Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3230302e33342e3231362e302f32332d3233203d3e203631363839.roa
File:                     3230302e33342e3231362e302f32332d3233203d3e203631363839.roa (raw, json)
Hash identifier:          H/uj3TX/Q8tYZ2DuSNvPAUegzqeDB6jNwraHwLPzagI=
Subject key identifier:   53:31:6E:D1:F2:4F:96:38:BE:3B:B8:19:10:AB:2E:1A:A2:F2:D0:99
Certificate issuer:       /CN=10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8
Certificate serial:       2231E0FC75170AAA22F74088C6FF0251462D2980
Authority key identifier: 10:AE:8C:BC:A0:92:BB:DA:E3:C0:6D:F9:94:1E:4C:00:AB:06:56:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3230302e33342e3231362e302f32332d3233203d3e203631363839.roa
Signing time:             Fri 23 Aug 2024 19:50:22 +0000
ROA not before:           Fri 23 Aug 2024 19:45:22 +0000
ROA not after:            Fri 22 Aug 2025 19:50:22 +0000
asID:                     61689
IP address blocks:        200.34.216.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.crl
                          rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:18:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:31:e0:fc:75:17:0a:aa:22:f7:40:88:c6:ff:02:51:46:2d:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8
        Validity
            Not Before: Aug 23 19:45:22 2024 GMT
            Not After : Aug 22 19:50:22 2025 GMT
        Subject: CN=53316ED1F24F9638BE3BB81910AB2E1AA2F2D099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:69:ae:63:fa:18:80:2c:cb:5d:1e:9c:1b:db:
                    fc:f8:06:1f:63:0e:1b:88:b0:f4:67:b1:7f:c2:95:
                    4a:f4:3c:a2:d8:94:6f:1e:60:0c:28:39:a2:93:3d:
                    9e:ca:1c:9f:ee:e9:fb:94:b4:48:c6:64:1b:0e:17:
                    4c:fe:23:a2:39:76:4c:b2:db:e1:6b:94:cc:41:2c:
                    ac:3c:eb:80:1b:fe:4e:ed:da:ce:48:76:1f:e1:53:
                    cf:1b:b9:0b:f3:c4:e0:17:9f:ef:c5:56:b0:80:74:
                    85:1d:a2:ac:da:0a:8a:7c:d6:50:67:a0:3f:3f:d7:
                    20:18:54:ad:df:78:a4:e7:f4:8a:e7:bb:d6:e5:f4:
                    26:64:5f:e2:8e:36:e1:fd:87:72:05:60:a4:15:66:
                    da:0a:84:20:62:4e:9c:fc:83:a5:3e:bb:76:96:6e:
                    31:8c:72:29:7a:cc:8e:61:df:1b:9a:0b:d1:5d:be:
                    3f:fa:10:f2:14:e6:d0:9d:c4:4e:72:bf:59:6d:36:
                    f1:50:be:bc:1c:19:d8:f1:5a:03:23:d5:95:ab:c4:
                    2f:ba:89:3f:0d:dd:80:0c:32:ff:a3:d6:93:1b:a5:
                    70:0a:2b:c1:98:2e:b9:e8:cc:31:bb:12:92:51:0e:
                    20:e7:35:0e:94:d2:d1:2f:b4:f7:3e:20:4f:21:7f:
                    53:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:31:6E:D1:F2:4F:96:38:BE:3B:B8:19:10:AB:2E:1A:A2:F2:D0:99
            X509v3 Authority Key Identifier:
                keyid:10:AE:8C:BC:A0:92:BB:DA:E3:C0:6D:F9:94:1E:4C:00:AB:06:56:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3230302e33342e3231362e302f32332d3233203d3e203631363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.34.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:47:e6:94:a2:20:96:03:9c:71:a7:6a:54:d1:1d:06:6d:76:
         e9:53:bd:05:96:ec:14:06:fe:6c:9c:e8:76:98:f6:95:68:4f:
         54:cb:5f:6f:ad:24:35:38:c6:06:de:d5:69:32:4e:46:ba:ed:
         20:c9:fa:8f:dc:ae:d1:fc:1c:74:08:4c:80:fd:0a:71:2a:b8:
         77:4f:33:25:3f:fe:23:36:d8:22:18:e3:fd:1a:4c:29:22:23:
         bb:e4:65:4a:a3:97:dd:79:e9:de:f7:08:43:8b:7b:9f:07:51:
         7d:96:6e:57:88:75:d0:09:00:ac:ad:aa:df:c8:4c:29:78:a4:
         72:9b:bf:c7:98:d6:5d:15:6b:46:60:6b:59:cd:ba:df:db:f1:
         3b:96:37:e3:d9:2d:59:43:76:5a:c9:a5:8d:fe:a3:53:4e:dc:
         dd:9e:ba:03:23:59:5c:fb:38:c0:5d:3a:64:6b:00:88:83:ed:
         ca:b4:5d:e9:56:f2:af:7c:7b:5e:63:93:7b:00:b6:59:6c:ee:
         20:94:d6:52:40:1d:a2:b3:87:c2:d4:67:d5:23:e3:bb:a0:f5:
         f9:6b:26:e1:bc:5b:eb:00:96:c0:66:49:2f:ed:e2:3d:25:31:
         0d:d8:bd:bc:c3:dc:bd:9b:ea:44:32:b4:8a:b3:e6:ff:c6:02:
         af:f0:0a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:34:01 2024 by rpki-client on console-ams.rpki-client.org