Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/2/3230302e3231392e312e302f32342d3234203d3e20323731303137.roa
File:                     3230302e3231392e312e302f32342d3234203d3e20323731303137.roa (raw, json)
Hash identifier:          2xFQTZD1CjvNpeqoHPGLs0FFH8ET68hR8KTBQU9IqNc=
Subject key identifier:   2F:F7:B6:68:07:7E:52:40:7F:ED:0E:A4:B4:1B:03:94:6B:92:23:81
Certificate issuer:       /CN=8D1CD5C0B8C5A3A259C71AA293766C8CF670835E
Certificate serial:       6E70F495A07E76DB6FB6F52CE9E26C730F315E97
Authority key identifier: 8D:1C:D5:C0:B8:C5:A3:A2:59:C7:1A:A2:93:76:6C:8C:F6:70:83:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D1CD5C0B8C5A3A259C71AA293766C8CF670835E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/2/3230302e3231392e312e302f32342d3234203d3e20323731303137.roa
Signing time:             Thu 04 Apr 2024 14:46:51 +0000
ROA not before:           Thu 04 Apr 2024 14:41:51 +0000
ROA not after:            Thu 03 Apr 2025 14:46:51 +0000
asID:                     271017
IP address blocks:        200.219.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/2/8D1CD5C0B8C5A3A259C71AA293766C8CF670835E.crl
                          rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/2/8D1CD5C0B8C5A3A259C71AA293766C8CF670835E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D1CD5C0B8C5A3A259C71AA293766C8CF670835E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:70:f4:95:a0:7e:76:db:6f:b6:f5:2c:e9:e2:6c:73:0f:31:5e:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D1CD5C0B8C5A3A259C71AA293766C8CF670835E
        Validity
            Not Before: Apr  4 14:41:51 2024 GMT
            Not After : Apr  3 14:46:51 2025 GMT
        Subject: CN=2FF7B668077E52407FED0EA4B41B03946B922381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fc:84:3a:0b:47:07:2a:ad:bc:33:47:b8:1f:
                    78:dc:d9:d2:8c:8e:41:1b:74:cc:07:93:a7:8e:5a:
                    bf:a9:71:3e:a8:56:c6:49:37:f0:22:36:c2:8e:4e:
                    94:c1:96:53:7e:df:bb:f1:d9:d9:b8:d9:02:72:5f:
                    d5:56:23:da:c9:7d:72:b7:7a:ac:94:d3:21:87:97:
                    79:e6:9f:20:69:a8:b4:bc:b6:12:7c:b2:e3:21:6e:
                    12:64:a4:6b:a9:e9:25:10:4d:a7:b7:f5:ee:15:c0:
                    7c:68:29:e1:b3:44:04:02:8e:aa:82:8e:4b:3a:7c:
                    a2:4d:59:3a:f1:c7:27:a2:9f:76:91:16:43:c7:5d:
                    71:09:24:c5:5a:ac:46:43:87:2b:85:35:da:81:ed:
                    b6:17:70:1c:f0:c2:ea:e0:97:bd:e2:38:b0:5c:ea:
                    c4:bf:78:18:ae:67:fa:da:21:6f:51:f7:be:32:f9:
                    1d:32:4b:e6:75:04:9f:f0:f8:3e:3c:e3:c6:af:24:
                    dc:89:c1:74:c0:e1:ba:18:ad:30:fa:dd:37:53:11:
                    9c:bc:45:b2:6e:2e:ef:ee:12:92:27:de:cc:6a:70:
                    9b:e7:0f:b7:81:0b:83:88:bb:18:32:02:e2:ae:0a:
                    d6:e2:5f:ff:c6:88:a4:28:38:6e:32:b2:ae:b9:e7:
                    6f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:F7:B6:68:07:7E:52:40:7F:ED:0E:A4:B4:1B:03:94:6B:92:23:81
            X509v3 Authority Key Identifier:
                keyid:8D:1C:D5:C0:B8:C5:A3:A2:59:C7:1A:A2:93:76:6C:8C:F6:70:83:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/2/8D1CD5C0B8C5A3A259C71AA293766C8CF670835E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D1CD5C0B8C5A3A259C71AA293766C8CF670835E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/2/3230302e3231392e312e302f32342d3234203d3e20323731303137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:38:42:66:d3:67:c0:53:b3:57:a0:90:cc:6d:b6:62:25:c4:
         45:f6:97:14:ef:05:0f:89:21:cd:34:a2:26:f4:6f:4b:a5:4d:
         45:d8:2d:08:55:61:f8:06:91:0c:1c:69:2b:c0:86:cf:a0:af:
         6c:31:99:18:33:0d:c0:5b:60:d1:a5:11:58:de:bf:cf:c8:76:
         35:21:b7:6b:94:94:37:3c:14:16:2d:6b:2a:1b:0e:96:45:c7:
         13:df:c8:c7:ac:44:ef:c3:1a:7d:58:c0:d2:f1:80:35:79:44:
         5e:30:2a:58:07:5c:be:04:95:66:79:8c:04:26:c0:f1:fb:71:
         e0:e5:4d:cd:e3:7c:39:a7:a9:cb:47:09:36:7c:0a:bf:91:a8:
         73:3b:5f:f2:08:b7:d1:c3:7f:f9:e1:1c:6a:41:9f:eb:7e:50:
         41:e9:a0:1b:a3:d4:e1:38:3c:a7:42:9c:80:08:4c:d7:91:14:
         20:95:5d:0d:83:07:84:91:db:1e:7f:9e:38:9b:7c:b1:a1:4f:
         69:1c:c9:99:a2:dc:4d:db:6a:ae:bf:57:52:a5:47:cc:dd:34:
         88:13:bd:95:05:1c:c9:36:0a:e5:6b:18:d7:c6:b0:59:84:fc:
         ef:82:bd:f7:f8:1f:82:80:f9:47:9f:12:3f:fd:b8:21:b5:e4:
         d2:74:1a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:58:52 2024 by rpki-client on console-fra.rpki-client.org