Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3230302e33342e3231382e302f32332d3233203d3e203631363839.roa
File:                     3230302e33342e3231382e302f32332d3233203d3e203631363839.roa (raw, json)
Hash identifier:          GA8w4MZS98OEFSEjxpOvF3DIbIWJYYT/GDgRpv7y87U=
Subject key identifier:   72:8E:23:B2:BD:3B:23:F5:9E:35:D8:8E:AC:E7:49:7D:B7:0C:1A:62
Certificate issuer:       /CN=10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8
Certificate serial:       773232AAB3518498734097635F8ACD211076B136
Authority key identifier: 10:AE:8C:BC:A0:92:BB:DA:E3:C0:6D:F9:94:1E:4C:00:AB:06:56:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3230302e33342e3231382e302f32332d3233203d3e203631363839.roa
Signing time:             Fri 23 Aug 2024 19:50:43 +0000
ROA not before:           Fri 23 Aug 2024 19:45:43 +0000
ROA not after:            Fri 22 Aug 2025 19:50:43 +0000
asID:                     61689
IP address blocks:        200.34.218.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.crl
                          rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:32:32:aa:b3:51:84:98:73:40:97:63:5f:8a:cd:21:10:76:b1:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8
        Validity
            Not Before: Aug 23 19:45:43 2024 GMT
            Not After : Aug 22 19:50:43 2025 GMT
        Subject: CN=728E23B2BD3B23F59E35D88EACE7497DB70C1A62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:59:3f:e9:cf:32:c9:a8:25:ed:a1:70:a3:3c:
                    92:3d:a3:26:a6:da:64:2f:29:ef:08:c2:d3:06:eb:
                    0b:0b:84:89:79:f8:2f:f6:fd:a7:16:e6:71:fb:a1:
                    e2:26:90:12:90:80:02:86:99:ea:56:fd:4d:1f:4f:
                    a4:a0:00:09:9c:51:7e:59:f1:2b:d8:11:84:b9:89:
                    d4:8f:22:c0:72:00:af:60:60:91:cf:c6:84:e0:de:
                    d2:17:1d:d8:da:c4:4a:22:ae:e8:cd:08:88:6e:33:
                    8d:35:ab:62:8c:1b:0d:7b:dd:f0:f5:dc:33:97:32:
                    b3:f8:b6:04:ca:d5:4f:fb:d3:a1:dc:8a:30:5f:89:
                    a1:5c:c1:58:1e:f3:84:ce:51:58:1e:fe:00:e7:13:
                    14:61:25:69:86:c4:44:26:7c:c2:61:17:d6:a3:7b:
                    04:fa:9c:66:ca:3a:49:f0:5d:4c:64:c4:46:fa:bd:
                    6e:42:f0:61:95:39:cf:d7:6e:8b:77:cd:b2:c1:d6:
                    eb:eb:0a:ed:55:55:bb:18:88:6a:3a:99:60:42:f6:
                    4d:8f:af:73:60:bf:f0:4d:05:16:c5:4c:8e:18:16:
                    2a:4b:23:59:c8:73:71:15:50:e0:26:d8:5a:d2:d0:
                    ed:2f:ba:52:46:15:0a:49:b1:c3:ac:4f:51:8e:c5:
                    31:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:8E:23:B2:BD:3B:23:F5:9E:35:D8:8E:AC:E7:49:7D:B7:0C:1A:62
            X509v3 Authority Key Identifier:
                keyid:10:AE:8C:BC:A0:92:BB:DA:E3:C0:6D:F9:94:1E:4C:00:AB:06:56:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3230302e33342e3231382e302f32332d3233203d3e203631363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.34.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:fb:c8:d0:20:ec:76:3d:02:3a:46:b8:29:2c:30:e3:26:76:
         20:90:e6:22:98:9c:57:94:db:f0:51:e7:c7:82:ce:26:d4:df:
         36:7f:0b:a1:04:63:92:bf:21:28:5b:45:ca:56:24:c6:d3:53:
         5f:44:82:4e:8b:ee:8f:b0:33:08:63:fa:f6:36:7b:05:06:f7:
         e7:25:9f:12:fa:18:4f:13:6d:ed:b6:47:01:39:62:9f:2f:83:
         6d:38:bc:5e:46:0d:b5:24:fb:83:f3:d5:d7:ec:c0:d2:63:cb:
         f5:44:08:77:38:72:39:fc:cb:b4:15:87:6e:54:4f:fa:b1:85:
         aa:f8:6c:50:03:64:96:65:0b:28:ed:f9:0a:dd:2e:dc:a9:31:
         dd:f2:7e:f1:c9:b6:97:3f:0d:fb:70:72:e7:01:25:e3:44:2a:
         5b:cd:1c:0c:3d:82:a1:30:3b:b7:83:c4:a2:cf:03:39:08:56:
         4f:27:ff:34:9b:3d:8e:bb:9a:82:4e:8c:93:4f:2f:f6:51:7c:
         a4:3d:87:04:e7:96:a0:c7:86:08:eb:74:1d:d4:85:4a:30:1e:
         05:08:2c:97:1d:13:d2:ef:87:94:9a:61:19:e6:7b:ca:56:1d:
         25:d8:20:74:48:cd:83:48:9c:92:4f:0b:b2:73:6d:89:20:ab:
         b7:25:26:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:56:32 2024 by rpki-client on console-fra.rpki-client.org