Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/3230302e37332e3231382e302f32342d3234203d3e20323730343833.roa
File:                     3230302e37332e3231382e302f32342d3234203d3e20323730343833.roa (raw, json)
Hash identifier:          Tpw923nAB9YcUCoraoKYcVYsoIgYNcT+IGtcVQFTqKc=
Subject key identifier:   C9:FA:03:18:17:7E:5A:24:2C:4D:46:27:E6:BF:98:28:56:D2:A1:0B
Certificate issuer:       /CN=7F2EF3A425107DE2F2735272693503639C373EAC
Certificate serial:       5A055DD5B66425FB7FFC737AE2012D736B2E1E7C
Authority key identifier: 7F:2E:F3:A4:25:10:7D:E2:F2:73:52:72:69:35:03:63:9C:37:3E:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F2EF3A425107DE2F2735272693503639C373EAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/3230302e37332e3231382e302f32342d3234203d3e20323730343833.roa
Signing time:             Tue 09 Jul 2024 20:21:55 +0000
ROA not before:           Tue 09 Jul 2024 20:16:55 +0000
ROA not after:            Tue 08 Jul 2025 20:21:55 +0000
asID:                     270483
IP address blocks:        200.73.218.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/7F2EF3A425107DE2F2735272693503639C373EAC.crl
                          rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/7F2EF3A425107DE2F2735272693503639C373EAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F2EF3A425107DE2F2735272693503639C373EAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:05:5d:d5:b6:64:25:fb:7f:fc:73:7a:e2:01:2d:73:6b:2e:1e:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F2EF3A425107DE2F2735272693503639C373EAC
        Validity
            Not Before: Jul  9 20:16:55 2024 GMT
            Not After : Jul  8 20:21:55 2025 GMT
        Subject: CN=C9FA0318177E5A242C4D4627E6BF982856D2A10B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1f:3b:5e:97:8d:28:7b:d1:c6:19:c4:e6:ad:
                    25:38:e7:34:be:55:a5:e4:0d:8b:8e:70:1e:ec:89:
                    7c:54:1f:db:b4:cf:32:99:e2:86:59:20:9e:9f:3d:
                    6c:61:3f:3c:3e:e2:6b:bd:fe:a2:ca:ca:fc:23:a0:
                    29:48:fa:d4:33:22:c0:d0:f0:a6:fc:90:9b:dc:eb:
                    55:05:33:9e:3c:f4:6e:c8:fa:87:37:2e:4d:0e:fc:
                    f8:fb:fb:8a:7e:c2:fb:5d:b1:f5:76:8c:04:e6:83:
                    06:7d:d5:78:6f:12:08:26:63:41:62:ec:59:6f:f1:
                    c1:71:1b:0e:c6:9a:64:93:d6:cf:2d:11:64:fe:45:
                    ae:cd:d1:1f:b6:76:aa:32:b6:18:e4:0c:ae:84:d3:
                    76:93:77:51:8d:3a:51:f6:80:9e:37:f8:a9:e4:74:
                    67:51:97:dd:69:c6:de:c1:9c:15:66:87:11:d1:24:
                    f0:cd:28:2e:6b:08:fd:d0:ce:17:89:68:e9:ef:64:
                    70:bf:5a:ef:aa:4d:f6:04:18:3c:14:52:93:9e:cf:
                    91:fa:25:3a:8e:0c:a4:3f:ab:7f:ff:9e:d5:95:ac:
                    f4:ee:e4:8b:b2:c9:08:22:31:ac:a7:4a:73:9e:cc:
                    fc:33:ce:cd:cd:18:3a:da:de:eb:d1:8a:f8:71:06:
                    c1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:FA:03:18:17:7E:5A:24:2C:4D:46:27:E6:BF:98:28:56:D2:A1:0B
            X509v3 Authority Key Identifier:
                keyid:7F:2E:F3:A4:25:10:7D:E2:F2:73:52:72:69:35:03:63:9C:37:3E:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/7F2EF3A425107DE2F2735272693503639C373EAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F2EF3A425107DE2F2735272693503639C373EAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/3230302e37332e3231382e302f32342d3234203d3e20323730343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.73.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:a2:2b:1f:23:37:14:da:50:28:e3:7c:28:72:7c:70:bb:87:
         59:96:2c:28:7e:92:f1:00:9f:8b:b5:d4:9b:5a:0d:76:ef:5d:
         57:36:53:6f:54:26:9e:b5:d5:f7:81:d9:3e:ea:f0:15:ad:58:
         c7:12:89:9d:2c:eb:22:45:f9:2e:69:74:7d:b8:3b:9e:1a:f7:
         cf:28:28:f5:64:2b:cc:60:7a:88:8b:8a:2e:08:80:7b:75:29:
         68:69:23:0f:1e:80:ed:13:b0:8b:f1:00:8d:ec:01:c6:5f:9e:
         49:94:31:30:da:fd:09:1b:65:ef:5d:18:b1:3f:09:f5:33:3a:
         3c:74:92:5d:bb:51:df:f5:91:74:9e:c0:06:8e:18:cb:14:5e:
         10:72:38:42:9e:0e:79:16:9d:41:8c:03:b4:b7:65:17:12:9d:
         7e:c2:f5:c2:11:b6:7b:a4:43:f9:b9:25:9d:c9:b6:1e:ed:4f:
         a4:31:3a:0b:99:0c:bc:a5:11:b9:86:b2:ff:e0:3e:87:da:78:
         59:41:61:7a:4e:6c:18:b5:fb:5e:be:9c:0e:d1:d0:1f:e9:f9:
         14:22:56:8d:e3:87:97:76:05:29:f1:60:7f:57:71:ef:53:12:
         4e:8f:4f:0f:e5:ca:0a:0a:fa:11:c0:9a:1c:a1:ff:84:3b:09:
         4d:39:ff:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:36 2024 by rpki-client on console-ams.rpki-client.org