Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/3230302e37312e36342e302f32322d3232203d3e20323636313931.roa
File:                     3230302e37312e36342e302f32322d3232203d3e20323636313931.roa (raw, json)
Hash identifier:          OA7Z/Ty5OaZfUpDYacriGaQxhahKy3iBBvUeOeRzCwM=
Subject key identifier:   D1:52:4B:F8:FB:AD:51:36:DB:3C:F2:A4:F2:DE:F4:66:C3:51:F0:D1
Certificate issuer:       /CN=221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA
Certificate serial:       3DE8B86AD43442FB5FDC7D44BDC44B4C522B8B73
Authority key identifier: 22:13:38:E9:0C:9C:D3:7D:ED:85:B4:40:9F:CA:B7:BF:4F:5F:E3:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/3230302e37312e36342e302f32322d3232203d3e20323636313931.roa
Signing time:             Wed 03 Apr 2024 18:30:54 +0000
ROA not before:           Wed 03 Apr 2024 18:25:54 +0000
ROA not after:            Wed 02 Apr 2025 18:30:54 +0000
asID:                     266191
IP address blocks:        200.71.64.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.crl
                          rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 18:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:e8:b8:6a:d4:34:42:fb:5f:dc:7d:44:bd:c4:4b:4c:52:2b:8b:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA
        Validity
            Not Before: Apr  3 18:25:54 2024 GMT
            Not After : Apr  2 18:30:54 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:44:b1:67:b8:39:ce:c0:db:ae:76:90:c4:6a:
                    84:43:5a:d9:24:60:5c:99:88:66:2c:19:9a:19:24:
                    c1:e3:fe:91:8d:d9:e4:7c:fc:43:2a:cd:ab:55:00:
                    e4:7b:c5:db:93:98:f3:8a:05:98:39:47:b8:4f:2a:
                    77:43:12:b1:74:2f:ae:97:14:99:0a:43:fe:ed:b3:
                    28:34:27:5e:ad:e9:6f:7d:5b:37:e1:c9:81:2c:51:
                    4f:b9:e5:6d:fe:fb:54:af:8f:7c:40:2e:77:01:3b:
                    22:75:66:62:95:b6:4c:54:29:e9:91:42:37:ef:8b:
                    cf:0f:7f:32:d8:46:7d:65:63:67:9a:05:97:f4:ae:
                    61:71:5d:de:4a:c4:0e:f6:88:d2:73:68:fb:d1:da:
                    f2:7e:8a:6e:27:13:fa:7b:70:de:1a:2b:15:5e:6b:
                    4a:43:96:f6:82:15:26:69:ee:c4:6c:75:32:16:ad:
                    e1:60:fd:14:8e:98:44:62:08:20:c5:ec:54:27:9d:
                    18:90:31:3b:6c:62:77:c9:eb:1a:75:42:2c:f0:7f:
                    39:9a:1b:1d:8a:ad:9b:d7:8b:e7:4f:83:f3:05:a0:
                    ce:bd:17:97:99:87:2e:3d:d9:bc:94:ea:82:1e:bd:
                    83:9b:06:5e:48:15:12:fd:e1:da:b5:31:a2:0b:51:
                    3a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:52:4B:F8:FB:AD:51:36:DB:3C:F2:A4:F2:DE:F4:66:C3:51:F0:D1
            X509v3 Authority Key Identifier:
                keyid:22:13:38:E9:0C:9C:D3:7D:ED:85:B4:40:9F:CA:B7:BF:4F:5F:E3:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/3230302e37312e36342e302f32322d3232203d3e20323636313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:ff:05:90:cc:d8:40:c4:d4:8c:52:08:e2:0a:d9:f5:ce:95:
         4b:c5:7e:00:d4:25:ea:9e:a3:05:08:c0:21:78:00:f8:2e:2f:
         d2:15:2b:10:18:b1:4c:a3:9e:23:f6:9e:a5:f5:85:06:00:36:
         0e:fb:a6:23:97:32:b9:ba:15:70:c4:0e:2f:e0:0e:55:2f:96:
         69:41:46:76:7e:42:fa:fe:b3:f5:03:0e:7c:8b:96:74:43:ec:
         61:88:bd:fd:58:81:fc:9f:7a:d3:e2:d8:7d:ff:16:9f:80:62:
         cc:76:4e:ff:26:f5:73:10:d5:85:5b:50:03:50:d6:31:ee:16:
         b0:e2:9f:eb:49:79:68:d7:28:77:cf:94:e3:ef:0b:c3:b8:b3:
         49:f5:8e:15:44:ae:59:28:39:82:a1:78:d2:54:97:c8:71:20:
         98:c9:a8:1c:e3:67:cb:59:c9:17:db:96:1f:3d:05:24:bb:5e:
         c4:b6:ac:e3:02:e6:c9:a4:c9:ac:1c:f5:d1:8c:85:b4:5d:be:
         01:91:fc:ae:96:7c:f3:77:8a:13:1e:0c:df:2c:95:82:01:a7:
         d0:f6:19:02:2f:b5:b6:1a:d7:35:04:21:f5:c4:a2:80:d9:f8:
         a8:e2:61:ae:ca:9d:7a:3f:a1:39:be:2d:34:ae:db:04:1f:6f:
         3e:4f:db:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:46:34 2024 by rpki-client on console-fra.rpki-client.org