Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3230302e3232392e3232302e302f32322d3234203d3e203532383733.roa
File:                     3230302e3232392e3232302e302f32322d3234203d3e203532383733.roa (raw, json)
Hash identifier:          BB98djtTAXXaRbdwQLNLqJp8c41JAIFYzYRhPGtO86c=
Subject key identifier:   73:D8:15:92:07:39:82:CA:2F:AE:B8:F8:4F:89:B7:BA:2B:86:B4:3F
Certificate issuer:       /CN=E6F5BFAC269FD295626E73C68DC08EFC7BFDEED7
Certificate serial:       57B78CB0D060EABA0D065574E80D9125D758110B
Authority key identifier: E6:F5:BF:AC:26:9F:D2:95:62:6E:73:C6:8D:C0:8E:FC:7B:FD:EE:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6F5BFAC269FD295626E73C68DC08EFC7BFDEED7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3230302e3232392e3232302e302f32322d3234203d3e203532383733.roa
Signing time:             Mon 11 Nov 2024 19:16:41 +0000
ROA not before:           Mon 11 Nov 2024 19:11:41 +0000
ROA not after:            Mon 10 Nov 2025 19:16:41 +0000
asID:                     52873
IP address blocks:        200.229.220.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/E6F5BFAC269FD295626E73C68DC08EFC7BFDEED7.crl
                          rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/E6F5BFAC269FD295626E73C68DC08EFC7BFDEED7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6F5BFAC269FD295626E73C68DC08EFC7BFDEED7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 08:24:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:b7:8c:b0:d0:60:ea:ba:0d:06:55:74:e8:0d:91:25:d7:58:11:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6F5BFAC269FD295626E73C68DC08EFC7BFDEED7
        Validity
            Not Before: Nov 11 19:11:41 2024 GMT
            Not After : Nov 10 19:16:41 2025 GMT
        Subject: CN=73D81592073982CA2FAEB8F84F89B7BA2B86B43F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1e:ce:7d:d8:52:c5:f5:de:73:d4:ab:7e:51:
                    81:1a:89:81:8b:c1:8d:e6:f4:61:e5:80:3a:96:55:
                    0c:cc:90:a8:89:71:bf:6f:db:bc:80:78:b0:61:be:
                    68:e9:1c:06:df:3c:d8:aa:5c:aa:d6:d4:5e:46:7c:
                    0c:1c:43:90:5f:bd:d1:a6:87:f7:c4:6d:c1:9a:5f:
                    c4:37:03:f2:eb:b1:53:79:f5:ff:50:71:ec:e0:5b:
                    19:2e:33:86:06:d7:56:62:a2:ab:86:4e:c5:ef:27:
                    64:4d:92:c8:f1:5f:8d:8a:fe:f0:a8:e9:a2:1b:bc:
                    61:a7:3b:99:6c:07:14:e8:61:f6:f9:c6:07:f2:4b:
                    ec:0d:f0:9d:4c:39:6e:d0:de:f7:35:85:92:fd:9e:
                    34:dd:c0:89:83:8c:57:a7:2e:29:29:90:41:87:d1:
                    4d:7a:9f:43:6c:6a:01:1b:22:29:24:32:bd:cc:78:
                    d7:8a:e9:fc:98:64:23:11:9c:d0:36:47:2b:69:5a:
                    63:11:2a:44:99:66:b6:0c:0a:66:16:3c:99:09:0a:
                    e5:8e:25:cb:5d:83:42:19:11:08:60:f2:fd:a3:4f:
                    e6:99:ac:b1:14:39:ee:bd:5d:c7:33:49:73:8b:6c:
                    ca:c0:68:4a:e5:e2:b1:c9:09:aa:54:6a:a7:97:de:
                    81:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:D8:15:92:07:39:82:CA:2F:AE:B8:F8:4F:89:B7:BA:2B:86:B4:3F
            X509v3 Authority Key Identifier:
                keyid:E6:F5:BF:AC:26:9F:D2:95:62:6E:73:C6:8D:C0:8E:FC:7B:FD:EE:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/E6F5BFAC269FD295626E73C68DC08EFC7BFDEED7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6F5BFAC269FD295626E73C68DC08EFC7BFDEED7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3230302e3232392e3232302e302f32322d3234203d3e203532383733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:5d:ba:82:82:1d:97:cc:9f:49:a4:f4:bb:58:d5:60:44:0f:
         c4:9e:14:2a:da:90:6b:67:76:76:c3:17:19:52:2a:57:34:b0:
         5d:41:e9:13:fb:11:c1:8a:93:c0:e8:c9:1f:36:61:ca:45:fe:
         b0:71:7f:96:05:83:60:89:dc:0e:c6:db:50:8a:dd:e9:66:2b:
         ce:91:a6:5b:f6:35:ee:a3:5b:29:90:8a:c1:91:f4:79:ab:f8:
         16:b3:9a:51:a1:0d:26:d3:f0:ae:4f:91:a2:b8:9f:da:da:4a:
         5c:08:94:29:d3:11:e2:ba:6d:35:8c:82:97:50:8c:ce:5b:66:
         69:d8:cd:67:72:2a:d9:8f:41:fc:95:d2:a7:f5:e0:eb:e6:7d:
         c9:ff:2b:84:86:92:46:3d:29:83:75:ea:ab:4f:30:54:43:91:
         f8:f4:5e:0b:d2:4a:4c:ad:64:9e:12:96:ae:89:02:af:79:3e:
         c1:55:a8:35:88:30:17:43:d6:3d:cd:76:fe:c9:95:33:cd:d3:
         8b:dc:80:4e:34:f5:3a:18:89:df:3e:bc:ac:1e:83:fe:ee:8a:
         90:de:69:b0:a0:7c:2d:15:ad:84:23:ec:25:2e:05:d4:0b:41:
         41:ee:d7:2e:aa:3e:20:71:82:e6:ab:a5:8c:fb:fb:a9:05:67:
         65:c9:3d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:11 2024 by rpki-client on console-fra.rpki-client.org