Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3230302e3232392e3230392e302f32342d3234203d3e203631373738.roa
File:                     3230302e3232392e3230392e302f32342d3234203d3e203631373738.roa (raw, json)
Hash identifier:          3VaNl3cB+psCwl+Gsk22yVys40iepQjOI4lXQT30UDQ=
Subject key identifier:   1C:46:9F:AF:0A:C1:79:D7:06:7E:F2:B3:DC:AD:FB:D7:E1:6E:FB:B2
Certificate issuer:       /CN=3496860CED46E82860498DD946601D168147920B
Certificate serial:       410759C6D058794056CBA77DAB4267E76009DE30
Authority key identifier: 34:96:86:0C:ED:46:E8:28:60:49:8D:D9:46:60:1D:16:81:47:92:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3496860CED46E82860498DD946601D168147920B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3230302e3232392e3230392e302f32342d3234203d3e203631373738.roa
Signing time:             Wed 10 Jul 2024 16:35:37 +0000
ROA not before:           Wed 10 Jul 2024 16:30:37 +0000
ROA not after:            Wed 09 Jul 2025 16:35:37 +0000
asID:                     61778
IP address blocks:        200.229.209.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3496860CED46E82860498DD946601D168147920B.crl
                          rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3496860CED46E82860498DD946601D168147920B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3496860CED46E82860498DD946601D168147920B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:07:59:c6:d0:58:79:40:56:cb:a7:7d:ab:42:67:e7:60:09:de:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3496860CED46E82860498DD946601D168147920B
        Validity
            Not Before: Jul 10 16:30:37 2024 GMT
            Not After : Jul  9 16:35:37 2025 GMT
        Subject: CN=1C469FAF0AC179D7067EF2B3DCADFBD7E16EFBB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:12:ab:a5:df:53:9a:51:fe:eb:05:56:b1:71:
                    5c:33:62:46:3f:03:6f:ae:a1:13:f9:45:a5:b8:60:
                    aa:9a:a8:1a:d8:54:bb:5b:e6:50:54:55:35:e2:1f:
                    9f:65:09:d9:74:ea:66:f6:cb:b0:30:f5:b2:ea:c6:
                    4d:79:1d:5a:72:0a:01:71:70:6e:62:fb:21:54:28:
                    6e:d4:59:e6:f9:bf:8d:b9:5d:32:cb:ba:f9:fb:4e:
                    73:ac:e9:6c:fe:9b:5e:12:a7:53:9b:a8:26:bd:44:
                    36:52:a6:72:55:fc:e3:dd:b2:89:97:de:b6:c4:55:
                    dd:ac:84:22:4f:8f:21:8e:e1:15:05:94:f1:b6:d7:
                    8e:92:52:41:f7:23:4e:b5:4d:29:01:df:ca:c7:2c:
                    53:d3:10:77:7e:78:e3:87:e7:10:d3:47:54:85:be:
                    62:89:dd:69:d7:09:60:b9:b6:ac:cc:91:f0:b8:31:
                    93:f3:45:0e:04:71:f9:0b:bd:6f:bf:34:32:23:d9:
                    23:7f:e7:34:6d:2d:2c:db:8d:e0:16:25:cc:c7:a4:
                    c2:41:87:10:67:6e:e3:5d:16:1f:e1:f3:ad:b8:4f:
                    9c:ce:de:a4:c0:82:d9:89:a4:db:b6:a6:63:8f:dd:
                    0b:e5:9b:58:0d:64:f6:c7:91:8b:e9:49:e4:f2:4d:
                    81:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:46:9F:AF:0A:C1:79:D7:06:7E:F2:B3:DC:AD:FB:D7:E1:6E:FB:B2
            X509v3 Authority Key Identifier:
                keyid:34:96:86:0C:ED:46:E8:28:60:49:8D:D9:46:60:1D:16:81:47:92:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3496860CED46E82860498DD946601D168147920B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3496860CED46E82860498DD946601D168147920B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3230302e3232392e3230392e302f32342d3234203d3e203631373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:f0:ed:5e:6c:63:15:88:da:6b:b3:c8:34:a3:d4:e9:06:f4:
         ce:5b:94:bc:33:71:93:1f:b8:5e:16:a3:64:70:84:81:03:3d:
         7b:3c:9f:8a:f3:f5:bb:eb:8d:32:13:5e:77:e0:f5:e7:2a:7e:
         53:fd:be:e1:d6:34:0b:7a:d9:26:e1:be:4d:09:f2:f2:62:ca:
         df:0e:e3:4d:3c:41:a5:b8:e7:98:a9:6a:97:7c:81:9a:9a:af:
         55:be:cc:90:9e:3f:22:67:2f:1c:33:dc:bb:59:4c:3c:3c:b8:
         fe:ec:13:77:4d:57:07:a1:e0:d7:b5:67:ed:11:5e:45:9d:ec:
         66:c8:d7:a1:79:69:00:23:fc:d6:42:49:42:d6:d8:3a:95:02:
         34:1c:5b:db:6d:2d:de:89:0a:5c:43:0a:b9:7e:42:d8:37:0b:
         8d:9d:4f:d0:84:5a:60:b6:c0:2f:84:cb:f5:80:3e:a4:d3:39:
         af:21:f4:99:de:9e:e0:0c:bf:1d:8a:b7:b3:ae:d6:65:5e:d7:
         b3:f8:1b:76:bf:e7:e2:7a:b7:55:d0:53:ca:74:c5:28:f3:25:
         60:ec:d7:1f:79:f6:81:01:54:29:16:7e:3f:bb:4a:a0:ee:f0:
         cb:65:65:cb:a4:8c:37:85:c7:a4:ce:e7:e6:84:ba:39:45:8e:
         5d:1d:90:1a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQQdZxtBYeUBWy6d9q0Jn52AJ3jAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQ5Njg2MENFRDQ2RTgyODYwNDk4REQ5NDY2MDFEMTY4
MTQ3OTIwQjAeFw0yNDA3MTAxNjMwMzdaFw0yNTA3MDkxNjM1MzdaMDMxMTAvBgNV
BAMTKDFDNDY5RkFGMEFDMTc5RDcwNjdFRjJCM0RDQURGQkQ3RTE2RUZCQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPEqul31OaUf7rBVaxcVwzYkY/
A2+uoRP5RaW4YKqaqBrYVLtb5lBUVTXiH59lCdl06mb2y7Aw9bLqxk15HVpyCgFx
cG5i+yFUKG7UWeb5v425XTLLuvn7TnOs6Wz+m14Sp1ObqCa9RDZSpnJV/OPdsomX
3rbEVd2shCJPjyGO4RUFlPG2146SUkH3I061TSkB38rHLFPTEHd+eOOH5xDTR1SF
vmKJ3WnXCWC5tqzMkfC4MZPzRQ4EcfkLvW+/NDIj2SN/5zRtLSzbjeAWJczHpMJB
hxBnbuNdFh/h8624T5zO3qTAgtmJpNu2pmOP3Qvlm1gNZPbHkYvpSeTyTYF1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUHEafrwrBedcGfvKz3K371+Fu+7IwHwYDVR0j
BBgwFoAUNJaGDO1G6ChgSY3ZRmAdFoFHkgswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQndxcHdHZnE3NUZ1Ylk2ZnpFblZSaDF2QU5VRXh3dkxCcFpjRDd0d0Jp
VFMvMC8zNDk2ODYwQ0VENDZFODI4NjA0OThERDk0NjYwMUQxNjgxNDc5MjBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM0OTY4NjBDRUQ0NkU4Mjg2
MDQ5OEREOTQ2NjAxRDE2ODE0NzkyMEIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J3cXB3R2ZxNzVGdWJZNmZ6RW5WUmgxdkFOVUV4d3ZMQnBaY0Q3dHdCaVRTLzAv
MzIzMDMwMmUzMjMyMzkyZTMyMzAzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2
MzEzNzM3Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADI5dEwDQYJKoZIhvcNAQELBQADggEBAEvw7V5s
YxWI2muzyDSj1OkG9M5blLwzcZMfuF4Wo2RwhIEDPXs8n4rz9bvrjTITXnfg9ecq
flP9vuHWNAt62Sbhvk0J8vJiyt8O4008QaW455ipapd8gZqar1W+zJCePyJnLxwz
3LtZTDw8uP7sE3dNVweh4Ne1Z+0RXkWd7GbI16F5aQAj/NZCSULW2DqVAjQcW9tt
Ld6JClxDCrl+Qtg3C42dT9CEWmC2wC+Ey/WAPqTTOa8h9JnenuAMvx2Kt7Ou1mVe
17P4G3a/5+J6t1XQU8p0xSjzJWDs1x959oEBVCkWfj+7SqDu8MtlZcukjDeFx6TO
5+aEujlFjl0dkBo=
-----END CERTIFICATE-----
Generated at Sat Nov 23 07:30:02 2024 by rpki-client on console-fra.rpki-client.org