Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C8eVXvmGohob1kAGTiaJDUD1UZnSPEm1m3UdQ2vpDAoU/1/3230302e3232392e39322e302f32322d3234203d3e20323636393836.roa
File:                     3230302e3232392e39322e302f32322d3234203d3e20323636393836.roa (raw, json)
Hash identifier:          n7HZi6I7HErUXpF6v8cfMQjqIDe/7OJnTto0zkJ4qk0=
Subject key identifier:   A8:B2:80:C9:58:FD:25:F4:14:F7:65:61:E4:43:01:03:B5:27:F8:24
Certificate issuer:       /CN=78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D
Certificate serial:       3C3B08A7E803E38C3F03151E39D44EDBEE76D121
Authority key identifier: 78:C3:1F:85:CF:8B:6A:84:18:FA:D2:5A:55:F5:94:2F:3B:AC:DE:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C8eVXvmGohob1kAGTiaJDUD1UZnSPEm1m3UdQ2vpDAoU/1/3230302e3232392e39322e302f32322d3234203d3e20323636393836.roa
Signing time:             Thu 04 Apr 2024 09:13:06 +0000
ROA not before:           Thu 04 Apr 2024 09:08:06 +0000
ROA not after:            Thu 03 Apr 2025 09:13:06 +0000
asID:                     266986
IP address blocks:        200.229.92.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C8eVXvmGohob1kAGTiaJDUD1UZnSPEm1m3UdQ2vpDAoU/1/78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.crl
                          rsync://rpki-repo.registro.br/repo/C8eVXvmGohob1kAGTiaJDUD1UZnSPEm1m3UdQ2vpDAoU/1/78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 17:10:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:3b:08:a7:e8:03:e3:8c:3f:03:15:1e:39:d4:4e:db:ee:76:d1:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D
        Validity
            Not Before: Apr  4 09:08:06 2024 GMT
            Not After : Apr  3 09:13:06 2025 GMT
        Subject: CN=A8B280C958FD25F414F76561E4430103B527F824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:97:16:9b:30:32:e1:27:9d:23:fa:af:23:eb:
                    4f:32:28:a9:af:99:d5:a9:1c:6b:88:05:f1:d7:ac:
                    e5:d6:47:35:3c:eb:be:42:56:77:1b:91:a2:a7:6b:
                    d1:c1:7d:69:d1:67:09:af:c1:32:02:65:35:71:55:
                    d2:6e:e1:97:cc:54:da:ad:ce:54:68:4c:fd:7f:fc:
                    68:23:b8:3a:9a:88:c5:13:db:ee:cc:19:8c:71:c3:
                    ae:88:7a:42:09:b5:b6:c6:b0:65:78:52:ad:28:17:
                    c2:13:fb:f0:49:69:7d:ab:f7:43:a8:bd:c2:f4:62:
                    d6:45:ed:b2:07:b3:7c:29:79:ff:a8:92:e1:8a:3f:
                    3d:d1:b3:bc:d1:63:1d:ac:87:4d:9f:c4:67:66:ee:
                    a1:88:ce:c0:0f:98:cb:33:70:95:40:ab:4e:fe:5c:
                    98:57:6a:cb:ce:21:8c:83:51:de:9f:1c:3e:47:9e:
                    70:fe:9a:04:0e:9a:ea:3d:57:26:91:90:80:96:39:
                    57:2f:5b:95:0a:8f:dc:c2:c3:92:ea:5a:15:8c:e2:
                    a4:ce:45:18:15:6b:ad:31:58:86:a4:d7:da:49:6b:
                    e1:3d:34:83:41:7d:f1:f7:76:e8:04:18:94:2f:9f:
                    fe:1d:cc:c0:70:66:b9:1a:dd:58:e9:92:4a:25:4e:
                    73:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:B2:80:C9:58:FD:25:F4:14:F7:65:61:E4:43:01:03:B5:27:F8:24
            X509v3 Authority Key Identifier:
                keyid:78:C3:1F:85:CF:8B:6A:84:18:FA:D2:5A:55:F5:94:2F:3B:AC:DE:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C8eVXvmGohob1kAGTiaJDUD1UZnSPEm1m3UdQ2vpDAoU/1/78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8eVXvmGohob1kAGTiaJDUD1UZnSPEm1m3UdQ2vpDAoU/1/3230302e3232392e39322e302f32322d3234203d3e20323636393836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:e0:85:42:2f:b8:fe:77:c3:05:dc:fb:e9:c2:0f:b2:36:7f:
         d4:e5:2a:52:02:ac:d9:01:4e:5f:f3:d4:42:24:f2:b2:74:2f:
         8e:2d:12:a1:13:24:7c:16:2a:19:5a:06:ae:5b:e9:68:0d:7a:
         cf:0f:0d:d9:f7:69:af:2e:a8:94:cd:6d:0f:01:19:db:97:03:
         f0:af:04:39:ea:4d:e3:90:fc:81:8a:66:2e:00:39:27:b9:64:
         f1:4b:d6:dd:53:76:34:1e:c6:e1:a7:61:09:77:5e:fb:78:da:
         62:5a:b7:ca:26:93:c1:ae:7b:39:7c:a0:b4:bc:68:fc:3b:aa:
         01:29:ab:5b:6a:1b:16:8b:e3:28:ee:87:60:65:37:0e:53:c0:
         d8:3f:5f:86:ba:77:3b:c2:25:22:8c:b4:80:df:64:66:ea:2c:
         56:59:df:4a:cf:d3:e9:1b:d4:8f:30:27:8e:9c:2e:03:17:b5:
         91:16:ce:7a:ba:a4:d9:bd:36:db:ec:16:ad:41:d1:55:c7:b7:
         a7:69:3c:07:10:f9:ac:7d:7e:dc:b2:fc:6b:8a:27:15:13:e4:
         6b:75:e3:4a:23:98:8a:6e:bc:f1:b5:8e:a5:c9:c9:99:c4:08:
         49:b5:36:15:b9:33:27:d6:e1:73:3d:f4:32:04:46:4e:13:c3:
         9f:2e:c3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:27:52 2024 by rpki-client on console-fra.rpki-client.org