Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/1/3230302e3139362e3133372e302f32342d3234203d3e203631373736.roa
File:                     3230302e3139362e3133372e302f32342d3234203d3e203631373736.roa (raw, json)
Hash identifier:          LPlyNilQk+vylLdz9WSS40AKhs6K1RsK7LoK0Mik5YQ=
Subject key identifier:   3A:60:A5:4F:54:30:B0:7E:5E:F9:E7:A6:A7:1E:44:E0:A4:FA:24:2E
Certificate issuer:       /CN=10CB5B9501E835ABE33452149F17754A51CE36A4
Certificate serial:       6EA44AF0E36344E391060D744A456F99494FBE36
Authority key identifier: 10:CB:5B:95:01:E8:35:AB:E3:34:52:14:9F:17:75:4A:51:CE:36:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10CB5B9501E835ABE33452149F17754A51CE36A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/1/3230302e3139362e3133372e302f32342d3234203d3e203631373736.roa
Signing time:             Thu 04 Apr 2024 00:34:28 +0000
ROA not before:           Thu 04 Apr 2024 00:29:28 +0000
ROA not after:            Thu 03 Apr 2025 00:34:28 +0000
asID:                     61776
IP address blocks:        200.196.137.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/1/10CB5B9501E835ABE33452149F17754A51CE36A4.crl
                          rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/1/10CB5B9501E835ABE33452149F17754A51CE36A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10CB5B9501E835ABE33452149F17754A51CE36A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 02:40:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:a4:4a:f0:e3:63:44:e3:91:06:0d:74:4a:45:6f:99:49:4f:be:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10CB5B9501E835ABE33452149F17754A51CE36A4
        Validity
            Not Before: Apr  4 00:29:28 2024 GMT
            Not After : Apr  3 00:34:28 2025 GMT
        Subject: CN=3A60A54F5430B07E5EF9E7A6A71E44E0A4FA242E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9c:04:79:97:d0:a8:6e:dc:a7:2c:0c:b0:d9:
                    2e:3d:d4:e8:9b:b8:42:01:71:6b:fa:f0:19:52:e7:
                    66:a5:51:05:64:c4:4b:38:47:d2:e1:42:25:14:89:
                    d7:f0:d2:c4:7d:ba:37:bb:0e:6f:48:9b:20:96:c8:
                    60:94:f1:f2:45:70:89:64:2b:fd:df:f9:be:98:ff:
                    35:64:a8:28:18:64:6b:9a:7e:99:63:11:2e:48:d3:
                    b8:8c:68:1e:39:0a:60:91:3c:9a:61:83:be:11:89:
                    1a:b9:4a:78:78:eb:2b:bb:ea:1d:68:92:35:53:0a:
                    56:6c:e8:34:9c:c1:59:5f:8f:ac:d8:01:1e:cb:eb:
                    7e:cc:91:9f:d1:78:7b:59:12:91:81:83:27:d5:4c:
                    36:ad:bd:75:6f:94:ff:57:ee:c1:69:92:3a:3a:0b:
                    b9:ed:1a:53:d8:24:a0:72:cd:f6:2a:b7:48:2a:66:
                    03:8c:7b:ad:f8:63:70:0a:84:93:eb:dc:9b:a4:9e:
                    b8:16:73:8c:ab:df:54:e9:3f:72:2e:e5:3e:00:50:
                    a1:4c:2b:a0:24:00:f0:86:c1:e3:0b:be:cc:a2:b6:
                    df:6b:b9:95:87:e8:74:a3:45:8a:cc:ff:a7:df:d4:
                    d2:74:b5:02:8d:73:bb:73:0c:59:11:2e:48:1f:e5:
                    cf:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:60:A5:4F:54:30:B0:7E:5E:F9:E7:A6:A7:1E:44:E0:A4:FA:24:2E
            X509v3 Authority Key Identifier:
                keyid:10:CB:5B:95:01:E8:35:AB:E3:34:52:14:9F:17:75:4A:51:CE:36:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/1/10CB5B9501E835ABE33452149F17754A51CE36A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10CB5B9501E835ABE33452149F17754A51CE36A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/1/3230302e3139362e3133372e302f32342d3234203d3e203631373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.196.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:ca:e2:bc:ff:32:cd:0a:6c:64:06:91:5d:b2:9b:89:2f:96:
         86:8f:62:51:42:02:23:c0:e2:fa:55:59:9a:66:3f:42:cd:6b:
         7a:c3:91:cc:ec:5b:10:dc:41:eb:7b:f1:48:4e:59:9d:e0:35:
         46:1c:bd:93:74:b2:25:2a:a9:19:0d:63:06:75:0e:e6:b2:b4:
         5c:02:11:6a:b9:19:7f:2a:1e:43:ae:0f:33:7f:ae:f8:29:95:
         39:e6:ef:ae:7d:ea:fc:e2:9a:a9:f4:4e:59:ac:1a:17:5c:a0:
         8a:93:29:7e:9e:7d:07:fc:00:ef:5d:65:c6:4f:d3:f1:4c:92:
         9b:4e:dc:b0:55:03:88:af:b7:ca:3c:30:2e:09:45:6a:61:fe:
         a9:4e:19:bf:4d:fa:00:8b:b5:99:c5:a5:39:27:cc:17:54:48:
         16:12:c1:e4:72:5b:70:35:6f:02:94:6b:e7:30:52:9e:ae:76:
         6f:64:51:db:d8:ef:b6:82:2d:10:be:5c:2a:cb:9a:b2:71:c7:
         8c:80:cb:aa:b5:25:c2:98:5f:f2:eb:f6:55:6a:7b:44:c2:b7:
         d3:28:ba:0b:f2:2e:55:c6:16:c1:b9:dc:18:5b:d5:af:3c:2c:
         69:9a:51:29:4f:0b:e6:e3:60:fb:86:78:e9:f8:6c:27:fa:ad:
         4b:37:21:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:28:38 2024 by rpki-client on console-ams.rpki-client.org