Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3230302e3232302e3132382e302f32302d3230203d3e203237363933.roa
File:                     3230302e3232302e3132382e302f32302d3230203d3e203237363933.roa (raw, json)
Hash identifier:          vr5jpHg0Hn6IRaBZFdDc3zOyn+9ndbGa52eyZX2/oXY=
Subject key identifier:   53:15:58:92:9F:13:51:82:25:40:CE:2C:A5:8C:1E:3D:E6:9B:0E:CB
Certificate issuer:       /CN=3345439099C79C13F583D2238E3BB7D0D60D6877
Certificate serial:       71C46355C08BF38E2613EA1519DC1539D51D2D37
Authority key identifier: 33:45:43:90:99:C7:9C:13:F5:83:D2:23:8E:3B:B7:D0:D6:0D:68:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3230302e3232302e3132382e302f32302d3230203d3e203237363933.roa
Signing time:             Tue 22 Oct 2024 14:30:16 +0000
ROA not before:           Tue 22 Oct 2024 14:25:16 +0000
ROA not after:            Tue 21 Oct 2025 14:30:16 +0000
asID:                     27693
IP address blocks:        200.220.128.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.crl
                          rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 05:35:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:c4:63:55:c0:8b:f3:8e:26:13:ea:15:19:dc:15:39:d5:1d:2d:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3345439099C79C13F583D2238E3BB7D0D60D6877
        Validity
            Not Before: Oct 22 14:25:16 2024 GMT
            Not After : Oct 21 14:30:16 2025 GMT
        Subject: CN=531558929F1351822540CE2CA58C1E3DE69B0ECB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:15:59:8b:40:31:0d:9f:97:47:ef:fc:ff:7c:
                    6e:0d:cc:f6:52:f2:51:81:f7:76:28:56:a7:5f:a8:
                    d2:1e:84:56:8e:8e:ac:0f:8d:a7:c4:36:4f:45:be:
                    c9:82:ab:cf:e4:93:c0:8c:db:38:84:ab:ac:97:a5:
                    c6:cc:5e:08:93:1e:b7:4a:53:9a:64:f5:af:ec:4e:
                    c3:3a:57:7f:49:46:51:90:88:53:78:75:cf:a0:6b:
                    70:24:72:d5:df:b7:e1:06:62:a3:7f:13:34:9e:50:
                    2c:5b:cd:7e:16:63:0a:a8:25:8b:b8:35:d8:f6:1e:
                    d6:46:a3:de:3f:ac:bb:fc:b1:bb:fc:42:9a:e9:e6:
                    b5:ac:db:c9:1c:fc:f7:fa:51:91:c7:a7:f3:88:e3:
                    78:3a:6f:7b:e2:25:ab:b0:a3:b9:42:f0:68:03:63:
                    1f:17:7a:e6:b5:23:24:51:86:c6:06:7a:4a:1c:81:
                    64:c9:da:f3:87:cb:8a:9d:38:b5:65:14:8c:ec:fd:
                    12:33:fc:6a:7b:47:a4:22:9f:80:42:5f:a3:21:82:
                    6d:56:69:6b:89:e7:ea:87:aa:e0:4f:e7:58:bb:c7:
                    fd:ec:d3:cc:f9:c1:1c:6d:48:55:5a:7d:5d:ab:1e:
                    41:02:2c:86:46:08:75:2c:88:a2:2a:96:d7:63:c5:
                    b0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:15:58:92:9F:13:51:82:25:40:CE:2C:A5:8C:1E:3D:E6:9B:0E:CB
            X509v3 Authority Key Identifier:
                keyid:33:45:43:90:99:C7:9C:13:F5:83:D2:23:8E:3B:B7:D0:D6:0D:68:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3230302e3232302e3132382e302f32302d3230203d3e203237363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4d:9a:29:42:39:4d:96:8a:73:f1:01:8f:b2:81:4b:69:a7:d3:
         ff:cc:25:c7:60:32:3a:3d:a9:4a:51:31:be:98:e9:3d:a6:92:
         9a:8e:bc:5c:6d:83:8d:c6:5e:65:46:3e:3f:b5:52:6f:a6:3b:
         14:fa:81:06:c3:52:9c:31:7b:6a:a7:87:3d:59:f5:10:62:2d:
         43:17:21:e4:26:76:95:7d:7a:a5:5c:71:2e:08:a1:c0:1e:62:
         ef:8d:07:4f:0d:0c:e0:a8:22:3c:cb:df:23:cb:86:2e:ab:a3:
         e8:e9:59:5d:26:13:77:80:93:73:c4:dd:83:30:4d:81:d9:91:
         e8:8c:42:bc:c3:94:0b:cf:2c:0d:d9:de:ea:ac:59:f3:fb:e4:
         49:de:3a:57:a0:ab:51:9a:66:54:88:2a:a1:fb:c8:a1:5a:0f:
         34:eb:31:a4:68:a5:b1:39:ec:99:54:37:35:f1:67:8b:9d:59:
         82:59:1d:73:3d:5e:a9:9f:4f:cd:b4:46:f0:63:8a:3f:93:0e:
         a7:60:4a:2a:50:45:33:b8:12:d5:fa:28:18:aa:d9:f6:9e:b3:
         07:4e:19:07:fb:2e:6a:6e:32:ad:aa:57:74:84:3f:c3:fb:e4:
         86:4d:92:5c:c1:94:1b:fe:d9:6d:7f:d2:5e:25:b1:44:97:65:
         5e:d8:7c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:37 2024 by rpki-client on console-fra.rpki-client.org