Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3230302e3232302e3134362e302f32342d3234203d3e203238353736.roa
File:                     3230302e3232302e3134362e302f32342d3234203d3e203238353736.roa (raw, json)
Hash identifier:          awS1N6qoKfNRfDDOIvOdwX1y6Rw/mIIXyF7q/feVRDY=
Subject key identifier:   61:3A:4B:A2:24:1B:38:6D:89:CF:57:15:5A:11:88:78:E7:4B:46:C4
Certificate issuer:       /CN=BD1E87C8514998E362292741C70F693178FDD20E
Certificate serial:       19B1F51DB437F999230CF3E28F812AC2A103A6E8
Authority key identifier: BD:1E:87:C8:51:49:98:E3:62:29:27:41:C7:0F:69:31:78:FD:D2:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3230302e3232302e3134362e302f32342d3234203d3e203238353736.roa
Signing time:             Fri 24 May 2024 22:23:31 +0000
ROA not before:           Fri 24 May 2024 22:18:31 +0000
ROA not after:            Fri 23 May 2025 22:23:31 +0000
asID:                     28576
IP address blocks:        200.220.146.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.crl
                          rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 21:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:b1:f5:1d:b4:37:f9:99:23:0c:f3:e2:8f:81:2a:c2:a1:03:a6:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD1E87C8514998E362292741C70F693178FDD20E
        Validity
            Not Before: May 24 22:18:31 2024 GMT
            Not After : May 23 22:23:31 2025 GMT
        Subject: CN=613A4BA2241B386D89CF57155A118878E74B46C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c2:62:69:97:70:3f:64:73:76:d0:bf:3c:cc:
                    ef:99:1d:3f:3d:ab:36:ea:61:02:d4:87:c6:36:9c:
                    f5:bd:48:63:8d:28:3c:33:24:b8:c1:ce:a4:ec:a0:
                    50:3b:1c:ff:18:05:e9:cc:79:bb:8b:0c:3f:32:f1:
                    e0:85:10:ed:3d:61:30:28:f0:8a:df:cd:51:5d:31:
                    49:c8:51:df:ee:88:63:61:c8:04:7d:3a:6b:34:ed:
                    ff:8c:d9:6c:7e:64:04:3f:23:7a:6d:0a:15:2e:22:
                    8b:8c:c7:ea:2d:5b:45:f7:ee:59:00:c1:54:42:83:
                    6a:e8:8f:76:4f:a7:c6:d5:ba:25:d7:dc:8e:6e:cc:
                    de:f0:39:8b:a5:11:45:d9:ac:ad:8b:8c:bd:5e:84:
                    96:b8:83:01:b8:d6:aa:6c:00:8c:cd:1c:27:8f:15:
                    54:de:4d:7c:94:0e:38:a1:57:e8:0f:c1:c6:29:55:
                    d7:d5:f9:37:73:24:c3:cc:1a:f4:89:b6:a5:9c:57:
                    ce:25:42:a6:03:62:95:76:22:dc:e4:94:06:42:e1:
                    8d:36:55:74:b7:24:06:b8:72:e2:ce:97:e3:5b:c3:
                    69:12:a1:73:8c:47:c0:80:27:90:0b:53:71:a8:bb:
                    a8:9b:ec:93:23:19:08:37:b8:8b:ef:51:a0:87:54:
                    3a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:3A:4B:A2:24:1B:38:6D:89:CF:57:15:5A:11:88:78:E7:4B:46:C4
            X509v3 Authority Key Identifier:
                keyid:BD:1E:87:C8:51:49:98:E3:62:29:27:41:C7:0F:69:31:78:FD:D2:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3230302e3232302e3134362e302f32342d3234203d3e203238353736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:aa:0d:d5:ee:35:7c:2b:8b:d8:78:b2:16:6e:41:16:af:18:
         ef:ff:39:62:7f:ad:ca:0f:35:e8:78:3f:5a:12:6d:fe:81:16:
         5a:bd:f6:91:3a:af:97:d6:2e:2b:74:76:b8:f5:2b:c1:6c:9b:
         6a:0b:79:cc:25:4f:10:5f:d7:8b:fc:15:51:81:22:e1:ae:aa:
         9e:f1:a8:a1:bd:27:1c:ec:03:f2:8f:96:f5:1d:f5:49:bb:0c:
         a5:22:74:d0:9a:69:53:c1:6e:1c:5b:2b:4b:df:25:a8:97:06:
         81:71:ef:b5:be:27:f5:d3:2d:62:1e:98:ed:3b:38:29:01:46:
         64:6f:39:50:e0:bb:0c:ab:0b:6b:7e:0f:29:17:f3:09:14:b2:
         5a:55:e4:f4:9c:6e:bb:c1:37:51:7f:73:01:39:f2:34:50:e0:
         e5:24:c7:e4:9a:f7:80:7b:c4:05:82:18:b0:5d:01:b2:e8:37:
         7f:22:12:5c:33:ae:bc:18:74:27:da:0d:37:b0:ed:7c:e1:d9:
         12:9c:2b:8a:2b:43:53:5a:34:6c:41:b1:70:3d:29:42:a1:50:
         03:eb:c9:fb:63:d1:79:66:d6:89:2a:f0:42:3e:7b:c3:7d:dc:
         55:c1:73:17:34:27:5a:fa:8f:5e:bb:dd:d7:1c:fe:74:e0:a3:
         98:2a:42:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 21:52:37 2024 by rpki-client on console-fra.rpki-client.org