Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3230302e33342e3231382e302f32342d3234203d3e203631363839.roa
File:                     3230302e33342e3231382e302f32342d3234203d3e203631363839.roa (raw, json)
Hash identifier:          q7mf0zayMRjf8RzoxyNT5VktQ7/HxeppJp2Qf/E7kR0=
Subject key identifier:   A9:05:FE:D9:68:6F:A7:EC:22:23:CB:D5:3E:E9:83:F4:36:1E:C7:D6
Certificate issuer:       /CN=10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8
Certificate serial:       10658157E95A7A141A5DA4E5957A568F5B6CD5AF
Authority key identifier: 10:AE:8C:BC:A0:92:BB:DA:E3:C0:6D:F9:94:1E:4C:00:AB:06:56:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3230302e33342e3231382e302f32342d3234203d3e203631363839.roa
Signing time:             Fri 23 Aug 2024 19:50:38 +0000
ROA not before:           Fri 23 Aug 2024 19:45:38 +0000
ROA not after:            Fri 22 Aug 2025 19:50:38 +0000
asID:                     61689
IP address blocks:        200.34.218.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.crl
                          rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:18:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:65:81:57:e9:5a:7a:14:1a:5d:a4:e5:95:7a:56:8f:5b:6c:d5:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8
        Validity
            Not Before: Aug 23 19:45:38 2024 GMT
            Not After : Aug 22 19:50:38 2025 GMT
        Subject: CN=A905FED9686FA7EC2223CBD53EE983F4361EC7D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:34:d5:04:87:cc:dc:08:98:19:43:6a:9e:49:
                    f4:f8:cd:68:e3:63:d0:4c:a2:ec:3d:76:e5:ce:9d:
                    e3:3b:1b:66:64:c3:02:4a:34:f0:5e:a0:af:bf:d0:
                    c0:b5:93:11:e7:f9:95:38:3a:cd:e6:2b:17:e2:a3:
                    2f:94:1c:39:44:56:db:4b:f2:73:cf:a4:fc:49:b9:
                    00:40:b0:e5:07:ff:a5:09:e8:7b:75:1a:de:2a:75:
                    9f:bd:c7:f3:ce:4a:cb:b5:f7:09:c9:02:2b:0f:71:
                    68:ed:d3:e4:77:0a:09:ab:05:0b:5a:24:fc:c3:a0:
                    03:13:ea:25:19:b4:12:88:33:73:7c:e6:c4:94:4f:
                    1e:3c:52:b6:88:5a:5c:98:0d:18:ef:6a:72:7b:47:
                    b1:41:5f:0b:27:b3:be:77:3a:b3:3c:44:fc:2f:6d:
                    d1:22:60:11:d9:5c:c0:32:1a:47:c9:85:2c:2c:a7:
                    60:4c:79:e7:3d:95:bc:e8:7e:1d:0c:29:92:98:d5:
                    4b:e1:02:05:2f:04:7b:e3:47:c8:c8:00:51:c0:04:
                    0b:fa:f6:c3:c8:61:9c:44:0b:ba:0f:36:31:e1:1d:
                    d4:96:9e:b2:5d:d5:8b:54:7e:23:65:55:71:d7:6c:
                    dd:7d:25:e2:3f:f4:35:18:c4:2d:ed:ec:47:5e:30:
                    ca:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:05:FE:D9:68:6F:A7:EC:22:23:CB:D5:3E:E9:83:F4:36:1E:C7:D6
            X509v3 Authority Key Identifier:
                keyid:10:AE:8C:BC:A0:92:BB:DA:E3:C0:6D:F9:94:1E:4C:00:AB:06:56:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3230302e33342e3231382e302f32342d3234203d3e203631363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.34.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:d4:d7:6f:0a:0d:a8:19:b1:08:1b:a1:ee:c1:a2:b7:b2:b4:
         41:93:5d:21:fa:06:00:0a:17:e0:49:3f:f6:8d:1d:c1:7d:4a:
         b2:fa:f9:f1:63:ed:8c:37:11:d8:38:35:8a:3a:e4:a8:14:24:
         47:7b:59:1a:31:9b:db:11:a2:48:75:35:65:cb:e3:d3:84:37:
         27:c7:d9:0e:49:de:8a:81:21:e3:80:4b:d8:52:fa:3c:64:69:
         08:20:16:14:51:d8:6b:73:91:fb:2e:22:79:eb:11:4e:c5:39:
         fb:b1:9b:c7:b1:b0:4d:41:ef:48:ae:b8:23:f1:1c:6c:65:30:
         a3:c9:2c:67:77:c2:9a:be:f1:00:64:23:3a:b8:66:e4:4e:09:
         c6:a8:00:d8:7b:ec:50:d2:38:10:44:ae:05:44:f9:be:c5:e2:
         ad:d6:95:a4:d3:c4:89:1c:1d:62:93:15:92:b5:19:b4:79:dc:
         f9:dd:07:6f:47:1e:bb:d8:ef:72:b1:b9:91:c1:b3:83:55:c9:
         55:0d:dd:bc:23:4d:d5:ee:d8:58:3a:be:4f:0a:3b:95:09:09:
         be:8e:04:8a:69:9c:4b:f8:e3:c6:3d:b1:89:54:5c:75:0b:a5:
         ab:54:04:0d:c4:7e:f4:41:b9:68:0f:ed:26:bf:c0:fe:75:cb:
         8f:1b:bc:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:34:01 2024 by rpki-client on console-ams.rpki-client.org