Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3230302e3232392e3230382e302f32322d3232203d3e203631373738.roa
File:                     3230302e3232392e3230382e302f32322d3232203d3e203631373738.roa (raw, json)
Hash identifier:          F774Iqqqp7kKY1OCOIKYQ5y00+r/sWlfNOcIWKYI/GM=
Subject key identifier:   1E:C8:25:D7:45:BB:CF:14:9C:55:62:E5:FD:53:9A:66:D4:DF:B4:D0
Certificate issuer:       /CN=3496860CED46E82860498DD946601D168147920B
Certificate serial:       6A2BEE992C36BBECB637A378779E9F99EBD18EEF
Authority key identifier: 34:96:86:0C:ED:46:E8:28:60:49:8D:D9:46:60:1D:16:81:47:92:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3496860CED46E82860498DD946601D168147920B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3230302e3232392e3230382e302f32322d3232203d3e203631373738.roa
Signing time:             Wed 10 Jul 2024 16:35:38 +0000
ROA not before:           Wed 10 Jul 2024 16:30:38 +0000
ROA not after:            Wed 09 Jul 2025 16:35:38 +0000
asID:                     61778
IP address blocks:        200.229.208.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3496860CED46E82860498DD946601D168147920B.crl
                          rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3496860CED46E82860498DD946601D168147920B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3496860CED46E82860498DD946601D168147920B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:2b:ee:99:2c:36:bb:ec:b6:37:a3:78:77:9e:9f:99:eb:d1:8e:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3496860CED46E82860498DD946601D168147920B
        Validity
            Not Before: Jul 10 16:30:38 2024 GMT
            Not After : Jul  9 16:35:38 2025 GMT
        Subject: CN=1EC825D745BBCF149C5562E5FD539A66D4DFB4D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f4:dc:ab:4f:2d:ac:df:c5:2e:ca:55:0c:60:
                    ec:11:49:61:42:b7:07:3c:cd:be:4b:da:66:58:e3:
                    4e:1f:a5:77:f0:c9:4f:cd:90:b8:3b:24:7f:c8:15:
                    69:1c:15:c4:26:13:5b:c9:0c:40:e0:26:94:35:73:
                    88:16:be:58:e7:ea:69:de:39:54:12:cf:d8:66:1a:
                    b6:57:92:de:ac:c5:28:01:d5:dc:a7:4a:9f:15:b0:
                    6f:08:67:05:fe:61:bf:93:f7:ab:09:c5:62:ed:78:
                    e3:db:5a:51:b6:64:49:11:df:44:2f:0c:ae:6e:0c:
                    38:f8:7e:a5:f9:cf:4f:61:fb:1e:dd:33:5b:fb:11:
                    77:a8:02:00:fc:fe:1e:67:24:27:e4:a5:fa:91:4a:
                    ba:43:98:a7:4a:3f:3d:de:b8:d5:6b:48:33:84:e0:
                    14:1a:a8:52:db:6a:df:d7:19:45:b1:76:b9:0c:ab:
                    a3:aa:d6:7b:89:67:ae:1a:b3:0e:e7:76:cf:58:fa:
                    df:a8:9c:55:60:ba:2d:09:65:d3:94:eb:cb:bb:86:
                    c2:3f:08:8b:75:d2:2e:cf:5a:12:fc:9b:f2:31:9b:
                    79:7b:1b:11:bb:31:9b:ca:b7:26:81:0c:5c:29:89:
                    27:65:22:bc:9e:5a:71:3d:f6:05:ae:78:5f:ed:ec:
                    64:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:C8:25:D7:45:BB:CF:14:9C:55:62:E5:FD:53:9A:66:D4:DF:B4:D0
            X509v3 Authority Key Identifier:
                keyid:34:96:86:0C:ED:46:E8:28:60:49:8D:D9:46:60:1D:16:81:47:92:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3496860CED46E82860498DD946601D168147920B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3496860CED46E82860498DD946601D168147920B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3230302e3232392e3230382e302f32322d3232203d3e203631373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:9a:d4:1a:1f:ec:7c:67:5b:be:8a:e7:40:83:1f:db:54:86:
         39:32:55:86:37:e8:1e:3e:78:a4:ca:49:25:95:a8:cc:54:ec:
         e7:5c:02:0b:d5:96:a6:1e:48:27:65:05:1f:ee:6c:19:48:31:
         8e:e0:49:22:05:e3:c8:e3:0b:f5:29:5d:97:b7:e3:42:45:8e:
         f4:d1:0e:ab:1d:f1:4c:a7:f1:45:35:b8:14:1c:45:a7:2f:d8:
         cd:b8:92:c1:8a:cd:0a:6f:1f:4b:a4:ce:61:0e:e4:ed:c0:d1:
         8d:d1:b4:2b:c9:ea:90:e6:ef:ef:3f:b2:ae:dc:45:04:d7:61:
         13:10:a8:38:8f:ac:e1:0b:a5:96:e1:9d:07:3b:22:19:9d:a5:
         de:1a:68:08:69:f1:4f:34:4e:58:66:32:3a:8b:c1:da:0f:80:
         7a:6e:5e:c2:e9:0a:9a:34:42:a3:2f:af:5c:18:65:eb:c0:ed:
         b1:39:23:c9:9b:9e:f2:7c:f0:1c:0a:d8:e1:77:bc:a0:de:0d:
         21:f2:c1:95:fa:57:87:08:87:b2:59:6f:3b:03:4a:b3:39:fa:
         72:0e:50:e8:de:a9:94:8f:f7:4d:d2:45:83:db:6c:ea:a9:d0:
         71:5b:0c:67:f0:49:0e:e8:97:1b:1b:66:09:05:28:14:88:1b:
         c0:9d:81:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:43:35 2024 by rpki-client on console-ams.rpki-client.org