Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/3230302e3131352e3130342e302f32342d3234203d3e20323730323636.roa
File:                     3230302e3131352e3130342e302f32342d3234203d3e20323730323636.roa (raw, json)
Hash identifier:          N+HK1uz+xWWiTvmqkmcYZ2a1WsFJomph4pv/MbBOROM=
Subject key identifier:   6F:BF:CB:2D:EE:62:8C:58:1C:1D:B9:30:A0:EC:CC:89:17:21:91:88
Certificate issuer:       /CN=870ECD744DA9DDF67A2979EDD029C3D444043EF8
Certificate serial:       5730F2F2CB9553C336F4D39E4590EFF8EFE3E2B8
Authority key identifier: 87:0E:CD:74:4D:A9:DD:F6:7A:29:79:ED:D0:29:C3:D4:44:04:3E:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/3230302e3131352e3130342e302f32342d3234203d3e20323730323636.roa
Signing time:             Thu 04 Apr 2024 23:09:45 +0000
ROA not before:           Thu 04 Apr 2024 23:04:45 +0000
ROA not after:            Thu 03 Apr 2025 23:09:45 +0000
asID:                     270266
IP address blocks:        200.115.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.crl
                          rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 03:06:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:30:f2:f2:cb:95:53:c3:36:f4:d3:9e:45:90:ef:f8:ef:e3:e2:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870ECD744DA9DDF67A2979EDD029C3D444043EF8
        Validity
            Not Before: Apr  4 23:04:45 2024 GMT
            Not After : Apr  3 23:09:45 2025 GMT
        Subject: CN=6FBFCB2DEE628C581C1DB930A0ECCC8917219188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9d:e6:55:83:40:87:97:44:42:4a:af:38:30:
                    a8:6e:92:c7:7e:22:7d:37:a5:45:bf:d2:78:2c:fb:
                    8c:92:71:f3:4c:e0:53:04:cb:0b:6a:1f:d5:f6:f0:
                    3f:f5:eb:1c:83:c5:03:f6:fb:72:f2:cf:fb:00:ef:
                    aa:d9:c3:9f:f6:23:76:54:1c:77:3e:0c:a5:d1:5c:
                    d3:d7:65:50:e7:35:33:ee:aa:b8:72:2c:2d:8d:c9:
                    a1:55:7b:96:54:af:04:b2:93:5b:0a:4a:5d:e5:ed:
                    8f:a0:88:9a:26:21:a7:c1:9c:be:7a:1d:52:6d:98:
                    e9:cf:af:ac:1d:77:9c:14:4a:18:eb:98:14:df:4b:
                    1d:de:a4:4a:63:0d:3a:6e:57:0d:cd:fb:78:d2:ab:
                    2b:3c:d7:f6:e7:55:5d:ad:ca:40:fa:fa:9e:2d:a2:
                    5f:b2:d2:09:5a:de:79:ab:8e:4c:df:b3:88:22:5f:
                    fe:05:56:94:20:e2:e8:cb:8c:04:94:12:eb:49:ed:
                    6a:af:5a:1b:a1:51:86:70:1f:65:52:ba:84:c7:cd:
                    30:af:31:2d:ee:3d:c9:45:49:5f:e9:47:ce:69:f1:
                    8b:78:c0:f2:16:74:e0:d1:74:7a:4d:60:c5:05:57:
                    b3:f2:e8:bd:d9:07:0b:9f:0c:50:5f:da:a6:3d:3c:
                    36:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:BF:CB:2D:EE:62:8C:58:1C:1D:B9:30:A0:EC:CC:89:17:21:91:88
            X509v3 Authority Key Identifier:
                keyid:87:0E:CD:74:4D:A9:DD:F6:7A:29:79:ED:D0:29:C3:D4:44:04:3E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/3230302e3131352e3130342e302f32342d3234203d3e20323730323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:96:0b:5b:ff:05:1a:59:0f:43:16:4c:8a:40:30:4d:da:fb:
         e5:46:9f:1d:97:52:11:32:d1:9f:88:ab:7a:1b:67:ef:4d:b8:
         11:0b:57:f4:2f:b8:90:9e:de:6d:8c:73:a3:5c:1e:93:38:6d:
         d3:04:f7:7e:11:83:aa:7f:c8:3c:c2:ad:53:ae:27:0e:14:cf:
         8d:6c:29:03:f8:3f:c0:ab:67:34:85:4a:f2:7d:5f:58:92:e7:
         a1:bd:f0:55:dd:e1:c4:27:0c:bd:22:df:b5:d9:dc:7e:a8:a3:
         c8:67:b0:25:85:4a:24:11:57:23:a3:cb:95:af:bf:a5:64:89:
         9d:3c:81:2c:ed:d2:7e:fb:5e:01:4d:2c:60:c2:2b:62:e1:9a:
         26:a0:60:6f:08:8f:c0:69:de:23:a5:6a:01:87:cb:2b:26:77:
         27:24:10:73:6c:af:ae:6a:ad:90:2b:0b:54:b3:d7:f1:f0:3c:
         69:df:a5:d0:5f:52:ba:f2:09:0c:1b:68:82:e9:86:4d:4f:b4:
         0c:6f:19:f0:62:bf:61:53:48:f6:1d:d2:f1:92:3a:f5:0b:a9:
         2d:b8:79:ef:b0:04:f1:cd:45:27:c4:e6:70:68:49:fd:56:26:
         ed:da:9c:97:db:72:3e:34:a6:a7:6b:f9:d8:6b:d3:58:88:c9:
         3b:87:02:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:28:38 2024 by rpki-client on console-ams.rpki-client.org