Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3232392e3234382e302f32332d3234203d3e203238333435.roa
File:                     3230302e3232392e3234382e302f32332d3234203d3e203238333435.roa (raw, json)
Hash identifier:          S5uszN811x8gw6toQCXdjpkSgT2tGkLpDO/fSBJWBKQ=
Subject key identifier:   07:66:49:57:AC:00:53:3C:F1:A6:47:65:14:29:46:25:8B:E8:BC:4C
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       5268710896B58CBA1CC369C28338597800C076CF
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3232392e3234382e302f32332d3234203d3e203238333435.roa
Signing time:             Mon 15 Apr 2024 17:43:56 +0000
ROA not before:           Mon 15 Apr 2024 17:38:56 +0000
ROA not after:            Mon 14 Apr 2025 17:43:56 +0000
asID:                     28345
IP address blocks:        200.229.248.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 11:36:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:68:71:08:96:b5:8c:ba:1c:c3:69:c2:83:38:59:78:00:c0:76:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Apr 15 17:38:56 2024 GMT
            Not After : Apr 14 17:43:56 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3e:ea:96:6a:0d:a5:a3:aa:9a:45:d3:25:aa:
                    26:76:4c:34:64:b0:83:bc:42:ce:d7:29:53:15:cf:
                    74:c8:17:b5:4e:69:3b:26:39:5b:13:23:3a:9f:37:
                    32:49:51:19:ca:a4:e4:09:78:16:15:35:a5:69:01:
                    4b:af:10:68:e4:6e:76:35:dd:ea:7b:dd:01:9f:2a:
                    fe:99:b3:f9:27:f1:92:db:3c:f3:7c:8b:22:61:5d:
                    01:84:6d:c4:fe:49:e1:44:0d:17:cd:b8:4e:5e:e6:
                    04:15:ab:3b:88:5a:ae:d5:ea:95:39:83:8c:46:d4:
                    83:05:f9:61:26:ce:ba:54:75:03:15:87:55:f3:ab:
                    61:ba:24:0f:00:8f:4d:0c:06:1e:96:4a:19:02:50:
                    fd:2d:37:c4:62:95:46:69:87:e5:44:2f:00:e0:b4:
                    96:2f:32:a6:3f:d8:9a:b4:da:96:63:97:0b:6b:88:
                    dc:ed:c7:a8:bb:5e:a5:a2:dc:81:ab:9c:d4:27:42:
                    e7:f2:e7:3a:1d:7f:33:a1:2d:85:dc:9b:47:94:10:
                    20:21:64:23:62:15:f6:b3:f5:3d:0d:34:60:5b:eb:
                    bf:e7:0b:f3:42:74:71:2b:e2:c9:c0:46:77:d0:cd:
                    dc:7c:3d:c5:dc:76:c3:80:27:bd:56:f5:66:42:8e:
                    e6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:66:49:57:AC:00:53:3C:F1:A6:47:65:14:29:46:25:8B:E8:BC:4C
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3232392e3234382e302f32332d3234203d3e203238333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:bc:3e:c1:10:d6:54:37:2b:e0:8a:21:2f:09:16:cd:09:8c:
         7f:af:67:19:2b:58:b7:c0:df:ab:76:ca:78:fe:a9:d6:96:bd:
         4c:02:79:3c:29:9a:ce:e7:63:dc:1e:ce:0b:d5:54:78:77:a1:
         e4:3c:2e:8d:6c:7f:ca:6e:b2:f4:0f:9c:1e:be:0f:73:d1:8d:
         d9:aa:c7:5b:ba:10:eb:9e:66:83:45:96:c1:29:c8:35:ac:da:
         53:df:5a:92:fb:e9:3a:31:9b:a5:75:38:f0:0c:19:75:2e:25:
         65:a0:08:ad:c7:f8:a3:d6:d8:c1:35:c5:aa:06:0b:44:3e:68:
         c2:7e:f8:66:06:5e:a3:68:fc:a6:71:09:71:d1:bf:b7:c3:aa:
         f5:11:13:be:a5:40:d4:fb:fa:85:f0:97:fa:98:5a:00:fb:c1:
         d8:f3:cb:56:28:a0:0e:5b:e0:90:96:f0:ff:b2:98:9f:17:17:
         6d:6a:45:2d:ca:86:bb:25:3c:d7:99:14:28:73:8f:72:f6:7d:
         51:1f:5f:6a:3e:f7:de:a5:a0:76:e0:3f:21:69:87:36:95:d9:
         eb:79:aa:74:ef:43:f5:09:8d:d0:26:4b:38:5c:4b:d6:34:db:
         f8:3a:08:9a:32:fc:21:2e:a0:58:19:ff:22:8c:82:c9:67:1b:
         10:82:6b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:02:16 2024 by rpki-client on console-fra.rpki-client.org