Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7b4xA1A8pze1H9tYPN8Zpj5G5KBin9DFWFLRRt8d5K6c/2/3230302e3136302e3230382e302f32302d3234203d3e203233323839.roa
File:                     3230302e3136302e3230382e302f32302d3234203d3e203233323839.roa (raw, json)
Hash identifier:          +reccfPrNiM8191HLzRpGm0Fi9c78iWxkSQR12XUpck=
Subject key identifier:   D5:90:F8:BC:D9:76:5C:A2:99:FB:84:BC:AC:05:D2:43:03:E0:9E:DE
Certificate issuer:       /CN=14C031B5DB12666C2E130FC76F30D7C942EE390F
Certificate serial:       3196665E639A90E26DB565DCAA8619F72D69D836
Authority key identifier: 14:C0:31:B5:DB:12:66:6C:2E:13:0F:C7:6F:30:D7:C9:42:EE:39:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14C031B5DB12666C2E130FC76F30D7C942EE390F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7b4xA1A8pze1H9tYPN8Zpj5G5KBin9DFWFLRRt8d5K6c/2/3230302e3136302e3230382e302f32302d3234203d3e203233323839.roa
Signing time:             Thu 04 Apr 2024 06:43:38 +0000
ROA not before:           Thu 04 Apr 2024 06:38:38 +0000
ROA not after:            Thu 03 Apr 2025 06:43:38 +0000
asID:                     23289
IP address blocks:        200.160.208.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7b4xA1A8pze1H9tYPN8Zpj5G5KBin9DFWFLRRt8d5K6c/2/14C031B5DB12666C2E130FC76F30D7C942EE390F.crl
                          rsync://rpki-repo.registro.br/repo/7b4xA1A8pze1H9tYPN8Zpj5G5KBin9DFWFLRRt8d5K6c/2/14C031B5DB12666C2E130FC76F30D7C942EE390F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14C031B5DB12666C2E130FC76F30D7C942EE390F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:96:66:5e:63:9a:90:e2:6d:b5:65:dc:aa:86:19:f7:2d:69:d8:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14C031B5DB12666C2E130FC76F30D7C942EE390F
        Validity
            Not Before: Apr  4 06:38:38 2024 GMT
            Not After : Apr  3 06:43:38 2025 GMT
        Subject: CN=D590F8BCD9765CA299FB84BCAC05D24303E09EDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5f:42:44:22:be:b0:ef:01:58:3d:a1:81:d4:
                    28:63:2f:c1:4a:45:64:f6:40:6b:58:e4:e9:b2:c2:
                    85:b3:9b:b8:f2:12:14:aa:48:c4:99:44:61:05:c9:
                    50:c6:36:16:ab:a5:8a:0c:58:6a:0d:f7:bd:cf:64:
                    73:b5:ec:51:c7:0e:30:ca:1f:a0:32:c5:79:8c:3b:
                    d8:9f:51:38:44:0f:f1:81:db:5c:bb:a8:b0:d1:d3:
                    f3:5d:13:ec:e1:e7:2b:cf:c7:75:bc:94:47:d7:1d:
                    d3:3b:31:bc:38:91:9a:cd:fc:54:02:d9:b5:a6:47:
                    ee:ad:85:ea:10:31:49:9e:e8:24:1f:6b:22:b8:9c:
                    1e:16:fa:f6:bb:e6:aa:9b:1b:90:02:e2:7d:92:e0:
                    0b:72:fd:ee:1c:2b:58:67:a1:4a:28:39:b8:28:2b:
                    6e:a4:e6:39:07:70:ed:a7:5c:b5:33:e5:df:ee:ef:
                    bb:c6:4a:07:d9:3d:fc:be:7b:4c:bc:0c:aa:78:2a:
                    74:d6:4f:70:31:6e:3b:09:67:2d:c7:8e:75:a6:81:
                    f4:95:b8:f1:86:0b:1f:d6:c5:88:c1:71:e1:ef:46:
                    62:dc:e8:29:d6:51:87:2c:ba:ac:15:bb:4f:46:81:
                    ce:d5:36:b2:5d:fa:59:65:08:fa:91:08:59:e2:61:
                    db:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:90:F8:BC:D9:76:5C:A2:99:FB:84:BC:AC:05:D2:43:03:E0:9E:DE
            X509v3 Authority Key Identifier:
                keyid:14:C0:31:B5:DB:12:66:6C:2E:13:0F:C7:6F:30:D7:C9:42:EE:39:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7b4xA1A8pze1H9tYPN8Zpj5G5KBin9DFWFLRRt8d5K6c/2/14C031B5DB12666C2E130FC76F30D7C942EE390F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14C031B5DB12666C2E130FC76F30D7C942EE390F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7b4xA1A8pze1H9tYPN8Zpj5G5KBin9DFWFLRRt8d5K6c/2/3230302e3136302e3230382e302f32302d3234203d3e203233323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.160.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         cd:ad:3e:f3:6c:c9:d6:e1:87:e7:24:30:e0:25:be:dd:e6:3e:
         48:b1:95:56:72:2d:43:19:2f:d0:79:71:dd:ec:04:12:1a:6e:
         bd:0a:27:69:b8:f5:ce:93:26:8a:94:0d:62:7a:64:6e:0c:b0:
         e5:b8:ba:cc:1c:df:69:25:72:78:2c:81:a6:4f:db:3d:c7:0e:
         6f:e8:a2:96:55:cd:90:1f:d8:01:a8:ef:2d:31:f4:76:8e:1d:
         2f:00:63:fb:54:e1:3a:68:db:e7:25:a8:0d:cd:f3:ca:22:fc:
         98:0d:be:23:e3:da:e8:e9:b6:63:00:bf:93:50:c9:6e:df:58:
         80:ae:b6:b8:9a:1c:00:1f:ca:5c:a5:3d:f6:d9:46:29:ec:5b:
         45:f8:18:b0:d1:ed:c0:c0:f6:c3:68:2d:97:fb:64:26:34:12:
         8d:10:c9:0b:62:cb:54:ae:9d:11:33:93:06:1d:e9:55:83:62:
         0d:04:bb:6a:98:0c:f2:e7:0b:a8:ec:02:71:e5:2b:75:9e:88:
         e9:d3:fe:d1:84:0d:8f:18:2e:61:c9:08:bf:de:5c:f6:99:8c:
         2c:65:11:cc:38:a7:6a:e2:bf:5d:1e:6b:dc:81:e9:51:bc:a1:
         e4:b2:d2:0b:3e:16:18:87:b4:c1:d1:c1:57:a6:65:6d:cc:ba:
         fc:90:1a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 06:48:52 2024 by rpki-client on console-fra.rpki-client.org