Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/3230302e3137302e3139322e302f31382d3234203d3e203131343332.roa
File:                     3230302e3137302e3139322e302f31382d3234203d3e203131343332.roa (raw, json)
Hash identifier:          YYATIspdJVCdifj079khVgYYUa5p6QeMPDOYi4xJmX8=
Subject key identifier:   B0:12:33:ED:B3:45:E1:9E:4E:B2:74:5F:6F:A1:1B:20:E2:49:6A:AB
Certificate issuer:       /CN=953F2BCFF3256FC63AE0A2F1227B03D73447C5C9
Certificate serial:       15C055F37A127DFD8F9148B1B9794F0787C205E8
Authority key identifier: 95:3F:2B:CF:F3:25:6F:C6:3A:E0:A2:F1:22:7B:03:D7:34:47:C5:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/953F2BCFF3256FC63AE0A2F1227B03D73447C5C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/3230302e3137302e3139322e302f31382d3234203d3e203131343332.roa
Signing time:             Fri 25 Oct 2024 18:23:55 +0000
ROA not before:           Fri 25 Oct 2024 18:18:55 +0000
ROA not after:            Fri 24 Oct 2025 18:23:55 +0000
asID:                     11432
IP address blocks:        200.170.192.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/953F2BCFF3256FC63AE0A2F1227B03D73447C5C9.crl
                          rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/953F2BCFF3256FC63AE0A2F1227B03D73447C5C9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/953F2BCFF3256FC63AE0A2F1227B03D73447C5C9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 14:12:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:c0:55:f3:7a:12:7d:fd:8f:91:48:b1:b9:79:4f:07:87:c2:05:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=953F2BCFF3256FC63AE0A2F1227B03D73447C5C9
        Validity
            Not Before: Oct 25 18:18:55 2024 GMT
            Not After : Oct 24 18:23:55 2025 GMT
        Subject: CN=B01233EDB345E19E4EB2745F6FA11B20E2496AAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:63:22:cd:e6:85:24:3d:97:88:c1:c5:85:4d:
                    e2:27:97:2c:54:98:cf:1a:c1:d2:f3:0c:1b:77:74:
                    6f:6a:e8:4e:06:7c:33:6a:c4:c8:b1:e9:51:9e:4a:
                    b2:64:e4:4a:94:4b:09:5d:8e:ca:c1:32:7a:a3:6e:
                    67:98:b8:0c:9c:a7:76:75:d8:aa:be:83:29:07:37:
                    2b:a6:b2:38:83:44:46:1c:8e:4d:75:d3:be:d8:03:
                    5a:20:69:df:3b:39:9c:49:d6:0c:0f:66:74:f2:2f:
                    e2:d3:f2:d1:3b:a1:bc:6d:d1:f0:c3:63:87:47:10:
                    31:d1:65:dd:56:90:c8:08:df:7a:3f:44:08:e2:1b:
                    37:35:94:73:15:cf:54:9f:1a:40:6a:58:27:95:32:
                    13:69:34:03:75:ad:17:cb:92:bc:99:18:06:0f:cf:
                    c9:09:5a:18:a6:66:00:ab:41:54:e2:7c:5e:30:f3:
                    92:1d:f2:f2:0d:6f:d7:6a:b5:07:d6:47:5c:bb:f2:
                    b5:a8:34:dc:bb:05:e2:ef:d9:bd:b3:cc:a5:9f:64:
                    94:12:98:a2:25:5f:c5:2f:a8:39:26:43:30:5a:8a:
                    f9:fc:58:d7:42:4b:df:13:01:3c:ff:fa:63:ef:e2:
                    a3:b6:f7:f0:24:39:c8:5f:c5:bf:00:fe:e0:43:ae:
                    27:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:12:33:ED:B3:45:E1:9E:4E:B2:74:5F:6F:A1:1B:20:E2:49:6A:AB
            X509v3 Authority Key Identifier:
                keyid:95:3F:2B:CF:F3:25:6F:C6:3A:E0:A2:F1:22:7B:03:D7:34:47:C5:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/953F2BCFF3256FC63AE0A2F1227B03D73447C5C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/953F2BCFF3256FC63AE0A2F1227B03D73447C5C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/3230302e3137302e3139322e302f31382d3234203d3e203131343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.170.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         27:6a:99:73:bd:aa:f7:60:f6:b8:4f:1e:f1:f7:91:2a:cc:9f:
         6b:88:b2:e3:36:50:16:89:00:98:30:f4:29:29:4b:14:15:d7:
         85:2c:49:cf:42:9f:9f:d6:a4:a8:74:03:14:61:53:35:04:86:
         76:63:a7:b6:cd:c1:82:8b:1a:fd:2d:e2:30:c8:8f:2a:5e:11:
         f6:a5:4d:c2:fb:77:dc:bf:7c:cc:55:61:73:b6:e8:b8:96:cf:
         de:b9:7d:f9:56:dc:3e:36:fa:f4:fe:f6:d8:1c:df:31:ca:e2:
         ae:c4:d1:f0:53:2b:39:eb:76:78:8f:0b:2e:c7:bc:05:33:b0:
         f8:61:9a:79:7d:34:8d:02:c7:00:98:60:1d:2e:5b:59:62:fe:
         dd:5e:e7:1a:20:ef:37:2a:07:6d:0d:76:71:ec:59:3a:29:43:
         b0:29:78:d4:02:65:90:c4:67:5b:5e:d1:2c:56:d2:87:d2:f8:
         67:92:15:3d:b9:8a:c2:a0:a4:9a:b6:94:b4:e6:c2:c4:1c:4f:
         8e:47:fd:08:d7:e6:97:47:ad:4f:ae:2c:c5:35:84:78:bc:84:
         be:7c:83:c4:01:e7:ca:a8:02:54:63:9f:26:fd:0f:aa:ea:cd:
         52:d4:b2:fd:41:60:27:e5:e6:88:6f:1b:ad:c5:2e:84:8a:f5:
         76:c3:96:06
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFcBV83oSff2PkUixuXlPB4fCBegwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTUzRjJCQ0ZGMzI1NkZDNjNBRTBBMkYxMjI3QjAzRDcz
NDQ3QzVDOTAeFw0yNDEwMjUxODE4NTVaFw0yNTEwMjQxODIzNTVaMDMxMTAvBgNV
BAMTKEIwMTIzM0VEQjM0NUUxOUU0RUIyNzQ1RjZGQTExQjIwRTI0OTZBQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdYyLN5oUkPZeIwcWFTeInlyxU
mM8awdLzDBt3dG9q6E4GfDNqxMix6VGeSrJk5EqUSwldjsrBMnqjbmeYuAycp3Z1
2Kq+gykHNyumsjiDREYcjk11077YA1ogad87OZxJ1gwPZnTyL+LT8tE7obxt0fDD
Y4dHEDHRZd1WkMgI33o/RAjiGzc1lHMVz1SfGkBqWCeVMhNpNAN1rRfLkryZGAYP
z8kJWhimZgCrQVTifF4w85Id8vINb9dqtQfWR1y78rWoNNy7BeLv2b2zzKWfZJQS
mKIlX8UvqDkmQzBaivn8WNdCS98TATz/+mPv4qO29/AkOchfxb8A/uBDrifhAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUsBIz7bNF4Z5OsnRfb6EbIOJJaqswHwYDVR0j
BBgwFoAUlT8rz/Mlb8Y64KLxInsD1zRHxckwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnhHaHNRUHhpYlR6NFpKVk1CUGpETXdSdE1BOExmdmJQdms1enFaTWRQ
alMvMC85NTNGMkJDRkYzMjU2RkM2M0FFMEEyRjEyMjdCMDNENzM0NDdDNUM5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk1M0YyQkNGRjMyNTZGQzYz
QUUwQTJGMTIyN0IwM0Q3MzQ0N0M1QzkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ4R2hzUVB4aWJUejRaSlZNQlBqRE13UnRNQThMZnZiUHZrNXpxWk1kUGpTLzAv
MzIzMDMwMmUzMTM3MzAyZTMxMzkzMjJlMzAyZjMxMzgyZDMyMzQyMDNkM2UyMDMx
MzEzNDMzMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAbIqsAwDQYJKoZIhvcNAQELBQADggEBACdqmXO9
qvdg9rhPHvH3kSrMn2uIsuM2UBaJAJgw9CkpSxQV14UsSc9Cn5/WpKh0AxRhUzUE
hnZjp7bNwYKLGv0t4jDIjypeEfalTcL7d9y/fMxVYXO26LiWz965fflW3D42+vT+
9tgc3zHK4q7E0fBTKznrdniPCy7HvAUzsPhhmnl9NI0CxwCYYB0uW1li/t1e5xog
7zcqB20NdnHsWTopQ7ApeNQCZZDEZ1te0SxW0ofS+GeSFT25isKgpJq2lLTmwsQc
T45H/QjX5pdHrU+uLMU1hHi8hL58g8QB58qoAlRjnyb9D6rqzVLUsv1BYCfl5ohv
G63FLoSK9XbDlgY=
-----END CERTIFICATE-----
Generated at Mon Nov 25 13:02:11 2024 by rpki-client on console-fra.rpki-client.org