Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/3230302e35322e3233352e302f32342d3234203d3e20323731303139.roa
File:                     3230302e35322e3233352e302f32342d3234203d3e20323731303139.roa (raw, json)
Hash identifier:          gZqBW8Bh5NaVV/lWff9KiSuZO2kXvmxYJz2lHloyl7k=
Subject key identifier:   BC:D6:F8:3C:0D:6F:75:FF:37:C3:0F:E9:F0:E3:0A:5A:48:79:3B:6F
Certificate issuer:       /CN=6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5
Certificate serial:       673F175D37B8BA2E36734B907352DEA4A94C06B4
Authority key identifier: 6E:0E:6A:39:72:47:D4:96:E3:9C:0A:78:DF:B1:E5:1A:71:DB:AA:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/3230302e35322e3233352e302f32342d3234203d3e20323731303139.roa
Signing time:             Tue 23 Apr 2024 19:24:46 +0000
ROA not before:           Tue 23 Apr 2024 19:19:46 +0000
ROA not after:            Tue 22 Apr 2025 19:24:46 +0000
asID:                     271019
IP address blocks:        200.52.235.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.crl
                          rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:13:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:3f:17:5d:37:b8:ba:2e:36:73:4b:90:73:52:de:a4:a9:4c:06:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5
        Validity
            Not Before: Apr 23 19:19:46 2024 GMT
            Not After : Apr 22 19:24:46 2025 GMT
        Subject: CN=BCD6F83C0D6F75FF37C30FE9F0E30A5A48793B6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:33:bc:04:47:4a:c7:e4:69:d8:91:78:f7:2d:
                    b0:f6:53:c5:d0:51:70:1f:e5:da:41:cc:5c:c1:1f:
                    06:6e:93:95:32:a5:51:fa:00:cf:67:d3:91:21:de:
                    e2:4f:30:9b:67:92:fa:48:9e:12:6c:7b:b8:a3:e5:
                    30:d9:db:98:58:ca:3b:5f:f4:12:b0:3d:de:74:fc:
                    c0:21:34:45:08:0e:2d:85:a2:aa:73:08:2c:6a:b9:
                    a5:52:28:d8:70:14:cf:bc:ab:8c:bb:d7:d9:02:8c:
                    fe:5e:8b:ce:68:67:be:21:44:69:cf:2f:09:5d:6d:
                    29:b8:68:23:6c:71:a5:a8:65:58:33:06:a3:6d:2d:
                    f4:b8:54:74:f3:79:da:d7:32:57:58:8d:98:7e:0c:
                    31:86:b7:0a:21:55:23:0d:8f:f7:8b:d3:00:c3:ad:
                    b0:7f:43:c6:b7:c3:8f:4c:f9:67:1a:fe:e5:bd:42:
                    fa:d2:c4:c7:25:59:bd:dd:76:a6:46:35:9f:68:5c:
                    10:a0:35:59:d9:39:80:e3:57:6c:03:ca:fa:22:64:
                    66:39:ca:fb:8f:5a:2e:37:08:a3:af:2d:65:d1:83:
                    24:c3:54:bd:a1:1f:00:3e:21:34:52:7f:40:44:d5:
                    bb:f7:12:e0:aa:08:70:94:cc:10:d3:2b:93:30:6b:
                    44:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:D6:F8:3C:0D:6F:75:FF:37:C3:0F:E9:F0:E3:0A:5A:48:79:3B:6F
            X509v3 Authority Key Identifier:
                keyid:6E:0E:6A:39:72:47:D4:96:E3:9C:0A:78:DF:B1:E5:1A:71:DB:AA:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/3230302e35322e3233352e302f32342d3234203d3e20323731303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.52.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:cd:0c:bb:26:8b:34:75:c0:e1:a3:c9:b2:11:16:40:92:d3:
         7d:20:c4:a9:9d:93:e5:7f:ac:c3:b3:e0:af:d9:b4:65:7e:00:
         c1:c9:e7:dd:e9:44:7e:14:61:01:61:c9:e8:73:b6:46:c8:5b:
         57:87:5f:d4:56:e9:65:e8:56:f0:b1:d1:35:9a:d5:6a:f9:4d:
         f5:36:36:90:f4:40:ef:e8:f5:4e:bd:eb:bd:4d:48:80:b0:bf:
         8e:b0:61:91:73:65:13:16:4a:c9:bb:46:aa:e0:fe:50:8b:27:
         4e:1b:4c:f0:61:0a:4b:70:91:23:26:93:16:ec:13:12:79:83:
         d9:2a:22:e8:90:a0:9c:f1:ff:a8:de:a0:a2:50:ac:a4:67:b7:
         e1:41:f9:4d:0d:08:fe:94:b8:47:5c:54:93:31:cd:79:9b:41:
         47:d7:16:a6:ca:28:49:3e:5e:ad:69:4f:fe:b5:67:a6:fd:1a:
         cb:3a:9b:0e:c8:48:a0:d8:4f:c2:c4:30:71:00:d5:e1:42:7c:
         3e:b2:2e:81:6a:3f:f8:d2:8b:74:6b:9d:15:07:52:c8:27:40:
         9c:43:c2:5b:f3:bd:df:10:f5:5f:fc:cc:0d:4f:fb:79:59:67:
         ea:14:6c:0e:f0:46:c1:3c:42:79:3a:1a:4f:7f:81:04:d3:14:
         bc:49:65:0a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZz8XXTe4ui42c0uQc1LepKlMBrQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkUwRTZBMzk3MjQ3RDQ5NkUzOUMwQTc4REZCMUU1MUE3
MURCQUFCNTAeFw0yNDA0MjMxOTE5NDZaFw0yNTA0MjIxOTI0NDZaMDMxMTAvBgNV
BAMTKEJDRDZGODNDMEQ2Rjc1RkYzN0MzMEZFOUYwRTMwQTVBNDg3OTNCNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0M7wER0rH5GnYkXj3LbD2U8XQ
UXAf5dpBzFzBHwZuk5UypVH6AM9n05Eh3uJPMJtnkvpInhJse7ij5TDZ25hYyjtf
9BKwPd50/MAhNEUIDi2FoqpzCCxquaVSKNhwFM+8q4y719kCjP5ei85oZ74hRGnP
LwldbSm4aCNscaWoZVgzBqNtLfS4VHTzedrXMldYjZh+DDGGtwohVSMNj/eL0wDD
rbB/Q8a3w49M+Wca/uW9QvrSxMclWb3ddqZGNZ9oXBCgNVnZOYDjV2wDyvoiZGY5
yvuPWi43CKOvLWXRgyTDVL2hHwA+ITRSf0BE1bv3EuCqCHCUzBDTK5Mwa0S3AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUvNb4PA1vdf83ww/p8OMKWkh5O28wHwYDVR0j
BBgwFoAUbg5qOXJH1JbjnAp437HlGnHbqrUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1RFdGE5TUFjTE1RWUpDVFJiYjM4Mkx3UXFVbjU3aW9DdG9UcHlxd0di
WjUvMC82RTBFNkEzOTcyNDdENDk2RTM5QzBBNzhERkIxRTUxQTcxREJBQUI1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZFMEU2QTM5NzI0N0Q0OTZF
MzlDMEE3OERGQjFFNTFBNzFEQkFBQjUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NURXRhOU1BY0xNUVlKQ1RSYmIzODJMd1FxVW41N2lvQ3RvVHB5cXdHYlo1LzAv
MzIzMDMwMmUzNTMyMmUzMjMzMzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzEzMDMxMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADINOswDQYJKoZIhvcNAQELBQADggEBALDNDLsm
izR1wOGjybIRFkCS030gxKmdk+V/rMOz4K/ZtGV+AMHJ593pRH4UYQFhyehztkbI
W1eHX9RW6WXoVvCx0TWa1Wr5TfU2NpD0QO/o9U69671NSICwv46wYZFzZRMWSsm7
Rqrg/lCLJ04bTPBhCktwkSMmkxbsExJ5g9kqIuiQoJzx/6jeoKJQrKRnt+FB+U0N
CP6UuEdcVJMxzXmbQUfXFqbKKEk+Xq1pT/61Z6b9Gss6mw7ISKDYT8LEMHEA1eFC
fD6yLoFqP/jSi3RrnRUHUsgnQJxDwlvzvd8Q9V/8zA1P+3lZZ+oUbA7wRsE8Qnk6
Gk9/gQTTFLxJZQo=
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:34:07 2024 by rpki-client on console-ams.rpki-client.org