Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/3230302e3230312e3132382e302f31392d3234203d3e203131343332.roa
File:                     3230302e3230312e3132382e302f31392d3234203d3e203131343332.roa (raw, json)
Hash identifier:          JAhfrLwww1xAyrWBRWSKRosD8QOE8aDL1q3U0NU32ao=
Subject key identifier:   20:90:5D:CF:4A:D6:FB:47:5A:18:A5:08:47:5C:28:92:06:29:F2:52
Certificate issuer:       /CN=D297690F68F4535C1EEA34AA4421792C2944DF34
Certificate serial:       4DDF3C3B7DBCDE002CD003A3D371ABF247164E1A
Authority key identifier: D2:97:69:0F:68:F4:53:5C:1E:EA:34:AA:44:21:79:2C:29:44:DF:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D297690F68F4535C1EEA34AA4421792C2944DF34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/3230302e3230312e3132382e302f31392d3234203d3e203131343332.roa
Signing time:             Thu 04 Apr 2024 15:41:16 +0000
ROA not before:           Thu 04 Apr 2024 15:36:16 +0000
ROA not after:            Thu 03 Apr 2025 15:41:16 +0000
asID:                     11432
IP address blocks:        200.201.128.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/D297690F68F4535C1EEA34AA4421792C2944DF34.crl
                          rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/D297690F68F4535C1EEA34AA4421792C2944DF34.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D297690F68F4535C1EEA34AA4421792C2944DF34.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:df:3c:3b:7d:bc:de:00:2c:d0:03:a3:d3:71:ab:f2:47:16:4e:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D297690F68F4535C1EEA34AA4421792C2944DF34
        Validity
            Not Before: Apr  4 15:36:16 2024 GMT
            Not After : Apr  3 15:41:16 2025 GMT
        Subject: CN=20905DCF4AD6FB475A18A508475C28920629F252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:58:d9:ea:64:4f:9b:7e:d4:9c:ec:ab:4e:5b:
                    30:68:15:03:52:e4:01:83:9b:e7:7f:e5:d5:61:de:
                    af:8b:cb:c5:46:bd:8d:e7:8e:cc:2e:56:36:96:f6:
                    53:82:4d:c9:5f:c8:d3:9e:18:fc:df:57:7a:1e:4d:
                    49:19:8e:7f:de:bc:65:39:0f:bd:ff:50:b8:db:42:
                    a4:0e:81:1a:40:e9:36:ae:20:2a:0f:7e:f5:be:e4:
                    9d:f0:ae:47:4e:31:da:8b:75:91:62:d5:e5:9d:a6:
                    20:8c:32:59:48:f9:fa:d0:1b:8e:41:b6:08:07:d6:
                    a0:3f:d7:7e:c9:3d:54:30:a5:6f:eb:e4:57:9c:80:
                    b3:23:bc:c6:2e:f2:ad:5e:70:1e:cd:d6:ad:fa:a6:
                    ef:a3:e1:9c:b2:ff:9f:82:f1:4b:55:6a:9c:c8:83:
                    3a:82:2b:78:fa:0b:67:22:15:88:55:72:1f:ad:2c:
                    e7:a6:7e:7d:ef:97:4d:70:e1:86:57:47:33:b3:4b:
                    18:fd:2b:07:0f:da:39:09:98:88:cd:2a:ee:d1:eb:
                    6f:b0:bc:63:f2:f3:bd:14:f8:03:af:66:41:b3:98:
                    6d:45:56:d1:f6:27:6a:2c:98:58:d3:18:ce:14:ea:
                    a2:cb:3f:cd:55:50:db:10:02:2c:8f:46:42:5d:47:
                    86:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:90:5D:CF:4A:D6:FB:47:5A:18:A5:08:47:5C:28:92:06:29:F2:52
            X509v3 Authority Key Identifier:
                keyid:D2:97:69:0F:68:F4:53:5C:1E:EA:34:AA:44:21:79:2C:29:44:DF:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/D297690F68F4535C1EEA34AA4421792C2944DF34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D297690F68F4535C1EEA34AA4421792C2944DF34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/3230302e3230312e3132382e302f31392d3234203d3e203131343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.201.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a2:fa:31:99:f6:ca:68:d4:f3:25:e6:e8:29:8f:5c:d4:f9:0a:
         4d:89:b8:ef:e2:e8:3c:a3:c5:17:9e:63:38:b0:de:d6:32:1e:
         bc:b9:1e:20:52:09:02:5f:2f:99:8b:6e:8e:29:99:83:e6:dd:
         35:19:13:7d:85:17:17:d9:9c:04:b2:1a:77:6b:bb:36:c8:27:
         a9:10:82:ab:a1:08:96:17:e4:af:3a:2b:e4:41:46:3d:60:bf:
         1c:f2:00:cd:d8:29:49:b7:66:3c:65:b4:cb:9b:ad:f6:5a:1f:
         1b:bb:a1:72:70:d4:32:99:e0:28:f2:ff:fd:80:67:66:ad:5a:
         f1:be:35:76:fb:a9:04:55:e7:5d:2f:70:42:ab:ab:c4:a4:9e:
         b0:3d:5c:f3:e3:63:09:86:9d:ad:b2:b0:45:55:c2:56:53:6f:
         57:b4:07:eb:8e:c7:04:0a:69:2c:d6:41:51:28:cc:2a:62:2f:
         82:a4:b0:2b:c9:60:35:8f:14:cb:6e:f0:7c:e2:f1:b8:79:0e:
         0e:8e:8c:0f:3f:12:7d:11:6b:2a:13:e5:c5:15:3a:68:39:cc:
         a2:d4:ab:0b:f0:9d:53:f9:ff:0e:85:91:49:fb:42:6e:ad:e4:
         8f:f4:61:32:35:0f:de:de:72:95:4a:7e:bb:7c:60:77:88:10:
         3a:fb:5c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:50:57 2024 by rpki-client on console-ams.rpki-client.org