Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3230302e3232302e3133362e302f32342d3234203d3e203237363933.roa
File:                     3230302e3232302e3133362e302f32342d3234203d3e203237363933.roa (raw, json)
Hash identifier:          6qz+Em6+S4Z4IPP5eCa//DTFt/GAoiWhplU5l/pTUHA=
Subject key identifier:   E5:6B:A6:AB:92:5F:1C:59:12:25:C8:F7:17:68:0D:48:FD:2F:4E:F0
Certificate issuer:       /CN=3345439099C79C13F583D2238E3BB7D0D60D6877
Certificate serial:       33D0EA0998E2A31F5E5D6960B66A97644F6688FC
Authority key identifier: 33:45:43:90:99:C7:9C:13:F5:83:D2:23:8E:3B:B7:D0:D6:0D:68:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3230302e3232302e3133362e302f32342d3234203d3e203237363933.roa
Signing time:             Tue 22 Oct 2024 14:30:16 +0000
ROA not before:           Tue 22 Oct 2024 14:25:16 +0000
ROA not after:            Tue 21 Oct 2025 14:30:16 +0000
asID:                     27693
IP address blocks:        200.220.136.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.crl
                          rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 05:35:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:d0:ea:09:98:e2:a3:1f:5e:5d:69:60:b6:6a:97:64:4f:66:88:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3345439099C79C13F583D2238E3BB7D0D60D6877
        Validity
            Not Before: Oct 22 14:25:16 2024 GMT
            Not After : Oct 21 14:30:16 2025 GMT
        Subject: CN=E56BA6AB925F1C591225C8F717680D48FD2F4EF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:82:a6:75:6c:e5:95:39:c7:fc:95:7b:f3:cc:
                    e6:8a:25:d0:bb:d0:e6:27:6a:9f:88:6b:10:fa:a2:
                    4e:ef:12:5b:92:f9:36:99:24:22:be:8e:13:6b:22:
                    2d:72:f9:38:69:ed:86:a0:90:24:b8:3a:b4:3a:d4:
                    ce:54:c7:5f:f8:3f:2b:6a:4e:e3:d6:cd:be:99:d9:
                    b9:8d:15:30:30:f4:20:9f:a6:52:7c:15:f9:be:79:
                    36:08:3e:56:3e:93:5b:67:50:c4:3c:39:34:1e:c2:
                    fb:86:72:c3:fd:db:5d:5b:04:35:c8:ae:73:74:d7:
                    36:55:1e:d3:8d:1c:60:b5:33:49:59:be:64:19:c9:
                    3c:52:77:ad:24:16:7a:4f:52:54:4d:83:8b:fa:47:
                    f7:82:47:ff:e9:c5:54:f9:10:39:bd:0d:c0:09:d4:
                    d9:8f:fb:96:5b:07:c9:c5:d2:aa:cc:ba:fd:cb:f5:
                    a4:75:d0:22:98:f5:9b:e2:7f:ac:52:dd:ea:a1:33:
                    93:1f:8c:08:a7:dd:a1:91:5a:42:fa:5b:c1:84:73:
                    89:6e:f0:17:92:98:47:df:37:c4:ac:98:04:e0:e7:
                    13:f6:2e:2c:ae:a7:be:15:f3:bd:fd:f6:d5:bd:26:
                    c0:37:4a:96:66:de:f4:41:76:a9:50:ef:eb:b7:4e:
                    cf:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:6B:A6:AB:92:5F:1C:59:12:25:C8:F7:17:68:0D:48:FD:2F:4E:F0
            X509v3 Authority Key Identifier:
                keyid:33:45:43:90:99:C7:9C:13:F5:83:D2:23:8E:3B:B7:D0:D6:0D:68:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3230302e3232302e3133362e302f32342d3234203d3e203237363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:9d:65:98:41:c6:8a:0c:c4:85:1f:40:b8:83:98:48:ec:b3:
         b2:0a:04:a5:38:9d:fa:86:ad:f7:07:a2:e5:85:10:05:92:00:
         f6:4c:a6:f7:42:b5:d3:c3:9d:48:bb:c7:0e:74:fb:35:ad:91:
         9b:ef:38:82:0c:4a:62:09:c1:0e:91:ac:c9:eb:6d:d2:13:4d:
         90:bb:4d:ce:b6:1b:51:f7:ab:42:72:2c:4f:6a:ef:49:71:d0:
         d8:98:58:d2:a3:c5:c5:51:5d:24:d8:7f:24:bf:d8:8b:27:9b:
         7d:ac:80:00:0a:4b:ae:f2:b6:cf:81:b7:22:80:1d:13:09:d8:
         a9:bc:c3:64:42:c0:f4:8a:7d:fa:a9:4e:4f:13:ec:96:a6:41:
         c1:90:f7:f3:cf:71:7d:40:5d:29:80:3e:05:47:45:36:43:15:
         c8:e8:38:41:e5:58:27:0a:e5:d5:b3:75:40:7d:95:58:2a:48:
         8f:f1:7d:73:6a:31:f2:43:c9:8d:ca:30:30:e3:a4:8e:0f:cf:
         65:f5:6e:79:85:8f:fc:37:ec:89:14:87:dd:9a:94:c6:f3:0b:
         66:e4:3b:85:d2:0d:b3:74:62:26:11:c4:3d:c9:19:94:c3:d7:
         0f:46:40:4b:44:69:df:06:0e:cd:a5:32:ac:44:cd:f9:0f:52:
         15:bf:fa:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:33:58 2024 by rpki-client on console-ams.rpki-client.org