Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3230302e33342e3231362e302f32342d3234203d3e203631363839.roa
File:                     3230302e33342e3231362e302f32342d3234203d3e203631363839.roa (raw, json)
Hash identifier:          1cr/LoCcb71p/8Zp/f2PzD9HosNO3nxQAvYClJl3ZQQ=
Subject key identifier:   37:E0:5B:7F:E2:52:73:20:79:46:C1:45:0F:34:E1:0A:B1:C7:29:5D
Certificate issuer:       /CN=10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8
Certificate serial:       22CDF96A8A1B499B789642B195B6DAA98DE467CB
Authority key identifier: 10:AE:8C:BC:A0:92:BB:DA:E3:C0:6D:F9:94:1E:4C:00:AB:06:56:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3230302e33342e3231362e302f32342d3234203d3e203631363839.roa
Signing time:             Fri 23 Aug 2024 19:50:31 +0000
ROA not before:           Fri 23 Aug 2024 19:45:31 +0000
ROA not after:            Fri 22 Aug 2025 19:50:31 +0000
asID:                     61689
IP address blocks:        200.34.216.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.crl
                          rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:18:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:cd:f9:6a:8a:1b:49:9b:78:96:42:b1:95:b6:da:a9:8d:e4:67:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8
        Validity
            Not Before: Aug 23 19:45:31 2024 GMT
            Not After : Aug 22 19:50:31 2025 GMT
        Subject: CN=37E05B7FE25273207946C1450F34E10AB1C7295D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:fb:65:52:4b:4d:da:ed:dd:db:3e:ba:33:95:
                    e4:e6:42:31:f9:be:2f:ab:5c:fa:37:a7:16:51:3e:
                    7c:7d:a9:03:27:b2:43:69:69:62:9b:41:72:94:7f:
                    2b:ac:33:a8:3e:61:7f:06:e3:04:a1:ba:d1:2e:51:
                    33:0d:ec:a9:f9:bd:2b:69:2d:9e:a7:f8:91:42:7d:
                    b4:c0:22:ca:96:37:8a:94:3e:e0:3c:0e:ec:75:17:
                    f3:7e:a4:57:9a:13:c6:3d:05:89:d8:68:92:7c:97:
                    c5:25:3a:64:18:21:88:82:36:67:0d:69:c8:00:09:
                    1f:f5:86:6c:2b:f9:50:af:42:f4:2e:ef:a9:e8:ba:
                    3b:15:d0:29:dd:90:f7:ac:07:fb:b9:99:75:bc:ec:
                    d4:d0:e5:51:04:68:08:5f:f3:55:79:a2:ee:2b:f9:
                    7b:53:9b:37:7f:7c:db:06:06:f0:e2:38:09:55:57:
                    af:4f:c0:76:08:2c:87:4e:11:2f:2d:16:56:17:56:
                    07:62:42:e0:12:8d:46:7c:21:95:08:c4:04:5a:81:
                    63:6d:26:4f:a5:6a:f7:c3:4d:e0:10:e6:b4:a4:81:
                    22:92:aa:33:ef:0e:67:1e:a5:ec:d1:9e:7b:8b:fe:
                    8b:58:45:44:a0:7e:31:e8:70:76:42:73:a4:f0:8a:
                    52:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:E0:5B:7F:E2:52:73:20:79:46:C1:45:0F:34:E1:0A:B1:C7:29:5D
            X509v3 Authority Key Identifier:
                keyid:10:AE:8C:BC:A0:92:BB:DA:E3:C0:6D:F9:94:1E:4C:00:AB:06:56:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3230302e33342e3231362e302f32342d3234203d3e203631363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.34.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:98:0e:31:8e:64:bd:8c:b0:e6:73:46:4a:54:df:f5:30:45:
         05:46:c8:d1:81:33:6b:68:2a:b4:51:b1:eb:84:7a:43:b3:cc:
         71:4d:be:d7:5e:fa:48:b8:04:7f:19:02:35:30:14:9f:5f:09:
         b6:bb:f8:71:62:7f:2f:2e:23:e0:51:da:57:f1:37:19:51:ab:
         c2:36:10:ca:0e:b6:46:2b:1c:16:df:04:73:fc:9c:a8:60:51:
         0a:bf:c5:ca:07:c2:8c:3b:9e:b1:6a:c5:24:ac:b9:7b:7b:32:
         01:97:34:56:17:36:c3:3d:8d:ac:fc:fc:83:0e:57:2f:2d:e8:
         b4:a9:44:ae:a3:93:a5:92:2f:85:91:14:b5:e7:2a:da:bc:1b:
         1d:f0:db:fd:5a:7f:de:c9:c4:4e:cd:f5:e2:98:88:a2:36:06:
         cd:99:85:6f:7d:5b:f4:dd:ca:a9:c6:0e:bf:b1:99:3a:6d:f5:
         e2:50:ed:fc:d2:d9:bc:bc:1a:ea:5e:fd:dc:a6:4b:13:74:67:
         44:03:aa:b5:23:5e:73:a8:c7:30:b1:a8:de:ef:ab:44:7e:5f:
         f2:5a:c5:f0:b1:38:ab:41:3c:d6:87:f1:30:66:06:c1:e2:95:
         b5:60:15:90:c4:1b:32:ea:03:95:60:96:6b:92:52:0d:b8:2c:
         45:9d:83:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:34:01 2024 by rpki-client on console-ams.rpki-client.org