Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/1/3230302e35302e3232302e302f32342d3234203d3e20323730343630.roa
File:                     3230302e35302e3232302e302f32342d3234203d3e20323730343630.roa (raw, json)
Hash identifier:          N3iNSKVmoR+3Pd61n7gssCi/s9VXvmVnY5r6Ek7A5vg=
Subject key identifier:   A2:30:A6:EC:7F:2E:18:F4:C8:34:8C:25:5A:2D:89:A6:D8:58:EA:A9
Certificate issuer:       /CN=83DB8824320D38B985E019F808C2A0AAB470FB37
Certificate serial:       64D5DBA5F36C5C9B0462E42B70BF53ADAC319817
Authority key identifier: 83:DB:88:24:32:0D:38:B9:85:E0:19:F8:08:C2:A0:AA:B4:70:FB:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83DB8824320D38B985E019F808C2A0AAB470FB37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/1/3230302e35302e3232302e302f32342d3234203d3e20323730343630.roa
Signing time:             Thu 04 Apr 2024 23:25:49 +0000
ROA not before:           Thu 04 Apr 2024 23:20:49 +0000
ROA not after:            Thu 03 Apr 2025 23:25:49 +0000
asID:                     270460
IP address blocks:        200.50.220.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/1/83DB8824320D38B985E019F808C2A0AAB470FB37.crl
                          rsync://rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/1/83DB8824320D38B985E019F808C2A0AAB470FB37.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83DB8824320D38B985E019F808C2A0AAB470FB37.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:55:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:d5:db:a5:f3:6c:5c:9b:04:62:e4:2b:70:bf:53:ad:ac:31:98:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83DB8824320D38B985E019F808C2A0AAB470FB37
        Validity
            Not Before: Apr  4 23:20:49 2024 GMT
            Not After : Apr  3 23:25:49 2025 GMT
        Subject: CN=A230A6EC7F2E18F4C8348C255A2D89A6D858EAA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:57:a0:56:68:92:2a:8e:fb:0f:64:41:bf:55:
                    5b:b3:d4:c0:81:cc:16:53:38:e1:fa:e8:b4:88:3c:
                    80:e1:09:a0:42:6d:95:44:bb:95:66:f5:d1:e0:10:
                    b5:e0:6e:6d:07:49:99:52:fd:0f:11:38:ab:6e:84:
                    89:6f:4f:68:bd:1d:e2:5e:e6:4d:e0:f1:ea:6f:af:
                    c0:89:3b:2a:62:62:50:72:c2:4a:c3:90:f9:51:7d:
                    42:e6:a8:e8:d0:c6:1c:9e:d6:ed:40:2c:82:a1:6e:
                    8b:9f:68:70:6d:2c:1d:3c:f4:e3:5f:23:c8:ab:cf:
                    a9:5f:e1:eb:e8:53:f9:aa:df:bb:50:d3:0e:4d:bd:
                    94:66:43:67:a4:71:a9:76:e5:38:b6:2a:ac:71:dd:
                    07:19:75:c8:ac:ac:2a:43:0f:ae:9e:e2:d3:cf:eb:
                    96:e1:19:6b:49:3b:d8:09:8f:db:be:6b:a8:1f:b5:
                    3c:24:7b:68:ef:d9:11:20:a5:fc:b7:02:bb:19:12:
                    69:82:4e:21:59:d4:24:b6:b9:8d:5f:a0:92:4c:a6:
                    b1:a8:94:22:0e:e1:86:6a:04:6c:e3:f1:4a:f4:fe:
                    3e:09:ff:46:db:62:ca:08:77:d3:fe:b7:b5:dc:45:
                    99:0f:ea:ff:0d:e6:5f:c1:03:0a:c6:58:ad:ca:0e:
                    28:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:30:A6:EC:7F:2E:18:F4:C8:34:8C:25:5A:2D:89:A6:D8:58:EA:A9
            X509v3 Authority Key Identifier:
                keyid:83:DB:88:24:32:0D:38:B9:85:E0:19:F8:08:C2:A0:AA:B4:70:FB:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/1/83DB8824320D38B985E019F808C2A0AAB470FB37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83DB8824320D38B985E019F808C2A0AAB470FB37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/1/3230302e35302e3232302e302f32342d3234203d3e20323730343630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:7f:c3:4c:4c:61:81:77:14:a2:1d:65:0d:d5:1e:7b:a3:40:
         fc:3c:4e:53:42:d7:0f:92:aa:70:95:5c:bb:fe:47:42:a4:89:
         1a:1b:6e:e7:99:9e:fc:63:19:e5:6d:e3:99:75:a5:b2:77:97:
         6c:37:bd:90:a4:19:4c:cd:80:ae:0c:c5:79:39:bf:4e:b5:a5:
         d1:76:3a:fb:ea:d9:4e:68:ac:e3:31:fe:6e:ce:52:68:a6:32:
         b8:fa:25:29:75:09:52:be:cc:28:96:10:a2:3c:ad:ac:37:27:
         19:9f:fb:cc:fa:8f:b5:cc:a9:3b:bc:73:51:04:bc:cd:a6:6b:
         71:f3:0a:bd:4b:44:35:cb:81:ce:dc:20:cc:72:03:09:cb:bd:
         06:00:eb:e8:37:63:59:ab:61:54:80:53:83:9e:ea:02:fb:03:
         e8:6b:a1:c9:47:2f:83:ef:4c:c7:8a:29:4c:47:f3:d4:0d:0e:
         ec:7d:b2:96:d3:38:e7:50:12:89:28:88:08:2a:90:f1:c9:78:
         08:07:ce:b3:73:ce:ca:60:8f:db:44:50:10:2c:ee:7b:d6:2e:
         8b:70:db:45:31:79:a0:9b:ee:40:8d:46:38:6f:fb:eb:32:ae:
         a9:af:7b:a6:93:7d:a1:c5:f5:1e:a2:24:9f:37:3d:df:62:bb:
         93:e0:32:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:30 2024 by rpki-client on console-fra.rpki-client.org