Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/3230302e37332e3231392e302f32342d3234203d3e20323730343833.roa
File:                     3230302e37332e3231392e302f32342d3234203d3e20323730343833.roa (raw, json)
Hash identifier:          wT/uvNoNbBn0HSDjIF363GICXlxHpxo16QHpY+qS0Hw=
Subject key identifier:   66:37:17:D3:9A:63:95:81:31:93:A2:EC:9D:03:9A:FF:DE:66:36:B0
Certificate issuer:       /CN=7F2EF3A425107DE2F2735272693503639C373EAC
Certificate serial:       3B6CF8DC8616E3B3DCCD08C2B47ED4646E8F6593
Authority key identifier: 7F:2E:F3:A4:25:10:7D:E2:F2:73:52:72:69:35:03:63:9C:37:3E:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F2EF3A425107DE2F2735272693503639C373EAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/3230302e37332e3231392e302f32342d3234203d3e20323730343833.roa
Signing time:             Tue 09 Jul 2024 20:21:57 +0000
ROA not before:           Tue 09 Jul 2024 20:16:57 +0000
ROA not after:            Tue 08 Jul 2025 20:21:57 +0000
asID:                     270483
IP address blocks:        200.73.219.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/7F2EF3A425107DE2F2735272693503639C373EAC.crl
                          rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/7F2EF3A425107DE2F2735272693503639C373EAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F2EF3A425107DE2F2735272693503639C373EAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:6c:f8:dc:86:16:e3:b3:dc:cd:08:c2:b4:7e:d4:64:6e:8f:65:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F2EF3A425107DE2F2735272693503639C373EAC
        Validity
            Not Before: Jul  9 20:16:57 2024 GMT
            Not After : Jul  8 20:21:57 2025 GMT
        Subject: CN=663717D39A6395813193A2EC9D039AFFDE6636B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bf:c7:42:62:38:9d:ed:0a:cc:da:dc:65:4f:
                    0b:03:7b:33:fb:2c:0e:b4:43:88:36:ee:ea:10:c8:
                    7b:10:3f:6c:ad:8d:16:1f:14:b5:2b:60:bd:dd:c2:
                    47:96:2b:e9:10:94:c3:2f:c9:5f:19:44:21:48:5c:
                    c5:e1:94:e0:d3:83:f4:86:53:be:bf:7e:2f:63:c6:
                    03:4e:1d:1e:51:bf:63:eb:b4:70:44:fa:22:74:ce:
                    f3:9c:67:82:f2:30:2e:8a:35:f9:47:85:3e:c0:5c:
                    46:07:0c:80:c6:fd:a9:a5:67:4a:30:fd:c1:09:a6:
                    a7:62:c5:2f:05:57:8c:22:8e:e3:98:9a:0b:b0:8b:
                    93:d9:48:7f:71:a4:89:30:61:90:a9:9b:65:93:21:
                    d4:8e:59:20:e3:52:f0:03:9a:71:29:1b:6a:26:25:
                    60:4f:32:dd:e1:bb:6e:32:04:19:78:4e:f5:07:a5:
                    32:6c:d0:88:51:b5:fc:47:b5:3d:a2:f6:45:28:9b:
                    9c:3c:a7:4a:ec:a2:0c:fc:44:f0:a4:43:c8:4f:45:
                    e0:de:18:fa:bb:da:1b:b5:4d:d0:ea:d7:91:16:c6:
                    7b:d3:97:4c:00:b1:97:33:2f:5c:f9:83:22:8a:ab:
                    cb:77:8c:3c:b8:37:52:2c:53:73:80:3e:55:f6:ba:
                    2a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:37:17:D3:9A:63:95:81:31:93:A2:EC:9D:03:9A:FF:DE:66:36:B0
            X509v3 Authority Key Identifier:
                keyid:7F:2E:F3:A4:25:10:7D:E2:F2:73:52:72:69:35:03:63:9C:37:3E:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/7F2EF3A425107DE2F2735272693503639C373EAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F2EF3A425107DE2F2735272693503639C373EAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/3230302e37332e3231392e302f32342d3234203d3e20323730343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.73.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:b5:d0:3b:62:af:c4:ad:df:5c:7f:c9:48:2d:26:53:cd:8c:
         96:71:dd:e8:f9:60:6c:c0:7b:52:95:24:be:de:af:44:3a:0c:
         c0:03:01:da:b2:01:48:dc:25:47:11:89:05:08:e9:7b:69:56:
         fb:97:15:9b:ea:ef:c4:8d:b6:b5:5a:26:11:62:16:7d:84:03:
         ec:1d:05:a4:05:ca:72:14:a1:fb:da:40:53:40:bc:61:9a:12:
         f2:bc:0a:c5:00:8d:24:0b:07:90:71:42:eb:56:7d:3c:45:54:
         1d:a9:e9:62:b8:f3:ed:64:a6:4e:89:f8:cd:c9:f1:b1:f0:50:
         64:3e:ad:95:e0:6d:a7:3b:5f:13:ba:0e:aa:ec:12:45:46:81:
         ba:82:1b:d2:ae:0a:04:9b:e3:bc:60:25:ba:ed:a4:0c:d2:72:
         9c:be:95:4d:8c:07:bf:f2:93:f7:cc:c1:53:17:06:1b:f9:be:
         71:d7:21:08:54:ab:d0:4e:02:fc:91:da:33:11:55:9f:e0:c8:
         05:b8:34:f7:cc:db:be:6d:c8:ac:c7:53:bb:60:64:35:94:ae:
         27:ef:a8:cd:9b:6a:61:3e:81:d0:6a:5c:a2:8c:91:8a:9e:63:
         93:34:16:d0:c4:02:a1:2a:a5:35:12:47:95:8b:87:65:d6:5d:
         c0:38:ae:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:36 2024 by rpki-client on console-ams.rpki-client.org