Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3230372e3234382e32382e302f32322d3234203d3e20323639303733.roa
File:                     3230372e3234382e32382e302f32322d3234203d3e20323639303733.roa (raw, json)
Hash identifier:          jnhANjFjHJGWbp6bsRoGCuOAGDyU/Q/p451yZn902WM=
Subject key identifier:   9C:20:6D:52:F6:CE:67:8A:58:F0:D9:16:44:64:71:B9:38:46:CE:5D
Certificate issuer:       /CN=3FF96820195E6A66E38F9102B4B56F0E4EB31831
Certificate serial:       283F50C528EDF124741B38F27CE561FC7ED85131
Authority key identifier: 3F:F9:68:20:19:5E:6A:66:E3:8F:91:02:B4:B5:6F:0E:4E:B3:18:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3230372e3234382e32382e302f32322d3234203d3e20323639303733.roa
Signing time:             Thu 24 Oct 2024 13:19:57 +0000
ROA not before:           Thu 24 Oct 2024 13:14:57 +0000
ROA not after:            Thu 23 Oct 2025 13:19:57 +0000
asID:                     269073
IP address blocks:        207.248.28.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.crl
                          rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 09:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:3f:50:c5:28:ed:f1:24:74:1b:38:f2:7c:e5:61:fc:7e:d8:51:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF96820195E6A66E38F9102B4B56F0E4EB31831
        Validity
            Not Before: Oct 24 13:14:57 2024 GMT
            Not After : Oct 23 13:19:57 2025 GMT
        Subject: CN=9C206D52F6CE678A58F0D916446471B93846CE5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:46:43:23:b8:ad:59:df:51:5a:9c:78:54:00:
                    9b:29:1b:e7:8b:cc:7b:09:0e:52:3d:dd:bf:82:e1:
                    bd:42:a5:8a:dd:68:a3:54:f0:8f:a2:02:ba:1d:66:
                    07:ba:aa:f9:57:63:46:d4:45:e5:38:df:80:0d:ba:
                    e0:3f:81:b0:54:1d:3a:e0:49:26:0e:19:7d:18:eb:
                    9a:83:d7:96:05:d2:86:d2:7c:1c:85:69:2b:90:18:
                    e9:52:b8:53:1c:62:ce:60:47:d9:79:8c:f9:fc:32:
                    12:cc:02:6b:40:a5:47:ce:43:49:91:8f:67:60:95:
                    5d:53:e6:01:c0:39:68:cd:e8:e7:40:04:59:75:3b:
                    ca:1f:ce:2e:70:3f:58:d3:ed:c9:8a:a2:cf:62:8b:
                    2a:a9:bc:d4:f4:69:61:94:23:f9:82:98:6d:d3:23:
                    11:48:52:9b:7c:b5:7f:53:16:6e:19:c7:6d:d5:52:
                    2d:f6:4e:cd:87:d9:77:6b:b9:e7:c6:65:7f:21:80:
                    b1:eb:b3:65:03:e6:f2:63:c2:32:c3:21:40:b2:91:
                    08:d6:75:b0:21:2d:37:ef:ec:48:45:65:84:9c:e3:
                    73:4f:ff:da:df:d6:94:06:2e:73:7d:eb:1c:d3:b0:
                    e4:b8:0c:b4:8d:94:9f:16:c1:42:1e:3a:4b:6b:df:
                    97:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:20:6D:52:F6:CE:67:8A:58:F0:D9:16:44:64:71:B9:38:46:CE:5D
            X509v3 Authority Key Identifier:
                keyid:3F:F9:68:20:19:5E:6A:66:E3:8F:91:02:B4:B5:6F:0E:4E:B3:18:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3230372e3234382e32382e302f32322d3234203d3e20323639303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:11:85:9a:70:1f:09:32:ca:5e:70:11:3f:a7:fd:13:2b:0f:
         ea:63:52:e8:65:be:cd:b3:05:dc:d3:6c:f3:50:84:c1:03:97:
         a8:19:ae:4e:e1:e2:e8:9a:68:ed:d5:8c:03:c9:f5:ec:37:e6:
         34:5d:05:08:50:23:e2:16:df:5b:b3:df:14:8a:b3:3f:be:b2:
         c2:b0:aa:6b:71:73:ee:da:e7:a4:00:1e:78:f5:39:fc:3a:dc:
         90:c8:21:e5:f3:65:94:c2:bc:5f:fd:3e:ba:74:64:ec:e7:38:
         8d:d2:2b:e4:34:80:c7:67:da:31:4f:ee:1e:dc:fb:23:82:dd:
         e0:e3:02:1e:75:70:42:62:a4:8b:56:d3:ff:c6:e8:75:24:e2:
         42:f6:4b:29:7d:42:a7:6e:ea:3c:14:90:96:91:46:7a:4b:38:
         0e:28:f5:a2:a0:64:b8:ba:e4:de:0a:1e:99:0c:57:00:6c:82:
         f2:8e:a7:ad:99:14:34:a2:ad:d2:95:43:e8:22:e3:77:e8:67:
         e3:da:35:65:de:9b:90:3f:f1:3e:4c:6b:e3:a7:80:3f:7f:26:
         de:9a:00:47:21:dc:56:ee:36:ca:1f:47:af:a3:8f:ca:99:22:
         36:be:10:d5:a0:a6:9f:b5:5e:c4:70:4d:52:cf:ad:ad:61:52:
         cf:ba:f6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:23 2024 by rpki-client on console-ams.rpki-client.org