Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/3230302e3131352e3130362e302f32342d3234203d3e20323730323636.roa
File:                     3230302e3131352e3130362e302f32342d3234203d3e20323730323636.roa (raw, json)
Hash identifier:          XJCEyIEQWMjHpigdqMB1HXs1ay1vgtS6ww3ORGhOt6Q=
Subject key identifier:   A4:30:04:7E:92:94:71:5F:BF:8A:76:23:EC:9A:F2:DB:4C:3C:63:69
Certificate issuer:       /CN=B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4
Certificate serial:       2CB3F1BE343EDF51752DC2BE549468478BBA07D9
Authority key identifier: B2:BE:02:10:DA:61:E2:A7:7E:B0:44:5E:58:A5:0E:7D:B6:4F:06:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/3230302e3131352e3130362e302f32342d3234203d3e20323730323636.roa
Signing time:             Tue 06 Aug 2024 13:39:51 +0000
ROA not before:           Tue 06 Aug 2024 13:34:51 +0000
ROA not after:            Tue 05 Aug 2025 13:39:51 +0000
asID:                     270266
IP address blocks:        200.115.106.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4.crl
                          rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 07:21:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:b3:f1:be:34:3e:df:51:75:2d:c2:be:54:94:68:47:8b:ba:07:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4
        Validity
            Not Before: Aug  6 13:34:51 2024 GMT
            Not After : Aug  5 13:39:51 2025 GMT
        Subject: CN=A430047E9294715FBF8A7623EC9AF2DB4C3C6369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b2:ad:50:73:85:1f:d8:ec:c0:37:37:c6:0c:
                    52:93:e5:54:ab:80:15:6f:b1:f7:7e:bd:f0:1e:90:
                    30:e0:16:2a:f3:4a:59:6f:17:35:a7:08:6d:75:34:
                    37:79:f6:1e:2e:75:a3:ab:b9:d7:8b:54:88:6f:f9:
                    0f:4f:da:0e:02:82:f7:c5:4e:24:1c:83:1c:11:60:
                    3a:e3:8f:df:03:6d:55:94:19:48:09:99:95:e9:5b:
                    a3:2a:47:f9:eb:e0:be:2e:27:7a:d2:d9:62:8a:9d:
                    3a:48:31:b7:2f:cf:1e:0e:a2:60:c3:9d:71:0f:db:
                    0c:53:9f:e3:23:db:b3:5d:1e:d9:f5:7a:eb:cb:ae:
                    22:14:6a:2b:bf:cd:f1:78:d5:d2:1f:3c:04:61:3d:
                    b3:78:34:d4:a0:f4:52:19:8c:bf:e7:2d:1a:81:42:
                    13:5b:f3:75:a3:9e:62:fe:d9:83:1c:56:63:67:49:
                    e4:bd:13:d6:e2:f3:55:ab:55:0c:70:0e:cf:8f:ae:
                    27:d8:a2:dd:12:d8:17:53:89:9d:65:aa:95:7b:b9:
                    d3:28:62:47:ad:74:ae:91:55:e6:36:ad:08:3a:c8:
                    bd:67:2b:1c:39:a9:c4:00:85:f7:f2:e7:c3:28:6d:
                    9a:01:22:db:9c:8a:0c:e6:ba:ef:ca:3b:df:bd:35:
                    42:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:30:04:7E:92:94:71:5F:BF:8A:76:23:EC:9A:F2:DB:4C:3C:63:69
            X509v3 Authority Key Identifier:
                keyid:B2:BE:02:10:DA:61:E2:A7:7E:B0:44:5E:58:A5:0E:7D:B6:4F:06:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2BE0210DA61E2A77EB0445E58A50E7DB64F06C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/3230302e3131352e3130362e302f32342d3234203d3e20323730323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e6:e9:ef:fd:82:a5:27:ab:dd:c6:91:2f:d9:fd:10:24:e5:08:
         56:50:26:12:fd:54:83:18:14:8c:16:98:13:a6:0c:27:31:f0:
         c9:47:5a:82:bf:dc:1c:4b:09:64:0a:24:06:6f:9f:6a:ef:3e:
         86:50:06:01:1b:1a:fe:60:9e:f6:48:81:4d:f4:e2:75:37:d4:
         36:5c:ca:52:97:3f:f0:4f:c0:a5:4f:69:cb:5b:dd:4b:15:00:
         a6:b2:ba:5f:d1:38:34:2a:bf:8a:1d:76:0e:41:e2:f6:02:0d:
         35:4e:a0:65:73:b1:8e:0e:0f:06:86:60:23:dc:e3:59:77:bc:
         bf:46:41:e2:5d:96:b1:ab:c3:38:21:95:a9:e0:9c:fb:25:6c:
         18:af:59:34:ef:b8:5d:0e:5e:b8:bb:3b:0f:46:db:81:f6:77:
         41:91:c8:0f:a8:22:a4:8b:a0:ce:c9:dc:a4:59:fc:a2:44:2c:
         22:8a:f0:60:44:2d:e0:57:c1:d1:36:09:3e:d8:c2:ce:79:be:
         2a:f1:93:ae:02:8f:a4:83:0c:bb:ce:95:0a:54:27:8b:b3:4d:
         4c:fc:4e:68:e3:28:f8:ca:cd:a3:c0:26:4d:87:05:99:5a:ff:
         7c:81:ba:fd:45:d9:3d:7d:6e:f0:95:d5:3d:05:b3:b9:f0:c5:
         80:aa:2a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 06:03:27 2024 by rpki-client on console-fra.rpki-client.org