Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AoAgsoVKNFmzrPsPVWBtiMZDEs5wPkyEaSr1C8wfcUzP/1/3230302e3130372e3131322e302f32322d3232203d3e20323730323439.roa
File:                     3230302e3130372e3131322e302f32322d3232203d3e20323730323439.roa (raw, json)
Hash identifier:          i3M0vUK+jAnVNcn+ecBRVBKS5Jbv5ntb5BfcoqpN7x4=
Subject key identifier:   ED:53:71:82:3B:FE:64:79:53:21:BC:B1:84:C6:20:79:56:F7:ED:DD
Certificate issuer:       /CN=011E13E33787F0421EC41F858F4BC9BD2A9DD70F
Certificate serial:       42809B9EF62CD598192DB9558C0516DD55EB90A5
Authority key identifier: 01:1E:13:E3:37:87:F0:42:1E:C4:1F:85:8F:4B:C9:BD:2A:9D:D7:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/011E13E33787F0421EC41F858F4BC9BD2A9DD70F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AoAgsoVKNFmzrPsPVWBtiMZDEs5wPkyEaSr1C8wfcUzP/1/3230302e3130372e3131322e302f32322d3232203d3e20323730323439.roa
Signing time:             Wed 03 Apr 2024 22:20:48 +0000
ROA not before:           Wed 03 Apr 2024 22:15:48 +0000
ROA not after:            Wed 02 Apr 2025 22:20:48 +0000
asID:                     270249
IP address blocks:        200.107.112.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AoAgsoVKNFmzrPsPVWBtiMZDEs5wPkyEaSr1C8wfcUzP/1/011E13E33787F0421EC41F858F4BC9BD2A9DD70F.crl
                          rsync://rpki-repo.registro.br/repo/AoAgsoVKNFmzrPsPVWBtiMZDEs5wPkyEaSr1C8wfcUzP/1/011E13E33787F0421EC41F858F4BC9BD2A9DD70F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/011E13E33787F0421EC41F858F4BC9BD2A9DD70F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:80:9b:9e:f6:2c:d5:98:19:2d:b9:55:8c:05:16:dd:55:eb:90:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=011E13E33787F0421EC41F858F4BC9BD2A9DD70F
        Validity
            Not Before: Apr  3 22:15:48 2024 GMT
            Not After : Apr  2 22:20:48 2025 GMT
        Subject: CN=ED5371823BFE64795321BCB184C6207956F7EDDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6e:9c:58:d5:56:1a:70:02:66:8b:b1:69:01:
                    e6:fd:d0:e3:42:46:2b:0c:4d:46:bd:95:30:ad:ae:
                    b0:55:fc:44:b8:10:0c:75:5c:e5:15:a7:4e:eb:9b:
                    e2:c2:b0:64:08:a7:c9:38:d1:65:8c:2e:2b:f5:f9:
                    8b:81:f3:a2:d2:a3:44:90:4f:4a:20:bb:91:55:c6:
                    d5:a7:2a:e0:d3:a3:f5:2b:67:87:63:d5:4b:ab:7c:
                    5b:d3:af:c0:d3:83:95:e0:fb:12:13:f3:3f:9d:4d:
                    ae:ab:83:ae:11:f7:b7:57:18:8c:b7:7a:49:90:2b:
                    f0:27:f2:47:ec:9a:72:a0:0e:e6:6c:3a:2a:5a:bd:
                    53:9a:d0:44:71:3b:d6:8a:f7:4d:7d:ec:81:2f:5c:
                    0d:eb:0f:39:49:f1:70:34:e0:2f:38:2f:e1:06:e7:
                    76:3d:c7:6f:0b:54:e1:18:56:fc:ec:b8:57:cc:3e:
                    a3:73:bb:0a:8c:cf:ba:73:12:f4:fe:bf:75:40:5a:
                    8c:10:81:49:f6:f6:62:1f:25:7c:07:60:84:ee:5f:
                    ed:63:0a:e5:f3:2b:25:54:9a:7e:16:65:37:24:be:
                    6f:ef:1e:ea:a7:75:68:28:aa:ec:3c:ca:e1:96:a1:
                    9f:99:6f:b3:0f:38:6a:a9:a0:d8:e8:4b:7b:28:0e:
                    1e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:53:71:82:3B:FE:64:79:53:21:BC:B1:84:C6:20:79:56:F7:ED:DD
            X509v3 Authority Key Identifier:
                keyid:01:1E:13:E3:37:87:F0:42:1E:C4:1F:85:8F:4B:C9:BD:2A:9D:D7:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AoAgsoVKNFmzrPsPVWBtiMZDEs5wPkyEaSr1C8wfcUzP/1/011E13E33787F0421EC41F858F4BC9BD2A9DD70F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/011E13E33787F0421EC41F858F4BC9BD2A9DD70F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AoAgsoVKNFmzrPsPVWBtiMZDEs5wPkyEaSr1C8wfcUzP/1/3230302e3130372e3131322e302f32322d3232203d3e20323730323439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.107.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:bb:78:9c:c6:1c:38:e9:e6:bd:2c:0c:7f:01:bc:2d:3a:3a:
         01:c4:a7:4d:c6:cb:b3:88:49:e4:4a:54:be:bd:45:3c:b4:9c:
         a6:67:0d:37:1a:c5:79:b2:7e:7b:20:8f:02:9a:68:83:3f:45:
         62:66:c1:a5:08:73:24:7d:c3:0c:43:8b:d2:74:2c:a3:da:8d:
         34:fa:50:16:dd:d0:ab:a0:71:1a:03:24:0c:54:f9:6c:38:0c:
         98:6b:0c:47:b2:6e:81:41:dc:1b:4e:d7:8c:ec:1e:af:0b:7e:
         21:ad:4d:1a:8f:6f:0b:26:dd:7f:a3:45:96:31:76:fc:79:17:
         61:ec:6f:b8:83:77:e7:07:bb:4a:25:fb:9c:f7:c8:ee:1f:c4:
         63:5f:68:56:e9:16:0f:6b:89:77:74:fa:d8:cd:1a:98:25:8d:
         77:1a:45:ba:4c:5e:ad:2c:59:0c:81:58:e5:28:5d:e1:50:6e:
         6f:c9:fc:05:01:16:d9:44:c7:fb:4c:fb:50:e4:3a:07:60:05:
         d6:e9:82:dc:29:c6:ff:ae:4d:7d:e4:3b:ca:a4:74:f9:9c:17:
         2b:b6:81:28:25:76:6c:aa:36:36:fa:19:ba:be:22:1f:12:57:
         6e:fd:07:c3:58:0c:68:51:85:d4:96:35:75:64:31:19:23:37:
         0f:42:8c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:10 2024 by rpki-client on console-fra.rpki-client.org