Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/1/3230302e3232302e3230362e302f32332d3234203d3e20323632353839.roa
File:                     3230302e3232302e3230362e302f32332d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          Vu7Ddk4yH+oh9rXNGocK+6x4XMd05TKejM9MEolvUGA=
Subject key identifier:   D1:5E:FD:86:FD:E0:B7:B6:8D:66:D4:DB:8F:4C:CC:F0:69:9D:F4:E8
Certificate issuer:       /CN=BACB501EDCAB377D2343D4379062CDF97EA26F66
Certificate serial:       1444FE909661C1EE2102F4877EF7DBAA38814DAE
Authority key identifier: BA:CB:50:1E:DC:AB:37:7D:23:43:D4:37:90:62:CD:F9:7E:A2:6F:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BACB501EDCAB377D2343D4379062CDF97EA26F66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/1/3230302e3232302e3230362e302f32332d3234203d3e20323632353839.roa
Signing time:             Fri 05 Apr 2024 03:32:33 +0000
ROA not before:           Fri 05 Apr 2024 03:27:33 +0000
ROA not after:            Fri 04 Apr 2025 03:32:33 +0000
asID:                     262589
IP address blocks:        200.220.206.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/1/BACB501EDCAB377D2343D4379062CDF97EA26F66.crl
                          rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/1/BACB501EDCAB377D2343D4379062CDF97EA26F66.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BACB501EDCAB377D2343D4379062CDF97EA26F66.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 16:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:44:fe:90:96:61:c1:ee:21:02:f4:87:7e:f7:db:aa:38:81:4d:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BACB501EDCAB377D2343D4379062CDF97EA26F66
        Validity
            Not Before: Apr  5 03:27:33 2024 GMT
            Not After : Apr  4 03:32:33 2025 GMT
        Subject: CN=D15EFD86FDE0B7B68D66D4DB8F4CCCF0699DF4E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:06:8e:4b:f4:1c:e5:aa:4b:f4:04:1b:30:be:
                    59:86:c2:53:02:df:e0:1a:21:48:c6:c9:96:c4:62:
                    66:1a:6b:70:80:76:3e:13:72:98:09:34:d1:02:2f:
                    71:ba:39:22:16:39:88:dd:42:24:54:f3:d0:0a:83:
                    d1:fc:95:95:98:78:9c:b0:9e:ee:b9:36:0a:cb:ab:
                    34:ac:53:82:af:6b:6c:6e:58:dc:91:5e:52:f9:70:
                    40:ab:33:30:b5:9d:55:82:08:af:35:2c:17:df:2d:
                    c6:e4:84:2c:79:97:21:ab:71:b8:bc:ca:4a:82:20:
                    d4:8a:19:fa:3e:69:f5:ac:60:8e:d5:bb:92:21:e8:
                    35:cb:b0:bd:3c:9f:9c:50:cc:89:a1:25:50:e5:b9:
                    6a:d7:5c:47:79:47:3d:ba:1a:03:bd:09:26:64:6f:
                    5b:dc:38:c5:65:a5:f2:3d:ae:9c:a7:70:43:09:34:
                    9c:c5:a1:08:71:d0:bf:4e:ba:a8:3c:61:c4:2b:64:
                    5e:2a:b7:37:54:7c:5a:45:07:86:cc:7a:cb:fb:ae:
                    6b:e2:a5:a2:d7:8c:d6:4d:89:6f:69:a0:47:b4:64:
                    2f:60:2d:61:9d:89:4a:79:74:c0:87:8e:4c:29:96:
                    d8:f9:fa:83:22:f9:be:8b:2b:56:6e:55:a1:f5:2c:
                    c8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:5E:FD:86:FD:E0:B7:B6:8D:66:D4:DB:8F:4C:CC:F0:69:9D:F4:E8
            X509v3 Authority Key Identifier:
                keyid:BA:CB:50:1E:DC:AB:37:7D:23:43:D4:37:90:62:CD:F9:7E:A2:6F:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/1/BACB501EDCAB377D2343D4379062CDF97EA26F66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BACB501EDCAB377D2343D4379062CDF97EA26F66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/1/3230302e3232302e3230362e302f32332d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:09:95:48:72:c1:c7:fe:e6:16:5c:bd:20:a3:96:45:68:fd:
         6b:76:41:c2:7e:ea:5d:16:8b:6a:42:9d:cd:b1:1c:c9:39:55:
         45:26:2f:cb:49:1a:62:50:83:6a:5a:3b:68:98:60:cf:24:f4:
         1e:9f:f7:57:e1:bd:69:c2:fc:bd:95:fc:78:31:52:71:7f:fa:
         8f:af:85:fb:2c:f6:c3:8c:c8:6c:10:c7:e0:3d:50:23:4a:f4:
         4c:42:d6:67:7f:6b:ae:37:11:16:c5:17:78:eb:78:a1:16:3e:
         29:7c:0b:b1:f7:68:59:e9:74:19:bd:26:d7:22:c8:51:ba:77:
         08:89:58:40:49:af:9f:e7:15:e7:4c:76:2c:63:04:3b:d0:e2:
         91:b1:50:07:50:62:3b:f3:03:1f:d6:6d:9d:24:6a:c3:0b:d9:
         bf:47:e3:bf:d2:08:67:30:83:2b:b8:80:41:56:9e:ba:8c:98:
         7d:d4:c2:7c:dd:87:0a:30:9e:00:e9:d7:5d:ca:d8:c3:71:50:
         78:3d:c8:f5:39:a4:ea:8d:2e:85:5f:9d:fe:68:7e:2d:21:5f:
         e9:e0:ac:e3:72:75:38:4d:71:0f:90:bd:5c:17:ba:ae:d5:dd:
         67:7c:b9:a1:bb:31:b9:99:13:8f:56:8b:2f:f1:1f:2c:a3:c2:
         79:27:0a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 17:08:26 2024 by rpki-client on console-ams.rpki-client.org