Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3230302e33362e3231362e302f32322d3234203d3e20323731333637.roa
File:                     3230302e33362e3231362e302f32322d3234203d3e20323731333637.roa (raw, json)
Hash identifier:          rS1DprJcPE/7QjkMpeO7U0orxX60Y9OtPaFV3aXRg74=
Subject key identifier:   8A:35:4A:05:16:B2:D8:1F:1D:0A:96:C1:54:FF:31:95:FC:89:6A:4C
Certificate issuer:       /CN=3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE
Certificate serial:       709A088921E94D0E67C75AFF57CD710BC52CD170
Authority key identifier: 3A:BF:96:D1:8E:7E:05:A2:4E:DA:A1:17:D2:B9:E7:6A:07:FE:C5:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3230302e33362e3231362e302f32322d3234203d3e20323731333637.roa
Signing time:             Wed 03 Apr 2024 18:31:26 +0000
ROA not before:           Wed 03 Apr 2024 18:26:26 +0000
ROA not after:            Wed 02 Apr 2025 18:31:26 +0000
asID:                     271367
IP address blocks:        200.36.216.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.crl
                          rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:9a:08:89:21:e9:4d:0e:67:c7:5a:ff:57:cd:71:0b:c5:2c:d1:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE
        Validity
            Not Before: Apr  3 18:26:26 2024 GMT
            Not After : Apr  2 18:31:26 2025 GMT
        Subject: CN=3082010A0282010100B22D99934D3D5A9F6576786532B78F310F5BD221FB242F0BC3BCA14F2403AED9204CBD1C22B4EC1203018D3672579A77FF62546A19E2B0F49E51265B94F51781F5E61C31F6A02588E7FD5EE85D505A8C18347302D24E1702AE551515ACEFFF5210A723AF1D3E41E52CBAD2D1FC19A7C07B470899F3B410DED3204825FC5E04E34D21E9DC66E2FDB3EC6F6891B9F49B5E36232AFB1E887418C88DF5143D06CE9BB5E5DD52D77712DB065E2885D014C9DD4D6AE44BDECD7733B427B45DBA485120A904628E24C5672B4D17317BEF8CA8E99F5539DD9737E1E53BE707190E8DA8D1047B7EC0233B8B4079C2834FA8C0427A6FCE24F06689F3C9D62D2E7A21869B6B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2d:99:93:4d:3d:5a:9f:65:76:78:65:32:b7:
                    8f:31:0f:5b:d2:21:fb:24:2f:0b:c3:bc:a1:4f:24:
                    03:ae:d9:20:4c:bd:1c:22:b4:ec:12:03:01:8d:36:
                    72:57:9a:77:ff:62:54:6a:19:e2:b0:f4:9e:51:26:
                    5b:94:f5:17:81:f5:e6:1c:31:f6:a0:25:88:e7:fd:
                    5e:e8:5d:50:5a:8c:18:34:73:02:d2:4e:17:02:ae:
                    55:15:15:ac:ef:ff:52:10:a7:23:af:1d:3e:41:e5:
                    2c:ba:d2:d1:fc:19:a7:c0:7b:47:08:99:f3:b4:10:
                    de:d3:20:48:25:fc:5e:04:e3:4d:21:e9:dc:66:e2:
                    fd:b3:ec:6f:68:91:b9:f4:9b:5e:36:23:2a:fb:1e:
                    88:74:18:c8:8d:f5:14:3d:06:ce:9b:b5:e5:dd:52:
                    d7:77:12:db:06:5e:28:85:d0:14:c9:dd:4d:6a:e4:
                    4b:de:cd:77:33:b4:27:b4:5d:ba:48:51:20:a9:04:
                    62:8e:24:c5:67:2b:4d:17:31:7b:ef:8c:a8:e9:9f:
                    55:39:dd:97:37:e1:e5:3b:e7:07:19:0e:8d:a8:d1:
                    04:7b:7e:c0:23:3b:8b:40:79:c2:83:4f:a8:c0:42:
                    7a:6f:ce:24:f0:66:89:f3:c9:d6:2d:2e:7a:21:86:
                    9b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:35:4A:05:16:B2:D8:1F:1D:0A:96:C1:54:FF:31:95:FC:89:6A:4C
            X509v3 Authority Key Identifier:
                keyid:3A:BF:96:D1:8E:7E:05:A2:4E:DA:A1:17:D2:B9:E7:6A:07:FE:C5:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3230302e33362e3231362e302f32322d3234203d3e20323731333637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:c7:df:f3:12:6c:3e:0c:54:73:37:6e:be:29:a2:26:7b:0a:
         51:ab:3d:69:c0:fc:ec:f3:db:d4:df:79:41:f6:c2:a2:dc:b7:
         bb:31:6a:13:ea:48:a3:ef:d2:51:b0:55:2f:3a:8d:79:7a:eb:
         6c:59:d3:df:ae:ab:aa:f4:2b:46:03:65:58:7e:83:35:bb:4d:
         d1:cb:d1:dd:1e:5c:e8:a5:aa:49:ae:52:68:c6:8c:80:b1:18:
         de:d4:f4:7b:0f:4d:aa:9d:fd:35:36:1c:8c:b3:4e:50:8f:50:
         99:0c:66:8c:2f:99:1c:0b:79:f6:c4:54:a6:98:1c:0a:1f:90:
         31:72:0e:69:9b:0c:1e:90:62:be:2a:4f:b2:10:a2:6a:90:72:
         21:55:1a:24:e4:34:98:31:a5:b2:63:c4:06:08:a7:82:50:c2:
         6c:65:64:7d:68:42:5b:23:39:c1:fb:a4:7e:57:03:ca:f7:64:
         28:89:b3:00:0d:9b:c4:60:3f:91:b5:99:90:8a:19:b2:91:ba:
         dd:84:d1:8d:13:ef:db:c9:b2:9b:d4:ff:5c:66:e1:0a:55:fc:
         69:18:62:60:ca:22:cc:aa:dc:56:68:0d:b4:1e:8c:41:96:df:
         39:52:69:d3:83:df:75:00:6f:11:27:72:71:fa:77:e6:a4:e8:
         3f:67:a4:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:48 2024 by rpki-client on console-fra.rpki-client.org