Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/3230302e3231392e36302e302f32322d3234203d3e20323730383034.roa
File:                     3230302e3231392e36302e302f32322d3234203d3e20323730383034.roa (raw, json)
Hash identifier:          9q/YiLwn7yonw//RwzbueQy+uM9bMvQXxievM4a3PtQ=
Subject key identifier:   DA:26:0F:3E:5C:AE:E9:94:09:EE:86:1C:B7:0B:E1:94:7C:8E:A0:89
Certificate issuer:       /CN=F067BA9B4A480BDB2835280BE127A7C1E0E478B6
Certificate serial:       1B9BAE6A7131FD8E660E5C76C0387365F8558FBB
Authority key identifier: F0:67:BA:9B:4A:48:0B:DB:28:35:28:0B:E1:27:A7:C1:E0:E4:78:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F067BA9B4A480BDB2835280BE127A7C1E0E478B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/3230302e3231392e36302e302f32322d3234203d3e20323730383034.roa
Signing time:             Thu 18 Apr 2024 15:00:14 +0000
ROA not before:           Thu 18 Apr 2024 14:55:14 +0000
ROA not after:            Thu 17 Apr 2025 15:00:14 +0000
asID:                     270804
IP address blocks:        200.219.60.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/F067BA9B4A480BDB2835280BE127A7C1E0E478B6.crl
                          rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/F067BA9B4A480BDB2835280BE127A7C1E0E478B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F067BA9B4A480BDB2835280BE127A7C1E0E478B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 07:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:9b:ae:6a:71:31:fd:8e:66:0e:5c:76:c0:38:73:65:f8:55:8f:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F067BA9B4A480BDB2835280BE127A7C1E0E478B6
        Validity
            Not Before: Apr 18 14:55:14 2024 GMT
            Not After : Apr 17 15:00:14 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:df:6f:04:d3:d3:c4:4f:c4:cc:06:f9:3f:f5:
                    d6:aa:b3:18:45:ff:7b:f9:c0:10:64:e5:2f:44:05:
                    53:6d:ff:44:80:da:4e:93:f0:db:0b:78:8d:e6:6e:
                    52:2a:98:b0:22:06:1a:15:9f:c1:b2:b3:72:ee:0a:
                    e8:5d:01:3e:e6:f1:f7:39:36:bf:e6:19:de:c6:2d:
                    06:5c:ed:44:2d:4d:df:b5:11:21:ad:06:7a:79:f3:
                    11:58:4e:86:12:c6:3e:d8:15:b5:41:96:a9:e0:ac:
                    aa:40:59:f9:ee:54:f1:17:0e:d4:39:80:9e:83:23:
                    17:de:68:27:67:c8:5a:93:87:c5:76:cf:64:ba:84:
                    38:6a:38:ff:9d:ad:f0:f7:d0:d3:55:7f:25:54:88:
                    72:d1:37:09:73:ca:4b:f7:d8:e1:0b:ec:ef:c4:3e:
                    2a:6b:64:00:f3:78:78:48:82:2f:78:ee:7e:df:47:
                    0d:01:98:94:1d:05:5d:e1:fa:81:b1:6e:7a:68:6c:
                    72:95:0a:10:23:59:1f:70:8b:68:c9:4c:db:92:e8:
                    30:a9:d3:ee:fd:47:58:c4:bb:cc:88:4b:a3:20:d7:
                    cd:00:f8:a6:d8:51:fb:60:ee:03:5a:c0:8f:cc:23:
                    e3:3f:f6:57:9e:2e:b1:bf:3f:14:d5:09:36:43:f0:
                    dc:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:26:0F:3E:5C:AE:E9:94:09:EE:86:1C:B7:0B:E1:94:7C:8E:A0:89
            X509v3 Authority Key Identifier:
                keyid:F0:67:BA:9B:4A:48:0B:DB:28:35:28:0B:E1:27:A7:C1:E0:E4:78:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/F067BA9B4A480BDB2835280BE127A7C1E0E478B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F067BA9B4A480BDB2835280BE127A7C1E0E478B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/3230302e3231392e36302e302f32322d3234203d3e20323730383034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:19:4d:16:18:62:1a:35:ed:af:a3:5c:6e:31:21:63:b8:d0:
         7c:a6:ce:fb:7f:1e:72:fb:f6:56:e5:7e:d2:e7:b6:3f:8d:d0:
         8f:82:66:1b:6a:4e:79:1c:88:75:53:a9:ff:6d:c0:ce:ac:8a:
         f4:93:1e:16:a3:15:0f:13:b5:38:6d:ed:27:79:9c:98:bd:4f:
         47:ff:d7:8b:e5:2e:11:af:0e:25:fc:da:01:01:50:03:42:14:
         f7:ae:ef:d1:ee:31:8f:00:fc:4d:84:8b:a0:35:8e:d8:ba:59:
         2f:1c:1d:5f:8a:47:b3:4e:89:70:bb:bb:e8:1b:7f:8a:02:36:
         4b:45:37:17:15:18:55:9d:09:59:fe:59:bb:e0:01:3d:d0:b6:
         f5:b5:26:c1:3c:cb:62:49:a4:19:9c:25:9d:87:1e:60:3d:4a:
         a4:68:96:dd:dd:3c:cf:60:93:dd:46:15:58:b5:78:c7:81:15:
         71:45:0b:27:0c:5b:55:88:98:76:b3:a4:59:57:00:43:7a:5a:
         54:94:c0:b5:af:6d:e9:4e:b9:12:32:fa:e3:8b:7a:21:dd:41:
         d8:58:e7:c5:ff:ad:6b:e1:3f:0e:c0:e0:c8:d3:6e:c4:73:b6:
         ae:b4:f2:ce:a2:7b:08:d1:8c:78:6f:3d:fd:2c:55:16:fc:84:
         d9:98:54:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:02:15 2024 by rpki-client on console-ams.rpki-client.org