Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/3230302e3139342e3234382e302f32312d3234203d3e203131343332.roa
File:                     3230302e3139342e3234382e302f32312d3234203d3e203131343332.roa (raw, json)
Hash identifier:          IOCGH0H2ZR3ksxhaNESnH6zhq3TpZuhVy7aQBfjQrPg=
Subject key identifier:   B6:34:3F:29:BF:90:12:88:B8:A8:36:C8:13:F5:8C:1A:10:92:9A:57
Certificate issuer:       /CN=D297690F68F4535C1EEA34AA4421792C2944DF34
Certificate serial:       6262E16A18C74AB1865BC8A0AA2AC8EF8BC07507
Authority key identifier: D2:97:69:0F:68:F4:53:5C:1E:EA:34:AA:44:21:79:2C:29:44:DF:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D297690F68F4535C1EEA34AA4421792C2944DF34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/3230302e3139342e3234382e302f32312d3234203d3e203131343332.roa
Signing time:             Thu 04 Apr 2024 15:41:15 +0000
ROA not before:           Thu 04 Apr 2024 15:36:15 +0000
ROA not after:            Thu 03 Apr 2025 15:41:15 +0000
asID:                     11432
IP address blocks:        200.194.248.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/D297690F68F4535C1EEA34AA4421792C2944DF34.crl
                          rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/D297690F68F4535C1EEA34AA4421792C2944DF34.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D297690F68F4535C1EEA34AA4421792C2944DF34.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 20:42:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:62:e1:6a:18:c7:4a:b1:86:5b:c8:a0:aa:2a:c8:ef:8b:c0:75:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D297690F68F4535C1EEA34AA4421792C2944DF34
        Validity
            Not Before: Apr  4 15:36:15 2024 GMT
            Not After : Apr  3 15:41:15 2025 GMT
        Subject: CN=B6343F29BF901288B8A836C813F58C1A10929A57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fc:8f:c1:79:90:e0:78:6d:1f:0a:9a:c2:b3:
                    54:4c:44:ec:7c:58:0d:f7:b7:1a:77:b3:ed:70:30:
                    67:24:7b:d2:46:90:a1:76:50:53:85:35:bf:e1:65:
                    cf:10:a5:61:31:ee:3a:78:b0:9b:be:8f:28:47:db:
                    1d:ad:1d:57:53:93:72:1b:cc:86:13:60:13:9c:80:
                    f5:04:09:e9:08:96:37:86:b9:60:64:84:6a:9a:4c:
                    a6:b8:97:39:36:df:11:39:f7:bc:d8:a7:20:a4:fe:
                    17:04:51:1b:8b:98:c8:3c:1e:3d:04:db:c5:35:f8:
                    9f:77:14:7e:05:bc:d5:65:3b:7e:31:22:cd:6c:83:
                    b3:d3:a3:58:e5:da:26:b7:76:98:b4:82:10:29:8c:
                    2c:24:27:c1:56:18:32:b4:3d:08:e6:cb:af:7e:90:
                    7e:34:51:99:1e:e5:f4:42:a3:9f:62:1e:ba:3b:aa:
                    56:ab:bf:f9:46:f1:7a:22:4e:f5:24:ec:3e:f4:6f:
                    eb:3e:71:89:c3:be:ba:94:f9:d3:39:0a:c8:15:1c:
                    c9:d6:41:8a:10:27:0b:07:36:b9:11:c2:67:a1:24:
                    21:1b:13:08:56:60:97:b9:a3:2b:d6:49:34:38:1e:
                    45:61:fb:ae:1c:fa:d0:27:79:48:e9:35:89:3e:c7:
                    a4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:34:3F:29:BF:90:12:88:B8:A8:36:C8:13:F5:8C:1A:10:92:9A:57
            X509v3 Authority Key Identifier:
                keyid:D2:97:69:0F:68:F4:53:5C:1E:EA:34:AA:44:21:79:2C:29:44:DF:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/D297690F68F4535C1EEA34AA4421792C2944DF34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D297690F68F4535C1EEA34AA4421792C2944DF34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/3230302e3139342e3234382e302f32312d3234203d3e203131343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.194.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b0:40:60:13:db:e3:c9:47:2e:74:f9:e0:ea:53:ff:e3:b3:6d:
         8c:50:c8:63:e1:87:76:1e:55:29:26:fc:1d:ba:38:50:e7:ac:
         a8:54:e4:59:d9:f0:b1:0c:34:df:71:47:11:60:f4:8b:d7:b1:
         d4:57:bd:33:2a:86:e2:4b:e5:7e:8c:21:f6:1c:9e:f7:a1:aa:
         7d:8b:4d:56:11:ee:85:22:3c:61:b5:ef:1d:19:63:e4:ae:c0:
         ef:f3:50:72:bc:d8:b9:b1:60:82:13:9c:5b:fe:42:a2:06:5e:
         a6:ec:3b:5f:35:84:c8:13:ad:80:33:b6:5a:aa:dc:16:16:67:
         f6:d2:24:ea:cf:85:0c:4a:f0:5a:b3:d1:1b:03:33:19:cc:a2:
         4e:58:7d:41:3c:83:99:85:ef:04:9a:4b:60:29:08:7e:29:d5:
         28:1e:d6:34:b5:6f:30:34:38:de:c0:52:38:79:dc:65:9a:6a:
         1a:35:71:74:74:67:e2:1b:34:37:f0:8f:76:aa:35:f8:96:53:
         dd:79:f4:b1:37:fe:ec:79:a1:63:ce:da:c1:13:1b:5d:71:5c:
         3e:3a:08:cf:77:b5:67:cd:58:32:66:89:4b:3d:14:66:0c:7c:
         a1:e5:af:a7:f3:61:3d:1c:98:9c:80:c7:de:01:ee:90:9c:9e:
         e3:25:22:b3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYmLhahjHSrGGW8igqirI74vAdQcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDI5NzY5MEY2OEY0NTM1QzFFRUEzNEFBNDQyMTc5MkMy
OTQ0REYzNDAeFw0yNDA0MDQxNTM2MTVaFw0yNTA0MDMxNTQxMTVaMDMxMTAvBgNV
BAMTKEI2MzQzRjI5QkY5MDEyODhCOEE4MzZDODEzRjU4QzFBMTA5MjlBNTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3/I/BeZDgeG0fCprCs1RMROx8
WA33txp3s+1wMGcke9JGkKF2UFOFNb/hZc8QpWEx7jp4sJu+jyhH2x2tHVdTk3Ib
zIYTYBOcgPUECekIljeGuWBkhGqaTKa4lzk23xE597zYpyCk/hcEURuLmMg8Hj0E
28U1+J93FH4FvNVlO34xIs1sg7PTo1jl2ia3dpi0ghApjCwkJ8FWGDK0PQjmy69+
kH40UZke5fRCo59iHro7qlarv/lG8XoiTvUk7D70b+s+cYnDvrqU+dM5CsgVHMnW
QYoQJwsHNrkRwmehJCEbEwhWYJe5oyvWSTQ4HkVh+64c+tAneUjpNYk+x6TlAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUtjQ/Kb+QEoi4qDbIE/WMGhCSmlcwHwYDVR0j
BBgwFoAU0pdpD2j0U1we6jSqRCF5LClE3zQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnhHaHNRUHhpYlR6NFpKVk1CUGpETXdSdE1BOExmdmJQdms1enFaTWRQ
alMvMS9EMjk3NjkwRjY4RjQ1MzVDMUVFQTM0QUE0NDIxNzkyQzI5NDRERjM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyOTc2OTBGNjhGNDUzNUMx
RUVBMzRBQTQ0MjE3OTJDMjk0NERGMzQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ4R2hzUVB4aWJUejRaSlZNQlBqRE13UnRNQThMZnZiUHZrNXpxWk1kUGpTLzEv
MzIzMDMwMmUzMTM5MzQyZTMyMzQzODJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDMx
MzEzNDMzMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAPIwvgwDQYJKoZIhvcNAQELBQADggEBALBAYBPb
48lHLnT54OpT/+OzbYxQyGPhh3YeVSkm/B26OFDnrKhU5FnZ8LEMNN9xRxFg9IvX
sdRXvTMqhuJL5X6MIfYcnvehqn2LTVYR7oUiPGG17x0ZY+SuwO/zUHK82LmxYIIT
nFv+QqIGXqbsO181hMgTrYAztlqq3BYWZ/bSJOrPhQxK8Fqz0RsDMxnMok5YfUE8
g5mF7wSaS2ApCH4p1Sge1jS1bzA0ON7AUjh53GWaaho1cXR0Z+IbNDfwj3aqNfiW
U9159LE3/ux5oWPO2sETG11xXD46CM93tWfNWDJmiUs9FGYMfKHlr6fzYT0cmJyA
x94B7pCcnuMlIrM=
-----END CERTIFICATE-----
Generated at Sat Sep 28 20:51:16 2024 by rpki-client on console-fra.rpki-client.org