Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AjrkJ3wWR2J7ete7E7V5v544yudGxtSu4U3CKruArvPu/0/3230302e392e3232302e302f32322d3232203d3e20323632343538.roa
File:                     3230302e392e3232302e302f32322d3232203d3e20323632343538.roa (raw, json)
Hash identifier:          4+lv1o9sQFIJSt0fEMtSScgqeoxUiucZNrzIuLgsso0=
Subject key identifier:   FF:17:A6:68:57:EE:C1:08:D8:5B:C0:93:55:89:47:95:8E:B6:30:A3
Certificate issuer:       /CN=FDB293D8646ACB35E10785D8B748695F452A1DC2
Certificate serial:       3F9BA957CA4C9364735DFB871155AFE996ADFCE5
Authority key identifier: FD:B2:93:D8:64:6A:CB:35:E1:07:85:D8:B7:48:69:5F:45:2A:1D:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDB293D8646ACB35E10785D8B748695F452A1DC2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AjrkJ3wWR2J7ete7E7V5v544yudGxtSu4U3CKruArvPu/0/3230302e392e3232302e302f32322d3232203d3e20323632343538.roa
Signing time:             Tue 22 Oct 2024 16:56:34 +0000
ROA not before:           Tue 22 Oct 2024 16:51:34 +0000
ROA not after:            Tue 21 Oct 2025 16:56:34 +0000
asID:                     262458
IP address blocks:        200.9.220.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AjrkJ3wWR2J7ete7E7V5v544yudGxtSu4U3CKruArvPu/0/FDB293D8646ACB35E10785D8B748695F452A1DC2.crl
                          rsync://rpki-repo.registro.br/repo/AjrkJ3wWR2J7ete7E7V5v544yudGxtSu4U3CKruArvPu/0/FDB293D8646ACB35E10785D8B748695F452A1DC2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDB293D8646ACB35E10785D8B748695F452A1DC2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:9b:a9:57:ca:4c:93:64:73:5d:fb:87:11:55:af:e9:96:ad:fc:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDB293D8646ACB35E10785D8B748695F452A1DC2
        Validity
            Not Before: Oct 22 16:51:34 2024 GMT
            Not After : Oct 21 16:56:34 2025 GMT
        Subject: CN=FF17A66857EEC108D85BC093558947958EB630A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f8:5f:ed:83:f7:a7:ff:52:84:d5:64:1e:c1:
                    e7:9e:ec:d6:33:6e:2f:d1:2c:dc:8e:c7:9d:1b:bf:
                    e6:4e:70:87:ab:75:25:0d:de:29:fb:96:49:26:da:
                    2f:5d:46:6f:a7:d2:c1:a6:27:ef:00:61:35:fa:f2:
                    34:b9:cc:7d:d8:63:8a:09:a2:8d:27:32:37:c3:d6:
                    e3:97:30:98:4c:45:af:a0:89:21:a9:9a:43:47:00:
                    19:6e:6b:b6:14:3d:17:0a:e4:2f:a4:b1:36:90:b0:
                    c2:fa:45:29:bd:bf:b3:58:16:2f:24:6c:d7:a2:11:
                    57:b8:e8:79:d5:52:9e:21:d8:e9:55:f6:a6:be:e9:
                    19:13:e6:9c:1c:6f:7b:9f:19:1a:10:d2:35:d1:e6:
                    13:8a:e3:55:d5:61:45:8d:d7:45:28:92:a5:37:41:
                    6a:7d:14:3e:e8:70:0e:74:4d:da:f2:8a:04:f8:a7:
                    ea:75:d3:cd:a1:ff:8a:77:a8:f0:4f:93:3e:57:c5:
                    cf:9f:d7:7d:e0:ff:9b:c1:43:0e:ad:3d:7f:17:60:
                    47:9d:db:17:2d:56:e2:55:43:92:7d:52:39:bb:dc:
                    e7:2a:11:4e:f3:4d:7a:25:2a:60:a2:db:6c:bf:16:
                    e4:aa:5f:90:2d:1a:8a:11:79:d8:4b:38:a9:7e:5b:
                    1b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:17:A6:68:57:EE:C1:08:D8:5B:C0:93:55:89:47:95:8E:B6:30:A3
            X509v3 Authority Key Identifier:
                keyid:FD:B2:93:D8:64:6A:CB:35:E1:07:85:D8:B7:48:69:5F:45:2A:1D:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AjrkJ3wWR2J7ete7E7V5v544yudGxtSu4U3CKruArvPu/0/FDB293D8646ACB35E10785D8B748695F452A1DC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDB293D8646ACB35E10785D8B748695F452A1DC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AjrkJ3wWR2J7ete7E7V5v544yudGxtSu4U3CKruArvPu/0/3230302e392e3232302e302f32322d3232203d3e20323632343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:f4:77:d0:97:8a:0c:39:2a:ee:d7:75:a5:0b:ef:34:1b:51:
         5f:10:7e:45:0a:a8:d2:e9:22:27:1d:e9:12:2e:5f:92:76:9c:
         3a:ae:d4:fe:b5:3b:b4:f7:95:89:cd:08:dd:5c:12:45:9b:23:
         c3:46:57:38:7c:d1:81:c8:89:24:47:f8:bc:e2:64:40:5e:79:
         0a:9d:53:f1:2d:dc:ce:1f:f5:0a:34:ba:e3:6d:f1:c4:d7:4d:
         98:93:98:2a:0a:ac:28:f2:a4:07:26:23:5c:e7:b9:70:09:91:
         75:3a:8a:90:67:b5:bd:d0:81:27:3f:83:62:3b:75:6a:7b:0a:
         6e:7f:85:ca:87:3d:b2:5f:fa:91:69:a7:33:33:cb:5c:02:99:
         65:ce:45:4f:95:55:59:1e:8e:d0:c1:e3:17:8f:f1:50:fe:6a:
         2e:1a:54:64:8a:ba:20:42:2d:43:8d:04:84:8c:ff:1e:58:d0:
         2e:3b:cf:87:d5:00:23:aa:2f:37:f4:26:91:14:11:2d:5c:92:
         89:5d:9d:c5:ff:74:cf:4c:e3:84:25:a1:16:ba:13:2b:27:42:
         1d:1b:e4:1f:a7:75:5a:6d:dd:06:42:6c:48:40:1f:c7:7a:bc:
         04:fe:66:70:86:a7:8b:c0:dc:e2:cf:60:fe:29:9c:f6:49:c0:
         67:7e:01:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:41 2024 by rpki-client on console-fra.rpki-client.org