Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3230302e3232392e3231312e302f32342d3234203d3e203631373738.roa
File:                     3230302e3232392e3231312e302f32342d3234203d3e203631373738.roa (raw, json)
Hash identifier:          3qtq7icdqa/958L/CMxJ0GEuTz6bRvM2HTuWYOXYfks=
Subject key identifier:   6E:BD:AE:F8:8D:98:0F:C1:18:BC:37:0F:9E:15:94:8C:48:4D:00:00
Certificate issuer:       /CN=3496860CED46E82860498DD946601D168147920B
Certificate serial:       765DE2E239B0D90B7C72BB6CE1D90B3A7FE65E4C
Authority key identifier: 34:96:86:0C:ED:46:E8:28:60:49:8D:D9:46:60:1D:16:81:47:92:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3496860CED46E82860498DD946601D168147920B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3230302e3232392e3231312e302f32342d3234203d3e203631373738.roa
Signing time:             Wed 10 Jul 2024 16:35:38 +0000
ROA not before:           Wed 10 Jul 2024 16:30:38 +0000
ROA not after:            Wed 09 Jul 2025 16:35:38 +0000
asID:                     61778
IP address blocks:        200.229.211.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3496860CED46E82860498DD946601D168147920B.crl
                          rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3496860CED46E82860498DD946601D168147920B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3496860CED46E82860498DD946601D168147920B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:5d:e2:e2:39:b0:d9:0b:7c:72:bb:6c:e1:d9:0b:3a:7f:e6:5e:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3496860CED46E82860498DD946601D168147920B
        Validity
            Not Before: Jul 10 16:30:38 2024 GMT
            Not After : Jul  9 16:35:38 2025 GMT
        Subject: CN=6EBDAEF88D980FC118BC370F9E15948C484D0000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:31:56:09:79:5f:12:32:ea:35:03:b4:66:69:
                    18:6d:5d:67:34:f0:f6:5e:f4:e3:31:ed:81:92:ae:
                    b7:9f:99:33:b0:96:13:ad:ff:0a:c9:6c:76:8c:07:
                    4b:12:4d:29:18:b7:49:7c:56:04:99:81:69:f2:f0:
                    d0:a0:5a:98:20:27:a4:94:b7:f4:b6:52:30:82:cd:
                    7f:14:39:87:c0:9e:e8:6d:bd:39:7d:32:0b:4f:fb:
                    2b:44:57:b0:51:93:20:09:d4:3b:1d:9f:d6:d1:46:
                    24:8f:ba:6d:7a:ac:0b:69:12:8b:ec:6b:e6:eb:3e:
                    b2:bd:16:d8:b0:2f:d8:5e:5e:4b:e0:2c:35:ed:4d:
                    31:21:e9:b4:dd:85:52:35:bc:8e:8f:16:e3:09:86:
                    85:4d:75:61:e3:c7:9f:9d:9a:29:0e:18:01:15:d0:
                    b5:8e:ae:f0:f5:87:0f:f6:55:07:1c:df:11:26:51:
                    f4:4b:ed:2b:fc:b0:3b:2f:eb:66:40:29:88:67:61:
                    f1:10:82:c3:ef:9e:ea:d3:4f:20:cd:50:c6:12:70:
                    d7:77:be:90:12:1e:42:8d:81:5b:60:1f:e1:d4:33:
                    bb:0f:52:2e:5d:94:2d:14:14:7c:26:eb:52:4d:4d:
                    fe:8f:7a:47:81:46:90:fd:71:ac:3f:7e:69:1f:4e:
                    7d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:BD:AE:F8:8D:98:0F:C1:18:BC:37:0F:9E:15:94:8C:48:4D:00:00
            X509v3 Authority Key Identifier:
                keyid:34:96:86:0C:ED:46:E8:28:60:49:8D:D9:46:60:1D:16:81:47:92:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3496860CED46E82860498DD946601D168147920B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3496860CED46E82860498DD946601D168147920B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3230302e3232392e3231312e302f32342d3234203d3e203631373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:f0:61:a9:52:fa:dd:16:77:21:71:0c:93:7c:be:4f:dc:a0:
         c3:da:38:24:b0:62:61:0a:bd:2c:c3:59:cd:07:65:a5:29:d2:
         f7:23:f9:2a:af:ea:81:59:e0:0e:e6:e8:17:27:46:08:3e:3b:
         97:ce:50:2b:1c:97:a8:ae:da:2a:bb:a8:0a:97:cb:09:8b:59:
         35:77:86:f6:59:a8:cc:3a:71:87:79:ba:4c:7c:c7:33:d1:6c:
         2e:4c:88:05:ba:a8:2f:ba:c4:5b:c4:d2:e1:37:e9:3f:a8:32:
         2c:aa:cf:27:ba:03:d4:d7:e4:49:37:e2:9e:f2:31:53:95:27:
         42:e2:d3:3f:d8:e0:dc:d4:4b:3d:7a:4d:94:54:28:3b:b8:ec:
         46:97:da:6b:2c:92:5f:7e:a1:9e:dc:c3:6f:32:46:33:25:fb:
         72:a0:5a:65:ed:aa:4c:9b:43:e4:a7:b9:50:95:75:fd:03:36:
         0c:61:9d:52:68:38:90:d7:32:6b:c9:78:ec:8c:ca:df:4c:fc:
         da:b8:4b:ab:14:16:5a:b3:28:7b:1e:5e:60:7b:ef:31:5c:c0:
         1f:1a:da:c0:51:09:af:12:76:fb:0d:5b:aa:4e:b9:a7:79:a1:
         e9:19:80:01:7c:9c:39:c2:23:50:c4:67:d6:4b:5a:88:0f:c2:
         27:7b:1a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:30:02 2024 by rpki-client on console-fra.rpki-client.org