Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/3230302e37332e3231362e302f32332d3233203d3e20323730343833.roa
File:                     3230302e37332e3231362e302f32332d3233203d3e20323730343833.roa (raw, json)
Hash identifier:          MIkhVlDnwen3KgYn549gvLBuWCjDnfcMsWfKHtG1Upw=
Subject key identifier:   E1:7E:76:A6:68:C8:EC:57:70:4F:90:5B:AA:08:B4:CD:FF:85:CB:61
Certificate issuer:       /CN=7F2EF3A425107DE2F2735272693503639C373EAC
Certificate serial:       2F4032690AF9BC5492EB6A7A4413FFB69FA8EA15
Authority key identifier: 7F:2E:F3:A4:25:10:7D:E2:F2:73:52:72:69:35:03:63:9C:37:3E:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F2EF3A425107DE2F2735272693503639C373EAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/3230302e37332e3231362e302f32332d3233203d3e20323730343833.roa
Signing time:             Tue 09 Jul 2024 20:21:55 +0000
ROA not before:           Tue 09 Jul 2024 20:16:55 +0000
ROA not after:            Tue 08 Jul 2025 20:21:55 +0000
asID:                     270483
IP address blocks:        200.73.216.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/7F2EF3A425107DE2F2735272693503639C373EAC.crl
                          rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/7F2EF3A425107DE2F2735272693503639C373EAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F2EF3A425107DE2F2735272693503639C373EAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:40:32:69:0a:f9:bc:54:92:eb:6a:7a:44:13:ff:b6:9f:a8:ea:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F2EF3A425107DE2F2735272693503639C373EAC
        Validity
            Not Before: Jul  9 20:16:55 2024 GMT
            Not After : Jul  8 20:21:55 2025 GMT
        Subject: CN=E17E76A668C8EC57704F905BAA08B4CDFF85CB61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:17:07:2c:d3:ec:0d:99:af:aa:f2:93:83:2c:
                    bd:6c:85:1f:8a:97:cb:db:38:c9:14:72:35:93:7e:
                    fb:03:86:26:2c:49:01:d8:36:a7:54:f4:b5:4d:79:
                    c8:5f:85:5c:a6:b1:70:d3:a1:27:50:ff:9b:54:5d:
                    8d:ce:49:37:22:95:78:92:f3:14:59:61:11:25:3d:
                    dd:d4:eb:03:00:bc:06:8b:45:3e:59:f7:a8:30:c8:
                    fa:f3:92:12:35:aa:2a:4e:2f:4e:11:84:16:01:62:
                    d0:e7:dc:e6:95:41:b0:ab:3d:bb:be:71:19:6a:62:
                    5c:ae:1f:dd:33:da:67:1c:7e:e6:7a:dc:a9:66:a3:
                    29:eb:a2:2c:c0:d7:65:14:40:2d:d4:11:1c:85:ac:
                    5f:8c:c0:36:f3:52:ad:a8:7d:76:93:c1:5a:ee:c2:
                    3d:5f:7e:48:ab:23:94:50:a8:7f:f4:33:bc:c0:38:
                    42:17:8b:40:f2:65:52:07:f4:e2:21:52:6b:8d:b6:
                    5f:d4:19:ff:24:c7:78:48:56:a0:67:ac:44:e0:a8:
                    8c:74:9a:27:ae:7f:4b:f0:33:2f:b9:41:9d:b5:0a:
                    1f:9d:e9:21:65:24:e5:91:69:56:42:97:00:7d:d9:
                    c6:bd:e9:5c:ae:d5:ce:b1:68:62:42:62:d7:2e:4b:
                    ae:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:7E:76:A6:68:C8:EC:57:70:4F:90:5B:AA:08:B4:CD:FF:85:CB:61
            X509v3 Authority Key Identifier:
                keyid:7F:2E:F3:A4:25:10:7D:E2:F2:73:52:72:69:35:03:63:9C:37:3E:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/7F2EF3A425107DE2F2735272693503639C373EAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F2EF3A425107DE2F2735272693503639C373EAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/3230302e37332e3231362e302f32332d3233203d3e20323730343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.73.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d8:72:b6:fd:e6:1c:56:dc:b4:ed:b4:24:f7:b9:31:2e:7f:1b:
         b1:97:b7:fe:67:69:01:4e:b3:02:ce:4b:cb:27:78:cc:f6:24:
         a4:64:53:10:aa:d2:a1:fc:b8:03:d2:68:c7:0a:cf:e5:83:6b:
         a6:93:fe:47:6e:66:1b:76:27:db:68:81:fe:c8:17:99:fd:bc:
         92:b5:96:c2:11:6e:41:51:04:56:84:ab:49:de:e9:c0:14:dd:
         1e:9c:f6:f6:fe:6a:07:5b:88:a5:af:50:1e:89:df:a2:86:a7:
         39:45:09:0e:b5:61:d6:83:ea:11:c2:c6:9b:02:a7:87:48:b0:
         50:10:f8:f1:ce:06:ca:a0:8f:7c:0d:f1:ce:33:1f:bb:f6:87:
         d3:eb:70:d2:93:76:59:b2:ec:1a:fb:b6:35:d2:2f:96:20:51:
         71:17:a5:39:2f:ed:0b:b2:ed:61:e3:57:d8:4d:77:65:ec:64:
         8f:fd:c9:ae:3c:1a:fa:34:b2:6c:57:81:ba:3a:5c:b0:86:e7:
         26:31:80:06:58:65:03:72:6a:b5:bf:d3:f8:7d:a0:e3:1d:8d:
         1d:d0:d2:8d:72:ff:36:e9:b0:c4:8f:49:4a:4d:f7:95:a9:49:
         89:73:b0:be:f5:8b:be:05:fb:8b:fa:2e:55:e7:2e:37:a0:09:
         b5:92:55:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:07 2024 by rpki-client on console-fra.rpki-client.org