Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/1/3230302e392e3136302e302f32322d3234203d3e20323638333233.roa
File:                     3230302e392e3136302e302f32322d3234203d3e20323638333233.roa (raw, json)
Hash identifier:          gd9V2ieI8jhGbifZcJbt0dizQXfDVTtfE+QZIRXgZeI=
Subject key identifier:   F5:50:C1:EC:02:2F:C6:64:28:16:6F:5B:E4:80:A1:46:A8:32:D5:B6
Certificate issuer:       /CN=CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8
Certificate serial:       0ABBE91C888B3294525A9F8142E11EBBE0E0FE83
Authority key identifier: CC:1E:CC:FA:C7:A6:BB:A6:B9:3A:63:2D:D1:C6:10:06:86:34:4B:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/1/3230302e392e3136302e302f32322d3234203d3e20323638333233.roa
Signing time:             Thu 04 Apr 2024 03:01:23 +0000
ROA not before:           Thu 04 Apr 2024 02:56:23 +0000
ROA not after:            Thu 03 Apr 2025 03:01:23 +0000
asID:                     268323
IP address blocks:        200.9.160.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.crl
                          rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:45:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:bb:e9:1c:88:8b:32:94:52:5a:9f:81:42:e1:1e:bb:e0:e0:fe:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8
        Validity
            Not Before: Apr  4 02:56:23 2024 GMT
            Not After : Apr  3 03:01:23 2025 GMT
        Subject: CN=F550C1EC022FC66428166F5BE480A146A832D5B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7d:27:ab:75:38:1d:47:f5:a5:2f:11:2e:62:
                    52:18:92:6c:0f:53:aa:bc:53:5d:7d:33:d5:d6:c5:
                    00:c8:af:7f:c2:5f:1b:58:9a:9c:91:4b:1f:33:65:
                    9e:93:ac:17:a6:e2:df:67:16:32:f3:0a:1c:e9:d3:
                    3c:5e:3f:8b:d8:84:6b:01:57:4a:b2:c5:e9:02:d0:
                    87:c3:27:d4:b7:f4:2e:e5:42:bc:5e:b5:0c:f2:94:
                    a1:32:fb:c4:86:dc:2c:83:11:b5:17:57:f0:07:f6:
                    68:7a:91:5a:6f:e6:39:50:e2:0a:00:f3:d2:c8:54:
                    9f:13:bd:01:7d:67:f0:8f:ea:b4:00:f3:bc:f5:65:
                    6c:55:e8:31:ef:07:83:05:a3:87:6e:ee:27:b0:6d:
                    94:5c:a9:f3:22:f1:f5:45:7f:99:54:44:98:2d:2f:
                    3a:6f:ba:8a:fd:2a:88:cf:52:06:86:a8:01:3c:68:
                    34:b9:8a:e8:d1:f9:85:a8:9b:15:1d:9d:10:80:da:
                    0d:e4:cd:84:aa:58:be:35:cc:49:70:2e:0f:43:69:
                    f6:7f:8f:02:b4:53:5e:9f:50:bd:8a:9f:0b:dd:2b:
                    ed:95:38:ca:7b:af:74:7b:50:1a:00:74:2a:89:44:
                    70:69:98:0a:d5:52:bb:1f:e0:56:8a:3c:2c:7f:7a:
                    66:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:50:C1:EC:02:2F:C6:64:28:16:6F:5B:E4:80:A1:46:A8:32:D5:B6
            X509v3 Authority Key Identifier:
                keyid:CC:1E:CC:FA:C7:A6:BB:A6:B9:3A:63:2D:D1:C6:10:06:86:34:4B:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/1/3230302e392e3136302e302f32322d3234203d3e20323638333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:f5:c0:f7:6a:c9:ef:b9:e5:1b:3f:62:b3:21:69:6d:15:26:
         3b:f0:e1:52:33:22:61:2e:fb:3c:b0:d1:78:4d:0f:4c:aa:90:
         f6:5f:07:d8:66:ce:40:ab:ee:c2:5e:a8:d8:21:2f:bc:26:92:
         9b:a9:68:fc:8d:5e:2a:d2:41:51:40:f6:6f:27:bd:cd:a5:89:
         77:c9:04:a6:7b:7d:78:de:eb:98:e2:f6:e6:b6:a2:d1:e4:fd:
         a1:ec:2f:29:74:56:1e:ac:22:dd:80:29:b9:21:80:4f:05:16:
         bd:0e:c8:d3:bc:3c:8b:33:9c:53:67:5a:23:60:a2:1f:74:f3:
         13:7f:6e:65:b0:2e:5a:55:8e:27:dd:54:18:a8:5f:c3:44:95:
         db:d9:a8:14:f0:2a:dd:0a:71:ac:77:4c:31:e4:f7:59:66:7a:
         ce:3c:6b:c0:93:3a:2c:79:cb:e3:ce:d4:0e:6b:89:3b:36:44:
         bb:8f:bc:94:51:68:4a:23:e0:ef:9b:94:a7:96:4f:06:93:5c:
         f0:57:86:01:e9:ab:01:42:b2:32:ef:62:72:3d:b3:f1:04:eb:
         70:4e:7c:c0:83:c8:e8:da:a5:dd:e8:84:5f:90:82:bd:3f:89:
         87:30:ae:07:4f:57:c6:ef:12:54:61:8e:27:9d:80:27:51:64:
         0d:c2:54:ea
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUCrvpHIiLMpRSWp+BQuEeu+Dg/oMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0MxRUNDRkFDN0E2QkJBNkI5M0E2MzJERDFDNjEwMDY4
NjM0NEJEODAeFw0yNDA0MDQwMjU2MjNaFw0yNTA0MDMwMzAxMjNaMDMxMTAvBgNV
BAMTKEY1NTBDMUVDMDIyRkM2NjQyODE2NkY1QkU0ODBBMTQ2QTgzMkQ1QjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIfSerdTgdR/WlLxEuYlIYkmwP
U6q8U119M9XWxQDIr3/CXxtYmpyRSx8zZZ6TrBem4t9nFjLzChzp0zxeP4vYhGsB
V0qyxekC0IfDJ9S39C7lQrxetQzylKEy+8SG3CyDEbUXV/AH9mh6kVpv5jlQ4goA
89LIVJ8TvQF9Z/CP6rQA87z1ZWxV6DHvB4MFo4du7iewbZRcqfMi8fVFf5lURJgt
Lzpvuor9KojPUgaGqAE8aDS5iujR+YWomxUdnRCA2g3kzYSqWL41zElwLg9DafZ/
jwK0U16fUL2KnwvdK+2VOMp7r3R7UBoAdCqJRHBpmArVUrsf4FaKPCx/emZPAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU9VDB7AIvxmQoFm9b5IChRqgy1bYwHwYDVR0j
BBgwFoAUzB7M+semu6a5OmMt0cYQBoY0S9gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQndBWlZGcHVuOERSY2Y3MjdNb3JLYnRXdnZ0em5BU2V6Mkh1WHBIODFo
bmYvMS9DQzFFQ0NGQUM3QTZCQkE2QjkzQTYzMkREMUM2MTAwNjg2MzQ0QkQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NDMUVDQ0ZBQzdBNkJCQTZC
OTNBNjMyREQxQzYxMDA2ODYzNDRCRDguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J3QVpWRnB1bjhEUmNmNzI3TW9yS2J0V3Z2dHpuQVNlejJIdVhwSDgxaG5mLzEv
MzIzMDMwMmUzOTJlMzEzNjMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM4
MzMzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCyAmgMA0GCSqGSIb3DQEBCwUAA4IBAQBX9cD3asnv
ueUbP2KzIWltFSY78OFSMyJhLvs8sNF4TQ9MqpD2XwfYZs5Aq+7CXqjYIS+8JpKb
qWj8jV4q0kFRQPZvJ73NpYl3yQSme3143uuY4vbmtqLR5P2h7C8pdFYerCLdgCm5
IYBPBRa9DsjTvDyLM5xTZ1ojYKIfdPMTf25lsC5aVY4n3VQYqF/DRJXb2agU8Crd
CnGsd0wx5PdZZnrOPGvAkzosecvjztQOa4k7NkS7j7yUUWhKI+Dvm5Snlk8Gk1zw
V4YB6asBQrIy72JyPbPxBOtwTnzAg8jo2qXd6IRfkIK9P4mHMK4HT1fG7xJUYY4n
nYAnUWQNwlTq
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:13 2024 by rpki-client on console-ams.rpki-client.org