Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cc1U13ZyteufJNZhWM1mLYCe2khiJNkHosdZnhq4AAMU/1/3230302e3230322e302e302f31392d3234203d3e203130373333.roa
File:                     3230302e3230322e302e302f31392d3234203d3e203130373333.roa (raw, json)
Hash identifier:          qd2Ura8mjTA3/nug4GGQO09HOW1HzeV+5NK39LUjBmc=
Subject key identifier:   1A:96:74:C3:26:03:4C:F6:DA:0C:C3:2F:5F:DE:22:78:BB:DA:0A:DF
Certificate issuer:       /CN=7DE6E0779DD8FBF98FE9AD24531A24F792D26451
Certificate serial:       77042F64C86A7A8699BD1EA3CED9E22DB5465DD1
Authority key identifier: 7D:E6:E0:77:9D:D8:FB:F9:8F:E9:AD:24:53:1A:24:F7:92:D2:64:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DE6E0779DD8FBF98FE9AD24531A24F792D26451.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cc1U13ZyteufJNZhWM1mLYCe2khiJNkHosdZnhq4AAMU/1/3230302e3230322e302e302f31392d3234203d3e203130373333.roa
Signing time:             Thu 04 Apr 2024 01:00:19 +0000
ROA not before:           Thu 04 Apr 2024 00:55:19 +0000
ROA not after:            Thu 03 Apr 2025 01:00:19 +0000
asID:                     10733
IP address blocks:        200.202.0.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cc1U13ZyteufJNZhWM1mLYCe2khiJNkHosdZnhq4AAMU/1/7DE6E0779DD8FBF98FE9AD24531A24F792D26451.crl
                          rsync://rpki-repo.registro.br/repo/Cc1U13ZyteufJNZhWM1mLYCe2khiJNkHosdZnhq4AAMU/1/7DE6E0779DD8FBF98FE9AD24531A24F792D26451.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DE6E0779DD8FBF98FE9AD24531A24F792D26451.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:05:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:04:2f:64:c8:6a:7a:86:99:bd:1e:a3:ce:d9:e2:2d:b5:46:5d:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DE6E0779DD8FBF98FE9AD24531A24F792D26451
        Validity
            Not Before: Apr  4 00:55:19 2024 GMT
            Not After : Apr  3 01:00:19 2025 GMT
        Subject: CN=1A9674C326034CF6DA0CC32F5FDE2278BBDA0ADF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5a:a2:e1:ff:51:a3:10:f3:13:0f:a0:3e:48:
                    bf:aa:4c:12:60:a6:af:0d:03:49:c9:79:8e:72:ad:
                    51:38:95:3b:3d:a0:9d:7e:9f:46:3b:62:ad:37:9a:
                    9c:41:a0:ab:04:7a:fc:fe:19:89:72:fd:0c:49:de:
                    75:14:ed:5f:82:8f:99:23:b9:42:d2:7c:b1:b7:de:
                    1e:55:4d:be:8a:de:07:c2:7f:15:11:05:83:24:2f:
                    de:49:54:fc:5f:3e:65:f1:30:8e:b3:f6:cc:27:96:
                    a2:85:d0:e4:e6:38:45:93:d8:b5:37:ca:f6:5a:a6:
                    77:bc:52:e3:53:1f:f7:2a:33:6f:bc:25:4c:6d:a1:
                    dd:fc:3f:bc:e1:0c:9f:93:f4:e5:3d:c1:f1:b6:52:
                    50:84:e8:d0:12:90:38:28:37:fb:1a:08:04:17:b7:
                    a2:81:e6:66:31:07:0c:f0:78:f6:a7:5c:d5:37:bf:
                    20:5d:cd:ed:21:0e:39:7f:1f:ac:2e:20:8d:5e:65:
                    b9:4d:c1:07:1b:b3:80:94:8a:84:91:9a:51:f7:1d:
                    ed:4f:46:47:58:b9:2a:46:1a:79:cb:be:20:50:a9:
                    2a:85:ac:10:28:52:21:79:dc:4b:4a:00:06:09:7a:
                    08:26:b1:f2:62:c4:7b:bb:45:2e:e2:6c:18:8a:24:
                    cd:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:96:74:C3:26:03:4C:F6:DA:0C:C3:2F:5F:DE:22:78:BB:DA:0A:DF
            X509v3 Authority Key Identifier:
                keyid:7D:E6:E0:77:9D:D8:FB:F9:8F:E9:AD:24:53:1A:24:F7:92:D2:64:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cc1U13ZyteufJNZhWM1mLYCe2khiJNkHosdZnhq4AAMU/1/7DE6E0779DD8FBF98FE9AD24531A24F792D26451.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DE6E0779DD8FBF98FE9AD24531A24F792D26451.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cc1U13ZyteufJNZhWM1mLYCe2khiJNkHosdZnhq4AAMU/1/3230302e3230322e302e302f31392d3234203d3e203130373333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.202.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5f:8b:87:f8:ad:92:2b:7c:fd:fd:55:af:59:38:24:cc:30:68:
         62:a1:7c:83:44:87:e7:d4:fb:c7:a8:1e:54:97:35:13:35:52:
         44:c2:ae:da:ee:e2:2e:1c:66:71:23:2e:6c:b3:14:0d:eb:23:
         64:a0:f1:18:9c:4a:2a:36:8c:72:5c:9e:10:a8:eb:2c:f0:dc:
         ec:c7:1c:95:f0:13:55:07:05:6b:0a:87:d0:a6:86:23:f1:2a:
         16:d8:45:15:3f:0a:b9:df:1d:38:c2:c0:ba:98:62:50:81:20:
         0f:0f:06:ab:63:66:54:7c:43:22:c5:34:fd:7f:5d:8d:4b:d8:
         e0:d2:01:5e:08:ce:0a:d2:99:5f:d9:6f:2c:a1:2d:70:19:c7:
         d5:cc:50:ac:b1:80:2b:f9:f4:b1:b8:32:af:ae:16:0c:dd:77:
         93:af:6b:74:1a:8d:d9:8b:9c:b6:a3:6e:3d:d6:3f:d3:4d:23:
         2b:f0:a5:e4:b3:58:6f:39:e8:38:b5:81:cf:6d:75:f1:bd:f8:
         ee:7c:eb:14:c9:bd:d1:6c:22:01:ba:c4:0e:83:bc:ac:0c:f5:
         8f:a6:ee:9f:6f:d5:39:44:65:e6:ff:8e:d3:e2:76:8b:cc:64:
         cc:21:6c:f6:4d:df:09:ef:42:e2:7d:0c:81:b1:d0:2f:c5:cc:
         2a:10:ef:ec
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUdwQvZMhqeoaZvR6jztniLbVGXdEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0RFNkUwNzc5REQ4RkJGOThGRTlBRDI0NTMxQTI0Rjc5
MkQyNjQ1MTAeFw0yNDA0MDQwMDU1MTlaFw0yNTA0MDMwMTAwMTlaMDMxMTAvBgNV
BAMTKDFBOTY3NEMzMjYwMzRDRjZEQTBDQzMyRjVGREUyMjc4QkJEQTBBREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuWqLh/1GjEPMTD6A+SL+qTBJg
pq8NA0nJeY5yrVE4lTs9oJ1+n0Y7Yq03mpxBoKsEevz+GYly/QxJ3nUU7V+Cj5kj
uULSfLG33h5VTb6K3gfCfxURBYMkL95JVPxfPmXxMI6z9swnlqKF0OTmOEWT2LU3
yvZapne8UuNTH/cqM2+8JUxtod38P7zhDJ+T9OU9wfG2UlCE6NASkDgoN/saCAQX
t6KB5mYxBwzwePanXNU3vyBdze0hDjl/H6wuII1eZblNwQcbs4CUioSRmlH3He1P
RkdYuSpGGnnLviBQqSqFrBAoUiF53EtKAAYJeggmsfJixHu7RS7ibBiKJM1NAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUGpZ0wyYDTPbaDMMvX94ieLvaCt8wHwYDVR0j
BBgwFoAUfebgd53Y+/mP6a0kUxok95LSZFEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2MxVTEzWnl0ZXVmSk5aaFdNMW1MWUNlMmtoaUpOa0hvc2RabmhxNEFB
TVUvMS83REU2RTA3NzlERDhGQkY5OEZFOUFEMjQ1MzFBMjRGNzkyRDI2NDUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdERTZFMDc3OUREOEZCRjk4
RkU5QUQyNDUzMUEyNEY3OTJEMjY0NTEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NjMVUxM1p5dGV1ZkpOWmhXTTFtTFlDZTJraGlKTmtIb3NkWm5ocTRBQU1VLzEv
MzIzMDMwMmUzMjMwMzIyZTMwMmUzMDJmMzEzOTJkMzIzNDIwM2QzZTIwMzEzMDM3
MzMzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBcjKADANBgkqhkiG9w0BAQsFAAOCAQEAX4uH+K2SK3z9
/VWvWTgkzDBoYqF8g0SH59T7x6geVJc1EzVSRMKu2u7iLhxmcSMubLMUDesjZKDx
GJxKKjaMclyeEKjrLPDc7McclfATVQcFawqH0KaGI/EqFthFFT8Kud8dOMLAuphi
UIEgDw8Gq2NmVHxDIsU0/X9djUvY4NIBXgjOCtKZX9lvLKEtcBnH1cxQrLGAK/n0
sbgyr64WDN13k69rdBqN2YuctqNuPdY/000jK/Cl5LNYbznoOLWBz2118b347nzr
FMm90WwiAbrEDoO8rAz1j6bun2/VOURl5v+O0+J2i8xkzCFs9k3fCe9C4n0MgbHQ
L8XMKhDv7A==
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:29 2024 by rpki-client on console-fra.rpki-client.org