Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/1/3230302e35332e36372e302f32342d3234203d3e20323731353034.roa
File:                     3230302e35332e36372e302f32342d3234203d3e20323731353034.roa (raw, json)
Hash identifier:          wU19qbiVaHnoBa64qAB06Lpku1gasKTgVXH1xLogcGM=
Subject key identifier:   D1:0D:B4:FB:6B:54:20:15:C8:6C:74:DB:6D:F0:CA:A5:21:D5:F9:DD
Certificate issuer:       /CN=BDBF088AD60886FED4A9616708283717E8AD2443
Certificate serial:       2D2DEF004289E4F9A35640E63768AE80BD6075C7
Authority key identifier: BD:BF:08:8A:D6:08:86:FE:D4:A9:61:67:08:28:37:17:E8:AD:24:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDBF088AD60886FED4A9616708283717E8AD2443.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/1/3230302e35332e36372e302f32342d3234203d3e20323731353034.roa
Signing time:             Wed 03 Apr 2024 19:11:21 +0000
ROA not before:           Wed 03 Apr 2024 19:06:21 +0000
ROA not after:            Wed 02 Apr 2025 19:11:21 +0000
asID:                     271504
IP address blocks:        200.53.67.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/1/BDBF088AD60886FED4A9616708283717E8AD2443.crl
                          rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/1/BDBF088AD60886FED4A9616708283717E8AD2443.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDBF088AD60886FED4A9616708283717E8AD2443.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 15:38:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:2d:ef:00:42:89:e4:f9:a3:56:40:e6:37:68:ae:80:bd:60:75:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDBF088AD60886FED4A9616708283717E8AD2443
        Validity
            Not Before: Apr  3 19:06:21 2024 GMT
            Not After : Apr  2 19:11:21 2025 GMT
        Subject: CN=D10DB4FB6B542015C86C74DB6DF0CAA521D5F9DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:f1:73:72:78:e2:f9:68:62:33:2c:79:73:f8:
                    18:d1:a8:1c:16:f6:c8:31:07:94:bd:b8:6b:1a:f2:
                    ce:43:53:c1:63:e3:8e:fa:be:fa:d4:c4:ee:f9:d4:
                    ee:80:93:d5:dc:83:1c:b8:d2:d6:c9:b7:af:e7:77:
                    6c:de:70:39:06:e8:43:96:47:f1:83:eb:00:c3:65:
                    5d:c5:d1:ed:08:92:48:a7:de:fb:37:a6:b3:9a:ca:
                    34:63:1e:0b:b4:bb:db:36:2c:fe:de:e7:c1:0d:fe:
                    d9:9b:c4:e2:eb:02:fe:18:ae:ef:51:02:59:4f:53:
                    64:a3:fc:64:7d:c7:4c:74:f3:1f:9d:3c:2d:7f:7f:
                    0d:13:09:30:52:fc:e4:38:24:de:df:bc:97:72:f1:
                    31:e6:c6:2d:63:86:22:cd:da:63:1a:a8:ac:c7:47:
                    27:a8:e6:49:45:4e:f5:b7:44:75:ec:33:57:a6:61:
                    68:ec:35:09:94:27:1c:66:f9:20:7f:60:c8:a9:1a:
                    fd:c9:a1:40:40:10:99:2e:ff:71:83:76:41:a9:5f:
                    50:5a:84:4d:b6:df:e5:86:02:51:c6:67:42:b4:a2:
                    79:5f:bd:43:29:2a:af:f7:95:6a:5f:65:a1:6c:95:
                    79:3f:81:cd:d8:1c:71:d3:18:ae:d2:ae:c4:be:10:
                    42:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:0D:B4:FB:6B:54:20:15:C8:6C:74:DB:6D:F0:CA:A5:21:D5:F9:DD
            X509v3 Authority Key Identifier:
                keyid:BD:BF:08:8A:D6:08:86:FE:D4:A9:61:67:08:28:37:17:E8:AD:24:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/1/BDBF088AD60886FED4A9616708283717E8AD2443.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDBF088AD60886FED4A9616708283717E8AD2443.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/1/3230302e35332e36372e302f32342d3234203d3e20323731353034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:bb:5b:11:b1:7a:b2:95:9e:e9:74:c1:77:a2:37:8e:26:10:
         42:ac:48:e2:5d:d8:df:fc:e6:c2:0b:51:6d:27:84:f3:65:bd:
         80:25:11:34:b5:ca:ec:ed:3f:3a:19:0a:88:92:51:ef:24:85:
         5b:22:80:f4:1c:72:6b:a0:45:f8:1e:7c:46:2a:c1:50:3a:b7:
         c6:59:36:c1:41:a7:97:e5:32:74:8e:08:81:2a:3c:e5:69:78:
         2b:bd:71:c9:fc:11:fc:04:f6:c5:43:d5:82:7a:97:d9:15:ef:
         82:f8:e7:f8:95:c3:ad:6b:c2:25:e7:14:bb:c8:9d:a8:15:37:
         b9:96:25:7a:f0:a8:47:9a:b5:2f:fc:ae:ec:77:1a:98:3f:d7:
         64:84:a6:b8:8c:5a:d2:f6:0f:9a:89:df:20:61:7e:a4:08:ed:
         9a:dc:f1:ba:8c:8b:2b:84:08:36:f6:d2:14:25:b0:13:d7:76:
         e9:40:93:ab:94:ec:c0:4c:e9:b4:16:ac:a8:2e:49:84:4c:c5:
         64:8c:6d:13:b8:9f:c3:92:92:81:83:20:43:50:1e:db:28:8f:
         fd:6c:72:45:45:e5:64:e9:1f:5b:c9:7d:9f:a5:cd:aa:28:f1:
         83:3b:e4:f8:8f:30:0c:20:41:3b:da:ca:94:48:93:95:6d:3f:
         11:59:75:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 15:42:24 2024 by rpki-client on console-fra.rpki-client.org