Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3230302e3232302e3133362e302f32312d3231203d3e203237363933.roa
File:                     3230302e3232302e3133362e302f32312d3231203d3e203237363933.roa (raw, json)
Hash identifier:          YrKqLl4lK19M1Ea0jntFTx44h2+lEsX89tuQKOCiP6Q=
Subject key identifier:   D7:C2:EF:FA:C3:DC:03:D3:76:6C:FD:6E:29:F4:14:0C:3D:87:9A:14
Certificate issuer:       /CN=3345439099C79C13F583D2238E3BB7D0D60D6877
Certificate serial:       0BCA6F0AD1C4972C42AD121A074BC1EE407AC34C
Authority key identifier: 33:45:43:90:99:C7:9C:13:F5:83:D2:23:8E:3B:B7:D0:D6:0D:68:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3230302e3232302e3133362e302f32312d3231203d3e203237363933.roa
Signing time:             Tue 22 Oct 2024 14:30:15 +0000
ROA not before:           Tue 22 Oct 2024 14:25:15 +0000
ROA not after:            Tue 21 Oct 2025 14:30:15 +0000
asID:                     27693
IP address blocks:        200.220.136.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.crl
                          rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 05:35:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:ca:6f:0a:d1:c4:97:2c:42:ad:12:1a:07:4b:c1:ee:40:7a:c3:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3345439099C79C13F583D2238E3BB7D0D60D6877
        Validity
            Not Before: Oct 22 14:25:15 2024 GMT
            Not After : Oct 21 14:30:15 2025 GMT
        Subject: CN=D7C2EFFAC3DC03D3766CFD6E29F4140C3D879A14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:76:d0:45:85:8e:1c:3b:80:77:ab:7b:41:79:
                    2a:0b:05:34:f3:e6:ab:10:52:86:ba:f9:ef:45:78:
                    e2:92:5a:1a:91:5e:d0:2f:c2:55:c1:f1:98:b5:22:
                    8c:4e:06:be:ae:91:a4:60:fb:91:1f:d3:85:86:f0:
                    17:77:7f:ed:cd:37:0d:c4:ed:2c:bb:cf:70:03:05:
                    19:60:43:a6:bc:2c:40:5a:b6:e8:c2:8d:4a:76:ac:
                    a9:f9:5c:77:2c:99:a0:c1:f2:f1:2a:e6:b4:c2:11:
                    54:e6:8e:25:45:4b:3f:cb:37:af:e4:b6:8f:19:ee:
                    6e:49:56:15:47:5a:bd:f8:4c:9c:95:cd:1d:fd:80:
                    97:5a:ae:ee:80:f1:c7:ab:23:e0:a0:f9:b7:c1:0b:
                    0d:fe:1f:37:58:94:9f:14:85:08:20:06:54:4b:89:
                    29:e3:d8:28:40:2b:5d:4d:92:f4:7d:dd:5f:0d:a1:
                    79:c5:79:39:c7:4c:f3:c6:70:57:c5:1e:13:f1:82:
                    b0:7d:6e:88:d4:2f:41:1e:5c:74:69:64:e8:7c:b2:
                    dc:aa:92:15:5c:40:4c:20:b1:98:05:ff:36:b6:aa:
                    a8:54:5b:04:be:21:34:21:48:57:3c:9c:e3:c1:10:
                    dd:3b:22:8c:fc:50:02:cb:b7:8d:69:66:92:a2:e6:
                    7d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:C2:EF:FA:C3:DC:03:D3:76:6C:FD:6E:29:F4:14:0C:3D:87:9A:14
            X509v3 Authority Key Identifier:
                keyid:33:45:43:90:99:C7:9C:13:F5:83:D2:23:8E:3B:B7:D0:D6:0D:68:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3230302e3232302e3133362e302f32312d3231203d3e203237363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         13:96:90:4c:34:c5:33:79:a3:b1:dc:d7:6b:e6:3e:7b:65:36:
         fd:44:2a:77:f0:6e:75:45:c7:bf:25:e1:eb:ed:19:a2:1c:76:
         bf:9b:f0:da:41:bb:c1:d9:49:a6:9a:bf:53:41:34:12:64:b1:
         23:3f:a8:a8:4c:6d:f4:03:7b:e5:c2:4e:e7:e0:4f:e9:e5:00:
         8a:d7:7c:0a:ba:c9:94:e1:e5:b6:39:f4:a2:f7:19:52:f7:cf:
         86:ce:ab:aa:4f:cb:a7:4b:15:2a:7d:c3:ed:5b:70:dd:42:18:
         cf:95:df:9c:6e:ca:31:b0:d3:19:32:97:75:f2:9a:9e:59:74:
         4f:89:13:b2:9f:21:6c:18:b5:ed:ac:a8:67:aa:5a:ba:38:54:
         68:a3:a4:ee:69:c4:de:a7:a5:a6:18:d5:d1:2d:4b:c8:89:e9:
         a0:f4:32:3a:83:ca:4b:47:0f:de:b4:bd:44:a6:3f:74:93:b6:
         a0:a7:17:51:dd:f9:c2:6d:a5:51:57:63:c1:0f:c6:0d:0c:a3:
         1e:6b:04:00:a0:54:55:28:48:55:6c:fd:ac:45:f5:84:8d:a9:
         da:bc:ca:bf:5e:b3:82:ae:64:d2:e8:db:0c:ac:83:81:47:1f:
         cb:6d:9e:5f:80:72:49:ae:e7:db:1c:bb:95:4d:4f:8e:ac:3a:
         e3:c6:37:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:37 2024 by rpki-client on console-fra.rpki-client.org