Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6CxfG1u38ASdqAD1UDZAaz7CiJw7zA3BHHLyXwLrpvsT/1/3230302e3131352e3130382e302f32322d3332203d3e20323730323837.roa
File:                     3230302e3131352e3130382e302f32322d3332203d3e20323730323837.roa (raw, json)
Hash identifier:          HOkcM0mJ8T9PT2Ma2S0OScWcQTuFGDi9WMCYSGqDeKw=
Subject key identifier:   0E:CA:8D:0E:E5:02:81:F3:10:CE:27:C2:82:D5:49:BC:B2:4F:0A:0A
Certificate issuer:       /CN=B99BDA7241B9BFDF2B432F5E9592DA5F691DCA8F
Certificate serial:       1401223C2F83EBACC8D41866A44064C34213B459
Authority key identifier: B9:9B:DA:72:41:B9:BF:DF:2B:43:2F:5E:95:92:DA:5F:69:1D:CA:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B99BDA7241B9BFDF2B432F5E9592DA5F691DCA8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6CxfG1u38ASdqAD1UDZAaz7CiJw7zA3BHHLyXwLrpvsT/1/3230302e3131352e3130382e302f32322d3332203d3e20323730323837.roa
Signing time:             Thu 04 Apr 2024 09:00:14 +0000
ROA not before:           Thu 04 Apr 2024 08:55:14 +0000
ROA not after:            Thu 03 Apr 2025 09:00:14 +0000
asID:                     270287
IP address blocks:        200.115.108.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6CxfG1u38ASdqAD1UDZAaz7CiJw7zA3BHHLyXwLrpvsT/1/B99BDA7241B9BFDF2B432F5E9592DA5F691DCA8F.crl
                          rsync://rpki-repo.registro.br/repo/6CxfG1u38ASdqAD1UDZAaz7CiJw7zA3BHHLyXwLrpvsT/1/B99BDA7241B9BFDF2B432F5E9592DA5F691DCA8F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B99BDA7241B9BFDF2B432F5E9592DA5F691DCA8F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:01:22:3c:2f:83:eb:ac:c8:d4:18:66:a4:40:64:c3:42:13:b4:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B99BDA7241B9BFDF2B432F5E9592DA5F691DCA8F
        Validity
            Not Before: Apr  4 08:55:14 2024 GMT
            Not After : Apr  3 09:00:14 2025 GMT
        Subject: CN=0ECA8D0EE50281F310CE27C282D549BCB24F0A0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:10:84:50:21:79:61:68:d5:28:ef:c4:e9:12:
                    db:7b:2c:19:dd:44:d2:cc:62:d3:4c:b7:30:1a:60:
                    f9:29:8b:4e:99:64:1d:55:f9:0a:8e:df:fd:71:50:
                    16:f0:25:10:61:d6:50:84:0b:bb:fd:84:32:32:d7:
                    2b:16:3a:14:61:73:7a:70:0a:a9:d7:8b:a2:01:f4:
                    fb:0b:91:fa:d2:3e:33:9e:e4:98:7e:da:69:e4:6c:
                    6a:96:1a:84:14:01:0e:db:4f:dd:60:21:07:c1:a1:
                    a3:c6:11:d1:ea:bd:4d:4c:82:59:23:22:07:e9:d6:
                    7b:82:b5:6e:34:47:59:ef:37:11:d3:23:e2:88:55:
                    03:69:9b:59:d8:c8:fb:82:ec:60:01:95:88:38:5c:
                    69:41:3f:83:2c:1e:a9:6c:b7:d0:91:df:8f:b1:e7:
                    87:ba:4a:b9:59:d0:63:6d:f3:33:56:e2:90:98:b1:
                    82:fe:38:72:09:41:32:77:f2:c0:15:90:ba:d1:b1:
                    14:f2:38:b3:77:d8:58:b3:19:5a:5c:45:4b:3b:8c:
                    d2:d5:eb:51:34:f3:cc:c4:af:8d:0a:e7:00:21:a9:
                    66:85:77:83:fc:af:7c:4f:e3:5f:e5:2c:e9:fa:e1:
                    46:eb:9c:f8:50:94:97:61:68:d4:ee:b7:24:2a:c3:
                    d8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:CA:8D:0E:E5:02:81:F3:10:CE:27:C2:82:D5:49:BC:B2:4F:0A:0A
            X509v3 Authority Key Identifier:
                keyid:B9:9B:DA:72:41:B9:BF:DF:2B:43:2F:5E:95:92:DA:5F:69:1D:CA:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6CxfG1u38ASdqAD1UDZAaz7CiJw7zA3BHHLyXwLrpvsT/1/B99BDA7241B9BFDF2B432F5E9592DA5F691DCA8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B99BDA7241B9BFDF2B432F5E9592DA5F691DCA8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6CxfG1u38ASdqAD1UDZAaz7CiJw7zA3BHHLyXwLrpvsT/1/3230302e3131352e3130382e302f32322d3332203d3e20323730323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:38:39:ee:2e:7a:56:3f:10:03:15:be:99:5b:df:d2:b0:02:
         43:aa:4b:73:d3:dc:bc:dd:29:a5:27:23:86:9a:28:e4:d0:02:
         d9:cb:44:a5:91:39:f3:23:ed:c1:f4:c9:4b:76:5f:1a:e0:8f:
         55:1a:6c:19:a0:5d:aa:6c:c1:9d:e5:96:36:3b:73:ba:45:59:
         a7:0c:20:8d:be:a2:e5:5b:30:91:6f:a6:67:a3:2e:d3:a4:7d:
         c9:d9:3f:ab:ba:b6:15:55:64:88:ff:d3:45:b4:17:91:3a:94:
         4e:78:94:ea:e6:27:db:53:d2:50:dd:4e:66:b6:bc:ab:9d:ad:
         14:4a:0a:bb:00:f3:80:35:5b:09:37:f7:36:23:0b:09:fb:93:
         41:5d:95:a5:6c:fa:4b:c0:f3:e8:84:d0:9e:90:66:bd:df:42:
         9b:b0:4e:c6:ed:f9:2e:ae:03:32:37:cd:19:6b:a0:55:84:db:
         50:fc:28:32:50:ec:85:e2:f3:ef:a3:ee:3f:4c:f1:b8:cd:7c:
         2e:a6:46:f4:d9:95:31:b7:63:65:ad:51:7b:41:ca:9d:b5:7f:
         a1:07:4a:95:5b:4b:a7:aa:c3:9f:7b:ec:6f:1e:17:77:1e:86:
         6c:8e:c9:a5:8a:3f:20:80:fa:6d:2e:88:f5:2d:96:09:6f:e8:
         ba:09:ef:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:16 2024 by rpki-client on console-fra.rpki-client.org