Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AoAgsoVKNFmzrPsPVWBtiMZDEs5wPkyEaSr1C8wfcUzP/1/3230302e3130372e3131322e302f32322d3234203d3e20323730323439.roa
File:                     3230302e3130372e3131322e302f32322d3234203d3e20323730323439.roa (raw, json)
Hash identifier:          wzSscTVMU7linEaklexsqhx1Vtmyd/ohCRkQojrj5Qw=
Subject key identifier:   7B:72:94:79:43:4A:3D:B7:FF:0B:6B:D5:E6:83:63:A0:C5:CB:DB:8C
Certificate issuer:       /CN=011E13E33787F0421EC41F858F4BC9BD2A9DD70F
Certificate serial:       31CBE75C1FFA1A6B5C28F2DC13F94E7A74AE32D8
Authority key identifier: 01:1E:13:E3:37:87:F0:42:1E:C4:1F:85:8F:4B:C9:BD:2A:9D:D7:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/011E13E33787F0421EC41F858F4BC9BD2A9DD70F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AoAgsoVKNFmzrPsPVWBtiMZDEs5wPkyEaSr1C8wfcUzP/1/3230302e3130372e3131322e302f32322d3234203d3e20323730323439.roa
Signing time:             Wed 03 Apr 2024 22:20:48 +0000
ROA not before:           Wed 03 Apr 2024 22:15:48 +0000
ROA not after:            Wed 02 Apr 2025 22:20:48 +0000
asID:                     270249
IP address blocks:        200.107.112.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AoAgsoVKNFmzrPsPVWBtiMZDEs5wPkyEaSr1C8wfcUzP/1/011E13E33787F0421EC41F858F4BC9BD2A9DD70F.crl
                          rsync://rpki-repo.registro.br/repo/AoAgsoVKNFmzrPsPVWBtiMZDEs5wPkyEaSr1C8wfcUzP/1/011E13E33787F0421EC41F858F4BC9BD2A9DD70F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/011E13E33787F0421EC41F858F4BC9BD2A9DD70F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:cb:e7:5c:1f:fa:1a:6b:5c:28:f2:dc:13:f9:4e:7a:74:ae:32:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=011E13E33787F0421EC41F858F4BC9BD2A9DD70F
        Validity
            Not Before: Apr  3 22:15:48 2024 GMT
            Not After : Apr  2 22:20:48 2025 GMT
        Subject: CN=7B729479434A3DB7FF0B6BD5E68363A0C5CBDB8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fb:7a:1b:49:79:f9:90:b9:27:9b:50:c9:7c:
                    08:32:84:99:22:5c:43:e3:c9:77:1b:92:89:7f:87:
                    c6:1e:27:65:d7:6c:03:0b:52:ee:ef:ee:8f:56:5f:
                    ef:71:44:82:d7:c6:18:fa:da:31:6e:a7:a5:14:3b:
                    71:2a:ac:49:8e:f7:1c:12:1b:a1:a1:75:86:40:52:
                    f8:3b:55:24:d8:f5:0e:6f:a0:f0:e6:f2:63:94:71:
                    dd:c2:72:f0:b3:05:04:68:8c:07:ed:97:1f:9f:68:
                    68:f0:e9:35:69:1c:09:21:1c:dc:94:3b:da:6f:5d:
                    a6:19:1d:dd:14:ec:34:32:e6:2f:61:69:e5:1c:66:
                    c9:d3:67:f1:63:59:09:96:91:d9:5e:e7:da:04:27:
                    63:e5:cc:17:e9:d4:7c:38:e6:34:1f:2b:8a:46:35:
                    9a:b3:fb:6a:c7:1c:8b:6b:91:e6:5f:b1:5a:9a:f5:
                    87:cb:44:5d:ec:f2:59:d6:a7:b8:96:67:04:a4:d6:
                    f2:3c:43:24:cd:28:5b:3b:55:dc:fd:ae:ac:24:b4:
                    05:5a:31:66:cd:bd:7b:3e:78:58:b2:b2:16:47:0b:
                    60:66:bc:23:ef:ce:c1:0b:1f:f0:f0:a1:81:97:05:
                    72:8f:a9:bd:70:b8:23:a0:b4:0b:17:ca:e3:d8:b0:
                    4b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:72:94:79:43:4A:3D:B7:FF:0B:6B:D5:E6:83:63:A0:C5:CB:DB:8C
            X509v3 Authority Key Identifier:
                keyid:01:1E:13:E3:37:87:F0:42:1E:C4:1F:85:8F:4B:C9:BD:2A:9D:D7:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AoAgsoVKNFmzrPsPVWBtiMZDEs5wPkyEaSr1C8wfcUzP/1/011E13E33787F0421EC41F858F4BC9BD2A9DD70F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/011E13E33787F0421EC41F858F4BC9BD2A9DD70F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AoAgsoVKNFmzrPsPVWBtiMZDEs5wPkyEaSr1C8wfcUzP/1/3230302e3130372e3131322e302f32322d3234203d3e20323730323439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.107.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:fc:23:99:dd:64:39:99:ec:c1:a4:e7:fd:7d:52:d9:76:fa:
         c5:7b:57:a4:14:78:05:99:b1:eb:40:46:8d:eb:46:87:09:75:
         5f:6e:76:35:70:cd:67:8a:7d:51:6a:19:ab:42:e9:f5:a0:aa:
         dc:86:cd:7e:a0:c3:73:40:97:4a:5f:c8:d5:09:53:c6:d3:c6:
         f9:04:21:c5:e4:93:17:ee:e7:17:2f:25:ad:0b:35:a1:55:74:
         88:43:15:25:08:cb:04:f7:75:de:c5:1e:5e:ed:65:95:0a:44:
         77:43:fc:cb:ef:f6:c3:e5:3c:08:d2:eb:6d:99:32:b6:2f:ce:
         90:ad:7f:f3:2b:b0:d6:66:bd:ed:f0:6a:8e:00:49:54:a7:c0:
         1c:39:f6:56:5b:5c:92:da:d0:34:57:31:96:7f:fe:d7:40:46:
         b9:38:61:98:c6:d9:24:66:5f:aa:a1:ef:58:ba:a7:08:43:8d:
         83:80:4e:bb:eb:10:06:fc:02:83:07:48:65:60:7d:4b:69:8f:
         0b:90:34:39:b2:15:ab:50:e0:d1:d1:a5:6c:79:7d:73:1d:ed:
         0e:5d:78:99:24:b3:cb:c3:80:9c:aa:4b:c4:0d:a9:d1:17:fc:
         0f:b1:8b:9b:a7:99:b6:e0:3f:30:5a:64:5f:88:e9:c6:8e:87:
         99:1f:f5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:22 2024 by rpki-client on console-ams.rpki-client.org