Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3230302e33342e3231372e302f32342d3234203d3e203631363839.roa
File:                     3230302e33342e3231372e302f32342d3234203d3e203631363839.roa (raw, json)
Hash identifier:          OnsJdtNCt/SJUE1BsO5/6EMrT1p8mGm53H1iB6g+Nck=
Subject key identifier:   EF:4A:02:A2:4D:A1:87:B9:DD:48:02:1C:55:3A:DE:9F:65:55:9D:79
Certificate issuer:       /CN=10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8
Certificate serial:       12135BD78327BB4C7FB3429463CE58A9FFA6AEF6
Authority key identifier: 10:AE:8C:BC:A0:92:BB:DA:E3:C0:6D:F9:94:1E:4C:00:AB:06:56:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3230302e33342e3231372e302f32342d3234203d3e203631363839.roa
Signing time:             Fri 23 Aug 2024 19:50:41 +0000
ROA not before:           Fri 23 Aug 2024 19:45:41 +0000
ROA not after:            Fri 22 Aug 2025 19:50:41 +0000
asID:                     61689
IP address blocks:        200.34.217.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.crl
                          rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:18:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:13:5b:d7:83:27:bb:4c:7f:b3:42:94:63:ce:58:a9:ff:a6:ae:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8
        Validity
            Not Before: Aug 23 19:45:41 2024 GMT
            Not After : Aug 22 19:50:41 2025 GMT
        Subject: CN=EF4A02A24DA187B9DD48021C553ADE9F65559D79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:ef:28:13:16:d6:f0:27:17:7d:c1:3f:c5:3f:
                    4e:4e:e9:0c:5e:0c:ae:89:57:2e:6c:a4:87:e9:4c:
                    bd:40:86:12:33:ef:61:af:be:0e:0c:ce:70:71:31:
                    7c:7c:88:22:93:b3:89:a7:c4:b1:44:3e:50:37:a6:
                    d7:4e:dc:cb:c8:a2:ec:1d:ea:a9:f1:22:2d:02:a1:
                    08:3a:47:d0:eb:90:2f:73:c2:41:f2:cd:8f:48:a4:
                    1e:d1:17:d3:26:8d:97:d3:0d:6d:6a:87:1a:b5:b7:
                    99:57:2f:0a:c5:dd:0d:c8:14:43:d3:b0:0c:bb:77:
                    e7:5e:98:fb:a3:7f:c0:3a:13:54:56:02:26:5d:00:
                    f3:16:fc:e8:98:b1:16:b1:24:14:76:b3:66:24:c2:
                    05:7d:e4:c6:10:1c:1b:f1:03:2f:0b:ad:db:6c:ba:
                    69:9a:11:b2:21:b3:96:64:f1:8c:34:50:2f:0e:78:
                    3d:17:e5:3a:48:4a:f2:b9:d0:12:94:ee:bb:81:eb:
                    55:b7:53:d7:3e:5e:ef:4e:3c:94:9c:78:92:38:6a:
                    a0:04:1c:f5:24:cc:95:bb:33:09:f4:01:56:a0:cc:
                    21:9a:35:d4:c9:0c:d0:f5:ad:ec:cf:aa:7d:f8:e0:
                    81:99:85:75:40:7d:1c:92:87:3a:4e:eb:68:3c:a9:
                    78:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:4A:02:A2:4D:A1:87:B9:DD:48:02:1C:55:3A:DE:9F:65:55:9D:79
            X509v3 Authority Key Identifier:
                keyid:10:AE:8C:BC:A0:92:BB:DA:E3:C0:6D:F9:94:1E:4C:00:AB:06:56:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3230302e33342e3231372e302f32342d3234203d3e203631363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.34.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:9c:6d:61:99:43:88:6d:5d:0a:1e:6d:38:57:54:34:17:ec:
         25:8d:ec:aa:c2:61:62:14:fd:85:8c:d8:1b:06:f9:4c:79:cd:
         b9:67:fb:05:1d:27:da:f3:eb:1d:48:81:2b:c2:b9:00:bf:88:
         18:3f:9c:c2:09:d6:93:a1:3e:55:c6:96:f1:b9:86:0a:66:a3:
         24:cb:49:2d:f2:c6:9b:fc:59:e0:0a:1e:46:fc:4a:89:0e:44:
         b2:4b:ef:b1:3c:ef:46:05:13:99:33:ae:8f:5c:6b:55:64:6d:
         0f:2b:c5:08:5b:77:82:df:3b:95:2f:b8:5a:17:9e:2d:bc:c0:
         fa:95:32:a8:f9:67:e6:27:99:4e:e9:6b:09:ce:34:89:89:ee:
         84:66:cd:02:a6:5a:12:9f:16:61:48:d7:bd:d8:d5:77:20:1b:
         a7:2d:74:5e:34:83:16:d5:04:c2:bb:de:a6:a7:91:72:11:dc:
         ba:a7:12:9a:62:00:ff:c5:a0:85:9c:0d:38:04:3a:c6:38:07:
         7a:59:04:56:1a:9b:1c:5e:11:55:c3:ad:12:9f:52:1c:90:b8:
         d5:3c:d4:0c:bd:1e:b5:ff:04:af:f7:1b:f5:ae:62:2b:3f:6e:
         e9:fc:06:a5:2c:35:2f:c3:1f:03:c3:65:c0:06:ce:e8:06:1a:
         e3:36:dc:be
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUEhNb14Mnu0x/s0KUY85Yqf+mrvYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTBBRThDQkNBMDkyQkJEQUUzQzA2REY5OTQxRTRDMDBB
QjA2NTZGODAeFw0yNDA4MjMxOTQ1NDFaFw0yNTA4MjIxOTUwNDFaMDMxMTAvBgNV
BAMTKEVGNEEwMkEyNERBMTg3QjlERDQ4MDIxQzU1M0FERTlGNjU1NTlENzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDz7ygTFtbwJxd9wT/FP05O6Qxe
DK6JVy5spIfpTL1AhhIz72Gvvg4MznBxMXx8iCKTs4mnxLFEPlA3ptdO3MvIouwd
6qnxIi0CoQg6R9DrkC9zwkHyzY9IpB7RF9MmjZfTDW1qhxq1t5lXLwrF3Q3IFEPT
sAy7d+demPujf8A6E1RWAiZdAPMW/OiYsRaxJBR2s2YkwgV95MYQHBvxAy8Lrdts
ummaEbIhs5Zk8Yw0UC8OeD0X5TpISvK50BKU7ruB61W3U9c+Xu9OPJSceJI4aqAE
HPUkzJW7Mwn0AVagzCGaNdTJDND1rezPqn344IGZhXVAfRyShzpO62g8qXgRAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU70oCok2hh7ndSAIcVTren2VVnXkwHwYDVR0j
BBgwFoAUEK6MvKCSu9rjwG35lB5MAKsGVvgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODVud3A5c1BMdEwyNWlFTDFnNFIyZDlSenNtemtSVkNHM1d0ZXJFS1py
WHUvMC8xMEFFOENCQ0EwOTJCQkRBRTNDMDZERjk5NDFFNEMwMEFCMDY1NkY4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEwQUU4Q0JDQTA5MkJCREFF
M0MwNkRGOTk0MUU0QzAwQUIwNjU2RjguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg1bndwOXNQTHRMMjVpRUwxZzRSMmQ5UnpzbXprUlZDRzNXdGVyRUtaclh1LzAv
MzIzMDMwMmUzMzM0MmUzMjMxMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMx
MzYzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAyCLZMA0GCSqGSIb3DQEBCwUAA4IBAQBPnG1hmUOI
bV0KHm04V1Q0F+wljeyqwmFiFP2FjNgbBvlMec25Z/sFHSfa8+sdSIErwrkAv4gY
P5zCCdaToT5VxpbxuYYKZqMky0kt8sab/FngCh5G/EqJDkSyS++xPO9GBROZM66P
XGtVZG0PK8UIW3eC3zuVL7haF54tvMD6lTKo+WfmJ5lO6WsJzjSJie6EZs0CploS
nxZhSNe92NV3IBunLXReNIMW1QTCu96mp5FyEdy6pxKaYgD/xaCFnA04BDrGOAd6
WQRWGpscXhFVw60Sn1IckLjVPNQMvR61/wSv9xv1rmIrP27p/AalLDUvwx8Dw2XA
Bs7oBhrjNty+
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:34:01 2024 by rpki-client on console-ams.rpki-client.org