Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3230302e3232392e3231302e302f32342d3234203d3e203631373738.roa
File:                     3230302e3232392e3231302e302f32342d3234203d3e203631373738.roa (raw, json)
Hash identifier:          kA804tfEnBD035EoGN/4G73s2LBA4EUxTQmNS+wL540=
Subject key identifier:   99:9B:1A:30:1C:E6:15:F8:CA:8D:AF:C2:5C:B2:A8:55:DB:59:8A:F0
Certificate issuer:       /CN=3496860CED46E82860498DD946601D168147920B
Certificate serial:       7B2E63A3A06C7B8573355172A62D4B6F939E4857
Authority key identifier: 34:96:86:0C:ED:46:E8:28:60:49:8D:D9:46:60:1D:16:81:47:92:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3496860CED46E82860498DD946601D168147920B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3230302e3232392e3231302e302f32342d3234203d3e203631373738.roa
Signing time:             Wed 10 Jul 2024 16:35:38 +0000
ROA not before:           Wed 10 Jul 2024 16:30:38 +0000
ROA not after:            Wed 09 Jul 2025 16:35:38 +0000
asID:                     61778
IP address blocks:        200.229.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3496860CED46E82860498DD946601D168147920B.crl
                          rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3496860CED46E82860498DD946601D168147920B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3496860CED46E82860498DD946601D168147920B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:2e:63:a3:a0:6c:7b:85:73:35:51:72:a6:2d:4b:6f:93:9e:48:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3496860CED46E82860498DD946601D168147920B
        Validity
            Not Before: Jul 10 16:30:38 2024 GMT
            Not After : Jul  9 16:35:38 2025 GMT
        Subject: CN=999B1A301CE615F8CA8DAFC25CB2A855DB598AF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f2:7f:6c:ac:6b:3f:48:80:42:b4:93:b6:6f:
                    98:d1:a7:df:9f:21:e1:00:7f:e1:2b:dc:2a:3b:1c:
                    5a:38:80:8a:67:a2:9c:6a:ee:1f:fd:67:4a:4a:cd:
                    22:71:3a:2f:90:da:b8:80:29:7b:e6:12:0b:42:8f:
                    50:44:bd:4f:66:07:7c:5d:51:6f:1f:3a:92:33:0e:
                    1e:81:00:e0:c8:80:5d:a9:ea:c8:15:19:6d:67:8f:
                    c5:7f:97:a3:e5:2b:40:e0:d6:75:2e:f7:1a:48:97:
                    8c:4b:82:6b:f7:da:71:93:46:bf:58:a3:0f:66:b6:
                    c9:15:b4:d1:d3:d6:08:48:c7:b8:d5:6e:54:4f:3c:
                    22:20:0c:b5:50:63:a9:ae:25:9b:dc:b6:de:70:8b:
                    fb:77:c2:9f:27:89:9e:59:45:41:aa:33:d8:92:f7:
                    e6:f1:02:79:36:12:8c:ed:cd:04:b0:c3:5e:ab:45:
                    9a:6e:68:1d:21:5a:cd:87:60:b4:7e:a4:3f:d2:bd:
                    97:76:58:e2:89:65:3f:36:fe:56:f5:4c:20:c6:31:
                    88:da:f2:71:13:de:79:91:d3:67:bf:5e:2d:ac:ff:
                    aa:3a:89:b3:73:66:c9:b5:79:d5:76:f6:a9:a0:da:
                    ac:70:9e:89:0d:8f:e2:85:f2:a2:49:6a:8b:b7:8b:
                    40:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:9B:1A:30:1C:E6:15:F8:CA:8D:AF:C2:5C:B2:A8:55:DB:59:8A:F0
            X509v3 Authority Key Identifier:
                keyid:34:96:86:0C:ED:46:E8:28:60:49:8D:D9:46:60:1D:16:81:47:92:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3496860CED46E82860498DD946601D168147920B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3496860CED46E82860498DD946601D168147920B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3230302e3232392e3231302e302f32342d3234203d3e203631373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:61:3a:cb:42:87:84:e9:96:44:74:99:61:5b:ce:b1:fe:48:
         13:39:b9:03:b7:5f:eb:ab:9f:43:70:9a:5b:aa:c3:f1:83:ce:
         37:3e:6d:85:fa:46:b8:05:4b:db:93:53:1a:44:91:9e:53:fd:
         b3:71:38:3f:2a:af:38:90:b7:d7:70:f1:80:47:27:e6:2d:a2:
         63:9f:43:b6:3b:45:28:98:45:0d:f0:10:f2:a3:b4:04:c4:29:
         ed:f7:30:04:d8:df:e3:33:fd:4d:95:be:c9:84:23:a2:9d:cd:
         d1:5c:65:e1:55:fd:76:93:e4:87:1a:f3:c7:82:8f:dd:e8:23:
         56:0c:1a:4a:0a:c7:49:c2:c7:e3:5f:0f:92:94:d0:2a:97:d8:
         e7:53:17:c8:df:b3:e9:73:0c:86:32:a5:2b:7f:ee:79:c3:dc:
         4e:ed:65:a4:e5:39:b9:cd:80:32:b2:06:89:6f:45:41:95:ff:
         92:8f:5d:c0:38:64:69:ca:86:56:7c:96:8b:2a:f1:43:e7:f9:
         94:4b:61:9a:19:7e:3f:69:f1:73:2a:a8:2e:b1:82:4a:d9:e9:
         7c:2a:64:18:c4:89:8d:8a:98:a2:20:c2:ba:8b:c5:36:99:ce:
         92:63:53:2b:f2:20:43:6d:87:64:b3:2a:94:f7:e3:b5:a6:60:
         b1:50:be:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:43:35 2024 by rpki-client on console-ams.rpki-client.org