Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3230302e3130362e3133342e302f32342d3234203d3e20323635333030.roa
File:                     3230302e3130362e3133342e302f32342d3234203d3e20323635333030.roa (raw, json)
Hash identifier:          cgd7RnQFsx12wTI7XlNPZ8BBOjKHr4aZgIf/tOj4Oy8=
Subject key identifier:   D6:A4:F2:FE:58:A8:60:14:4A:03:FC:8D:41:55:CC:C8:31:02:AF:A5
Certificate issuer:       /CN=6A8306BAA9B2C90FC29708796503E6EE751CFB0F
Certificate serial:       6590BBE2F716441C60E28492A619B2CDE17EF762
Authority key identifier: 6A:83:06:BA:A9:B2:C9:0F:C2:97:08:79:65:03:E6:EE:75:1C:FB:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A8306BAA9B2C90FC29708796503E6EE751CFB0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3230302e3130362e3133342e302f32342d3234203d3e20323635333030.roa
Signing time:             Mon 25 Nov 2024 17:35:37 +0000
ROA not before:           Mon 25 Nov 2024 17:30:37 +0000
ROA not after:            Mon 24 Nov 2025 17:35:37 +0000
asID:                     265300
IP address blocks:        200.106.134.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/6A8306BAA9B2C90FC29708796503E6EE751CFB0F.crl
                          rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/6A8306BAA9B2C90FC29708796503E6EE751CFB0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A8306BAA9B2C90FC29708796503E6EE751CFB0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 20:04:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:90:bb:e2:f7:16:44:1c:60:e2:84:92:a6:19:b2:cd:e1:7e:f7:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A8306BAA9B2C90FC29708796503E6EE751CFB0F
        Validity
            Not Before: Nov 25 17:30:37 2024 GMT
            Not After : Nov 24 17:35:37 2025 GMT
        Subject: CN=D6A4F2FE58A860144A03FC8D4155CCC83102AFA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:59:48:f0:62:2b:20:ea:9e:1f:51:b1:96:a5:
                    57:57:2e:36:19:bb:7d:75:d9:96:ac:76:6c:9c:b1:
                    cd:5b:60:76:67:bb:9b:c2:c7:41:c2:ab:c1:16:35:
                    3f:39:fd:93:ff:76:bf:6e:97:df:58:5c:0b:f4:75:
                    51:d1:23:72:1c:a0:df:dd:f0:3a:bf:98:d1:35:52:
                    2b:79:56:64:b5:e4:eb:16:db:34:47:f1:99:60:08:
                    6b:2a:6c:30:9f:0c:db:68:32:c3:16:e7:3a:9b:a5:
                    6c:c4:9e:88:b5:56:74:fd:dc:70:fc:b9:a7:ca:8b:
                    77:3c:22:d7:9c:9a:f6:71:96:11:e2:19:c3:44:ca:
                    36:53:7c:db:85:94:ab:ae:55:c8:43:ea:a7:9c:77:
                    30:d4:f6:00:bf:86:a2:54:14:c8:19:a8:c2:f7:c0:
                    68:2b:06:0b:be:f0:9b:9a:56:55:83:e2:36:7c:83:
                    fe:6d:1b:33:62:03:f1:9e:68:1c:9a:b4:e8:69:04:
                    f0:29:49:79:28:52:60:40:a1:ed:c9:cf:e3:1d:08:
                    0a:a0:95:c4:5a:52:1b:82:46:ef:b3:20:49:69:81:
                    2a:27:cf:82:68:3b:83:03:ff:c0:ab:0a:0a:3c:01:
                    13:e3:9f:43:d4:a4:9f:59:23:38:be:bf:0f:82:e1:
                    64:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:A4:F2:FE:58:A8:60:14:4A:03:FC:8D:41:55:CC:C8:31:02:AF:A5
            X509v3 Authority Key Identifier:
                keyid:6A:83:06:BA:A9:B2:C9:0F:C2:97:08:79:65:03:E6:EE:75:1C:FB:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/6A8306BAA9B2C90FC29708796503E6EE751CFB0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A8306BAA9B2C90FC29708796503E6EE751CFB0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3230302e3130362e3133342e302f32342d3234203d3e20323635333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:db:df:92:0e:19:99:dc:ab:8a:74:f9:f6:51:a5:46:ee:cc:
         c0:30:82:1d:4f:72:e3:26:17:bc:ae:cd:0d:69:08:69:1e:66:
         32:8d:a4:d8:1b:81:b0:1f:83:ac:95:dc:f2:4f:b9:a6:f4:6e:
         86:f4:79:e8:02:12:29:ed:9b:f0:16:b6:e5:02:e1:c4:9c:5a:
         5c:85:6e:72:19:f0:dd:84:1f:d7:3f:14:60:6b:62:32:9b:aa:
         a4:4b:45:21:e1:cb:fa:f5:cb:c7:2f:b3:f7:fb:b5:52:45:c2:
         65:f6:da:a4:7e:bd:e1:ba:33:6f:2f:ef:5a:0a:50:95:6c:4a:
         95:a7:50:6d:76:50:b2:2b:48:29:ea:a1:20:c7:26:ba:c8:37:
         a1:9a:a0:20:9f:1f:e5:f0:48:9a:4d:66:c7:50:c8:aa:14:df:
         c3:87:df:8a:7c:6d:10:2c:6c:a2:a5:a8:df:7d:dd:be:d5:4b:
         47:73:59:59:3a:d5:d8:f6:dc:14:90:a0:e0:f2:6c:44:73:ab:
         48:3b:b8:96:a6:43:67:a3:56:4a:cb:16:76:38:ff:f3:16:5f:
         28:50:70:09:19:75:bb:10:78:34:f9:8d:4f:15:1a:a1:c4:68:
         92:e5:4f:09:58:1c:1e:a5:2c:c8:0a:02:25:a3:96:71:8c:bf:
         f8:d6:13:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:43:21 2024 by rpki-client on console-ams.rpki-client.org