Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AoAgsoVKNFmzrPsPVWBtiMZDEs5wPkyEaSr1C8wfcUzP/1/3230302e3130372e3131342e302f32332d3233203d3e20323730323439.roa
File:                     3230302e3130372e3131342e302f32332d3233203d3e20323730323439.roa (raw, json)
Hash identifier:          SH6wpY5re4kQacvZNwewxAhS5nPQhXKvs3Ox8jkucaE=
Subject key identifier:   27:91:C1:2D:99:00:9A:27:F4:6A:6D:C4:68:B6:B0:AC:CB:24:2A:10
Certificate issuer:       /CN=011E13E33787F0421EC41F858F4BC9BD2A9DD70F
Certificate serial:       7E478AE2551F8450BBA621E0A389971CA893161D
Authority key identifier: 01:1E:13:E3:37:87:F0:42:1E:C4:1F:85:8F:4B:C9:BD:2A:9D:D7:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/011E13E33787F0421EC41F858F4BC9BD2A9DD70F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AoAgsoVKNFmzrPsPVWBtiMZDEs5wPkyEaSr1C8wfcUzP/1/3230302e3130372e3131342e302f32332d3233203d3e20323730323439.roa
Signing time:             Wed 03 Apr 2024 22:20:48 +0000
ROA not before:           Wed 03 Apr 2024 22:15:48 +0000
ROA not after:            Wed 02 Apr 2025 22:20:48 +0000
asID:                     270249
IP address blocks:        200.107.114.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AoAgsoVKNFmzrPsPVWBtiMZDEs5wPkyEaSr1C8wfcUzP/1/011E13E33787F0421EC41F858F4BC9BD2A9DD70F.crl
                          rsync://rpki-repo.registro.br/repo/AoAgsoVKNFmzrPsPVWBtiMZDEs5wPkyEaSr1C8wfcUzP/1/011E13E33787F0421EC41F858F4BC9BD2A9DD70F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/011E13E33787F0421EC41F858F4BC9BD2A9DD70F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:47:8a:e2:55:1f:84:50:bb:a6:21:e0:a3:89:97:1c:a8:93:16:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=011E13E33787F0421EC41F858F4BC9BD2A9DD70F
        Validity
            Not Before: Apr  3 22:15:48 2024 GMT
            Not After : Apr  2 22:20:48 2025 GMT
        Subject: CN=2791C12D99009A27F46A6DC468B6B0ACCB242A10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f4:2c:19:f6:cd:fb:a6:41:8d:12:44:75:6b:
                    f0:b4:84:c8:76:e8:64:0c:c5:13:16:4b:64:93:b5:
                    48:56:fc:3c:05:81:e6:64:02:be:03:66:08:42:b0:
                    3d:1c:83:70:79:db:96:2e:c3:de:62:74:6e:79:0c:
                    75:70:48:e7:e1:4a:a9:97:f6:b4:71:d1:a7:96:ac:
                    ae:82:43:cd:20:35:e5:72:15:31:e0:9e:1d:c3:58:
                    a8:35:84:c7:8c:65:8a:af:3d:14:2d:93:28:d6:08:
                    dc:76:17:16:73:74:ab:9b:e0:30:52:2e:f6:e9:5d:
                    2b:18:73:8a:c5:44:3c:b0:a3:27:22:c8:26:a0:ba:
                    cd:31:66:4c:15:7b:ed:5c:9b:b4:10:8a:9c:0f:8a:
                    f8:b2:82:b1:a5:8a:a5:4b:60:df:47:7b:01:37:a4:
                    8a:6c:85:2e:ef:56:41:86:83:1b:45:67:5d:bc:85:
                    2b:4f:fb:64:f5:7c:c3:dc:b3:a3:55:04:a0:28:a3:
                    99:c9:51:ed:85:d2:4d:2b:0c:77:7c:74:12:f3:0b:
                    57:96:0b:73:db:e0:14:43:ce:3c:da:92:86:a7:4f:
                    bd:20:2d:4f:b6:22:25:56:da:b3:ce:8f:11:29:cd:
                    51:71:d6:9f:7e:2d:cb:83:a6:6c:12:de:db:58:b0:
                    47:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:91:C1:2D:99:00:9A:27:F4:6A:6D:C4:68:B6:B0:AC:CB:24:2A:10
            X509v3 Authority Key Identifier:
                keyid:01:1E:13:E3:37:87:F0:42:1E:C4:1F:85:8F:4B:C9:BD:2A:9D:D7:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AoAgsoVKNFmzrPsPVWBtiMZDEs5wPkyEaSr1C8wfcUzP/1/011E13E33787F0421EC41F858F4BC9BD2A9DD70F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/011E13E33787F0421EC41F858F4BC9BD2A9DD70F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AoAgsoVKNFmzrPsPVWBtiMZDEs5wPkyEaSr1C8wfcUzP/1/3230302e3130372e3131342e302f32332d3233203d3e20323730323439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.107.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         be:5f:1b:b4:44:12:a2:b0:92:8e:69:12:38:7b:b6:76:e1:14:
         bb:e5:18:77:93:ea:ea:4c:7c:b4:8b:76:4f:5f:2d:33:61:c4:
         94:50:76:e8:62:74:2a:df:67:eb:62:fd:71:1c:78:25:fa:56:
         8f:b4:0f:9a:9c:ba:25:d3:f1:83:77:d4:e1:5c:3b:21:4d:01:
         94:bf:b9:88:5b:62:19:63:3d:12:37:fe:fc:e4:aa:8b:31:dd:
         e6:34:1c:79:e6:aa:93:b4:d9:0b:c8:ac:34:ec:8b:96:b6:e3:
         24:d1:8c:d9:56:d4:af:a2:eb:9c:6a:f2:86:02:b9:1a:ab:62:
         38:48:08:e3:b0:da:9c:9d:ee:f2:53:3e:6c:f2:0e:67:47:47:
         68:0b:57:48:24:10:87:ba:e3:1c:a1:48:0a:75:99:14:dd:03:
         f6:7d:ac:cb:e5:d9:45:4f:59:98:51:64:a0:c7:74:a9:5b:07:
         54:4f:5c:60:e0:4e:66:0f:fb:1c:0c:20:db:7e:a1:28:13:81:
         63:47:64:08:f4:ad:60:78:ab:69:b2:af:22:db:e9:1a:26:d5:
         3f:52:81:58:4f:0b:ff:0d:24:60:1e:e6:0c:e1:88:66:37:48:
         12:65:a5:ec:c9:96:d9:8c:8c:99:26:6e:05:7b:f6:d7:89:17:
         9b:d7:dc:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:10 2024 by rpki-client on console-fra.rpki-client.org