Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/3230302e35322e3233322e302f32322d3232203d3e20323731303139.roa
File:                     3230302e35322e3233322e302f32322d3232203d3e20323731303139.roa (raw, json)
Hash identifier:          1GeQv56+EMST9pMl1eqI+mlQfYXnYGcyiNAtg5VH9GM=
Subject key identifier:   B7:65:6D:16:6C:A7:71:43:86:CB:0C:D7:3A:F2:F4:FF:BA:07:84:27
Certificate issuer:       /CN=6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5
Certificate serial:       69E0B2658793C91FC308A00F807B09E0B39B25FA
Authority key identifier: 6E:0E:6A:39:72:47:D4:96:E3:9C:0A:78:DF:B1:E5:1A:71:DB:AA:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/3230302e35322e3233322e302f32322d3232203d3e20323731303139.roa
Signing time:             Tue 23 Apr 2024 19:24:46 +0000
ROA not before:           Tue 23 Apr 2024 19:19:46 +0000
ROA not after:            Tue 22 Apr 2025 19:24:46 +0000
asID:                     271019
IP address blocks:        200.52.232.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.crl
                          rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 16 Jun 2024 19:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:e0:b2:65:87:93:c9:1f:c3:08:a0:0f:80:7b:09:e0:b3:9b:25:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5
        Validity
            Not Before: Apr 23 19:19:46 2024 GMT
            Not After : Apr 22 19:24:46 2025 GMT
        Subject: CN=B7656D166CA7714386CB0CD73AF2F4FFBA078427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3d:c2:23:4d:e8:c5:6f:70:6e:e4:fe:32:87:
                    8f:54:3e:e2:d2:85:83:3b:79:ff:e7:95:76:d4:5f:
                    fe:f7:4e:68:95:bc:4e:68:4a:c6:fc:cb:38:7c:aa:
                    71:51:3b:07:1c:1a:b2:ab:cb:0b:2a:0d:08:1f:25:
                    34:14:c6:40:8a:fe:8c:7b:87:0e:84:12:09:db:28:
                    6e:50:55:40:5d:77:3f:fe:06:32:bb:68:20:09:c4:
                    60:7c:2b:95:5f:47:47:93:0c:11:a0:78:38:c6:b6:
                    1d:3f:f3:b4:24:c4:13:4b:b3:33:9b:24:e1:18:99:
                    2d:9a:8e:d5:b5:8e:31:be:87:61:d7:d0:2d:d6:1a:
                    a3:87:94:3f:bb:bb:8b:08:58:99:2b:76:a4:6d:4f:
                    ba:dc:45:fc:5e:4d:bb:5f:84:46:9d:a1:4f:70:17:
                    15:47:41:07:34:0b:4d:b2:57:7a:91:86:6c:90:43:
                    ee:7a:2f:11:2f:13:b2:cd:aa:43:57:d3:e4:73:25:
                    b4:d9:f7:cd:c1:7f:ab:7c:bc:8c:68:6c:52:eb:55:
                    e2:72:9d:c8:80:da:5d:8e:ba:fd:7d:12:2a:9a:71:
                    55:c4:64:6e:c6:3a:9e:94:d1:e6:2b:92:6f:ac:30:
                    0a:53:0f:6b:44:85:0c:0d:52:46:e1:e3:12:fb:ff:
                    90:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:65:6D:16:6C:A7:71:43:86:CB:0C:D7:3A:F2:F4:FF:BA:07:84:27
            X509v3 Authority Key Identifier:
                keyid:6E:0E:6A:39:72:47:D4:96:E3:9C:0A:78:DF:B1:E5:1A:71:DB:AA:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/3230302e35322e3233322e302f32322d3232203d3e20323731303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.52.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:9f:10:aa:43:1e:06:5a:06:55:80:c1:7a:a3:6c:dd:18:ef:
         41:cf:8f:24:61:a3:53:01:67:70:65:7e:ec:a3:25:32:40:4f:
         33:a4:68:9c:29:66:36:cc:83:6c:04:99:a2:96:aa:65:cb:35:
         6f:fe:75:1d:98:cc:ae:3c:ee:58:72:bc:33:bb:34:9b:0e:b2:
         3d:17:8d:21:bc:75:c6:78:f9:30:29:f9:6d:73:9f:57:3d:3c:
         e7:b3:66:c5:e8:a9:9a:5f:7f:ab:22:dd:b5:95:59:92:4e:a3:
         eb:b3:dd:39:38:f4:0e:cb:3f:de:2e:1e:8f:7e:3f:ae:18:1b:
         0c:9f:a1:aa:86:7d:24:4d:6d:9e:89:8f:03:2d:f6:12:bc:03:
         51:10:78:76:c6:f0:cd:8b:94:56:20:82:1d:b8:6d:54:11:57:
         44:e5:63:b0:48:56:1d:1a:55:0b:1d:42:cc:6a:cc:e1:90:59:
         cf:d5:62:c4:96:bc:db:b2:31:91:81:38:0e:eb:bb:05:1a:33:
         47:b9:cf:b8:4f:9c:2f:d5:74:de:55:3d:74:64:83:c8:cb:4d:
         ec:e4:01:ee:5e:15:80:29:e2:f8:ea:cb:b1:1e:fd:0c:00:eb:
         72:49:3f:e5:46:f3:79:f6:88:3c:48:76:54:e0:08:ba:6c:66:
         d6:54:2c:22
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUaeCyZYeTyR/DCKAPgHsJ4LObJfowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkUwRTZBMzk3MjQ3RDQ5NkUzOUMwQTc4REZCMUU1MUE3
MURCQUFCNTAeFw0yNDA0MjMxOTE5NDZaFw0yNTA0MjIxOTI0NDZaMDMxMTAvBgNV
BAMTKEI3NjU2RDE2NkNBNzcxNDM4NkNCMENENzNBRjJGNEZGQkEwNzg0MjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzPcIjTejFb3Bu5P4yh49UPuLS
hYM7ef/nlXbUX/73TmiVvE5oSsb8yzh8qnFROwccGrKrywsqDQgfJTQUxkCK/ox7
hw6EEgnbKG5QVUBddz/+BjK7aCAJxGB8K5VfR0eTDBGgeDjGth0/87QkxBNLszOb
JOEYmS2ajtW1jjG+h2HX0C3WGqOHlD+7u4sIWJkrdqRtT7rcRfxeTbtfhEadoU9w
FxVHQQc0C02yV3qRhmyQQ+56LxEvE7LNqkNX0+RzJbTZ983Bf6t8vIxobFLrVeJy
nciA2l2Ouv19EiqacVXEZG7GOp6U0eYrkm+sMApTD2tEhQwNUkbh4xL7/5DJAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUt2VtFmyncUOGywzXOvL0/7oHhCcwHwYDVR0j
BBgwFoAUbg5qOXJH1JbjnAp437HlGnHbqrUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1RFdGE5TUFjTE1RWUpDVFJiYjM4Mkx3UXFVbjU3aW9DdG9UcHlxd0di
WjUvMC82RTBFNkEzOTcyNDdENDk2RTM5QzBBNzhERkIxRTUxQTcxREJBQUI1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZFMEU2QTM5NzI0N0Q0OTZF
MzlDMEE3OERGQjFFNTFBNzFEQkFBQjUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NURXRhOU1BY0xNUVlKQ1RSYmIzODJMd1FxVW41N2lvQ3RvVHB5cXdHYlo1LzAv
MzIzMDMwMmUzNTMyMmUzMjMzMzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM3
MzEzMDMxMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALINOgwDQYJKoZIhvcNAQELBQADggEBAA2fEKpD
HgZaBlWAwXqjbN0Y70HPjyRho1MBZ3BlfuyjJTJATzOkaJwpZjbMg2wEmaKWqmXL
NW/+dR2YzK487lhyvDO7NJsOsj0XjSG8dcZ4+TAp+W1zn1c9POezZsXoqZpff6si
3bWVWZJOo+uz3Tk49A7LP94uHo9+P64YGwyfoaqGfSRNbZ6JjwMt9hK8A1EQeHbG
8M2LlFYggh24bVQRV0TlY7BIVh0aVQsdQsxqzOGQWc/VYsSWvNuyMZGBOA7ruwUa
M0e5z7hPnC/VdN5VPXRkg8jLTezkAe5eFYAp4vjqy7Ee/QwA63JJP+VG83n2iDxI
dlTgCLpsZtZULCI=
-----END CERTIFICATE-----
Generated at Sun Jun 16 08:01:15 2024 by rpki-client on console-fra.rpki-client.org