:a5:62:77:88:d3:60:b8:d0:
                    14:da:4e:09:b8:7e:76:0b:56:9b:ad:d2:6f:98:b8:
                    b3:49:71:a9:e5:46:b8:95:cc:9c:d9:ce:1a:29:c3:
                    e0:32:63:f7:03:5a:f3:3b:68:79:26:c2:87:bb:52:
                    98:23:cc:57:77:e1:72:aa:af:b6:e0:bc:64:a7:41:
                    5e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:4B:F3:AB:70:88:91:EC:29:28:08:74:4A:26:64:64:7F:26:D1:B8
            X509v3 Authority Key Identifier:
                keyid:40:55:DA:0A:CB:38:2D:3C:F1:F2:90:97:99:63:23:1C:8B:AB:34:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/1/4055DA0ACB382D3CF1F290979963231C8BAB34C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4055DA0ACB382D3CF1F290979963231C8BAB34C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/1/3230302e3139362e34332e302f32342d3234203d3e20323733343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.196.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:20:8d:95:99:82:04:b8:ec:44:14:2c:79:01:50:a9:52:0e:
         42:74:7b:7e:33:33:e3:7e:6b:a8:78:dc:29:98:c9:c5:14:58:
         bb:a5:6a:65:01:e5:c8:20:f4:9f:b9:5a:53:87:da:56:68:85:
         9d:35:be:98:cb:fb:2f:a6:0f:21:6c:92:25:5b:0d:a7:29:5e:
         fe:33:98:32:26:9f:b1:e9:d6:58:14:7f:2c:8c:c2:1f:35:43:
         f9:6c:fe:35:00:44:6e:2a:d2:a7:74:20:50:aa:0b:1c:2e:b1:
         f3:b7:d0:68:32:4d:4e:a0:71:14:53:cb:39:25:71:f8:0c:99:
         59:10:fd:8c:c9:fe:2b:28:51:16:05:f2:22:3a:d9:d7:50:d0:
         f0:2d:fa:c2:51:38:95:5d:6a:d7:50:c1:20:90:73:cc:ca:f7:
         54:ab:72:49:10:ec:66:11:95:82:5e:e8:75:be:90:25:b3:81:
         6b:18:d0:d4:c4:6e:cc:fc:38:a3:77:87:84:eb:13:7a:b7:74:
         3c:47:96:4d:c2:09:c8:21:37:2c:b6:88:c1:9d:64:72:6d:e4:
         12:5c:a2:cc:62:13:4d:7c:0c:ea:76:e8:12:82:35:6e:e5:ee:
         41:be:f3:e4:87:fc:21:c5:e7:17:70:79:b3:bc:51:45:3d:a4:
         27:9c:85:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 19:18:01 2024 by rpki-client on console-fra.rpki-client.org