Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3230302e3232302e3132382e302f32302d3234203d3e203237363933.roa
File:                     3230302e3232302e3132382e302f32302d3234203d3e203237363933.roa (raw, json)
Hash identifier:          bMXMqqOe6NYXGqVOsQIVzsN7NUK5Bv/nifDSoNRNd2M=
Subject key identifier:   E5:6A:E8:20:03:27:3F:70:31:75:9D:86:D9:65:9F:26:60:1F:44:37
Certificate issuer:       /CN=D0E128DF8234DC596D5CC92381FB1A2F9DF99876
Certificate serial:       53D972083E6FBC64DB2ABE8682C3EDFCA073937B
Authority key identifier: D0:E1:28:DF:82:34:DC:59:6D:5C:C9:23:81:FB:1A:2F:9D:F9:98:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0E128DF8234DC596D5CC92381FB1A2F9DF99876.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3230302e3232302e3132382e302f32302d3234203d3e203237363933.roa
Signing time:             Fri 19 Apr 2024 20:21:02 +0000
ROA not before:           Fri 19 Apr 2024 20:16:02 +0000
ROA not after:            Fri 18 Apr 2025 20:21:02 +0000
asID:                     27693
IP address blocks:        200.220.128.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/D0E128DF8234DC596D5CC92381FB1A2F9DF99876.crl
                          rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/D0E128DF8234DC596D5CC92381FB1A2F9DF99876.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0E128DF8234DC596D5CC92381FB1A2F9DF99876.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 19:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:d9:72:08:3e:6f:bc:64:db:2a:be:86:82:c3:ed:fc:a0:73:93:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0E128DF8234DC596D5CC92381FB1A2F9DF99876
        Validity
            Not Before: Apr 19 20:16:02 2024 GMT
            Not After : Apr 18 20:21:02 2025 GMT
        Subject: CN=E56AE82003273F7031759D86D9659F26601F4437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9c:54:bf:88:49:4c:ef:9b:c2:f6:58:a7:08:
                    fc:81:60:66:19:7e:fc:76:d7:d1:16:50:da:1b:6f:
                    96:5c:2f:3f:2f:ae:56:9f:4a:db:9a:0c:a7:76:96:
                    b7:ba:4f:07:17:27:eb:57:9d:5c:ba:93:85:69:64:
                    33:6f:54:88:8e:3c:1d:df:e5:29:4d:dc:ce:1c:d1:
                    cf:ef:17:1d:85:0e:09:ad:b4:a8:5f:6b:5d:a9:6d:
                    67:a9:61:4d:ef:6e:72:79:1d:7e:1a:e7:dd:0c:41:
                    f7:8d:51:ef:ff:b4:d2:fe:4b:2a:79:cc:bd:48:59:
                    73:fb:c1:4c:78:28:15:b1:fe:79:e5:ce:cf:28:0f:
                    16:4d:84:85:88:e8:9c:34:3d:40:b2:8e:98:94:5f:
                    ed:b7:8b:97:ca:4a:d6:18:9f:d6:95:3e:25:06:d5:
                    20:97:d3:39:d9:25:52:f7:68:08:81:7f:91:9a:2b:
                    3e:d1:fa:45:38:a3:a1:93:c6:07:67:9a:c0:4f:63:
                    31:ae:86:24:1a:c2:63:12:a8:c3:ca:9e:16:4d:05:
                    d6:af:f4:80:e2:04:21:a9:4a:72:93:f2:94:ea:f0:
                    15:57:1b:59:75:3c:0e:9a:d0:1a:46:45:83:6c:d6:
                    5b:8a:d8:7a:8e:99:a8:ee:be:07:11:89:5b:bc:4d:
                    08:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:6A:E8:20:03:27:3F:70:31:75:9D:86:D9:65:9F:26:60:1F:44:37
            X509v3 Authority Key Identifier:
                keyid:D0:E1:28:DF:82:34:DC:59:6D:5C:C9:23:81:FB:1A:2F:9D:F9:98:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/D0E128DF8234DC596D5CC92381FB1A2F9DF99876.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0E128DF8234DC596D5CC92381FB1A2F9DF99876.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3230302e3232302e3132382e302f32302d3234203d3e203237363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7f:5f:03:b9:78:88:f2:a4:9b:cf:0c:36:dd:0a:56:1f:5b:18:
         40:d5:c8:f6:62:f6:88:72:4a:1f:cb:86:95:0f:41:e4:0f:34:
         4e:4a:a9:b2:c2:45:ae:0a:13:d0:69:5b:da:8a:12:fd:ad:08:
         c4:73:d7:a1:5a:bc:c0:4b:3b:3c:de:af:75:09:ad:fb:a2:de:
         69:c0:25:ca:c0:cc:f6:bb:ac:d0:fe:19:ac:6a:0d:bc:9f:ab:
         b7:29:54:26:d8:c6:af:31:bc:b0:c2:45:d1:87:e3:8a:cc:60:
         d6:e7:27:23:3d:3e:1b:97:00:b4:d8:21:8b:f0:03:d7:8f:4e:
         ac:d3:9b:b9:35:b4:1b:5f:71:c8:81:0a:c3:f5:0b:e7:57:c7:
         1b:9c:39:fd:f1:06:75:c9:fa:4c:7a:6d:04:b4:82:e1:09:b6:
         2c:4b:b6:3b:49:60:3e:f8:a6:22:83:db:5d:5d:45:e7:34:27:
         97:31:d0:7f:96:11:cc:40:cf:c2:c3:ba:a3:2a:93:e3:3f:c5:
         87:a4:0c:bb:eb:0d:37:c2:bf:ac:f5:b2:2b:b4:e3:13:41:e0:
         73:5e:f6:b6:10:cc:a4:78:ad:e3:79:ad:83:a5:cf:65:97:9f:
         47:4b:03:83:e0:7b:8d:3a:d9:28:06:d5:f4:ef:c1:18:79:a6:
         66:2d:ac:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:06:35 2024 by rpki-client on console-fra.rpki-client.org