Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ENZNLMwewHzpbJmgndnh9VuSSbK2cc1PUFXF4voAXCn4/0/3230302e31302e3133322e302f32322d3234203d3e203631393334.roa
File:                     3230302e31302e3133322e302f32322d3234203d3e203631393334.roa (raw, json)
Hash identifier:          9/AvFSjUFYtT2DOw5+jpsAVKsliYyLRgAjfv1LFJxhs=
Subject key identifier:   4E:D9:03:D6:E4:AD:16:36:44:D9:C3:36:A3:82:8B:31:8C:BA:B7:79
Certificate issuer:       /CN=B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204
Certificate serial:       091EC5A33E521F6FABFCB9B5CDCB01B8025F3477
Authority key identifier: B2:A1:BA:E4:B3:4B:FC:AC:AD:5F:1A:7C:AF:81:C3:FE:7E:9C:02:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ENZNLMwewHzpbJmgndnh9VuSSbK2cc1PUFXF4voAXCn4/0/3230302e31302e3133322e302f32322d3234203d3e203631393334.roa
Signing time:             Fri 12 Jul 2024 17:45:42 +0000
ROA not before:           Fri 12 Jul 2024 17:40:42 +0000
ROA not after:            Fri 11 Jul 2025 17:45:42 +0000
asID:                     61934
IP address blocks:        200.10.132.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ENZNLMwewHzpbJmgndnh9VuSSbK2cc1PUFXF4voAXCn4/0/B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.crl
                          rsync://rpki-repo.registro.br/repo/ENZNLMwewHzpbJmgndnh9VuSSbK2cc1PUFXF4voAXCn4/0/B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 18:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:1e:c5:a3:3e:52:1f:6f:ab:fc:b9:b5:cd:cb:01:b8:02:5f:34:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204
        Validity
            Not Before: Jul 12 17:40:42 2024 GMT
            Not After : Jul 11 17:45:42 2025 GMT
        Subject: CN=4ED903D6E4AD163644D9C336A3828B318CBAB779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0c:09:84:93:29:39:b9:23:dd:13:dd:e6:82:
                    b3:6d:ad:d1:54:18:88:49:0c:36:26:c4:2e:c0:d0:
                    8d:c4:45:99:18:85:22:19:a5:ac:1c:d3:2e:11:85:
                    ac:dc:66:2c:50:d5:e0:18:8b:e0:4e:95:0b:cf:de:
                    b2:17:d9:a1:25:7d:97:f1:d3:59:f4:ff:c4:13:c8:
                    4b:85:42:c4:26:41:50:8f:69:89:80:2b:1c:a8:26:
                    e4:9d:e9:19:15:1c:66:37:35:7b:df:27:1e:09:0a:
                    32:71:65:d3:0d:3b:39:0e:51:3c:be:0a:5a:d6:60:
                    b1:f5:31:56:95:12:e2:eb:61:32:89:4e:6e:84:60:
                    71:b3:b5:5b:e7:c0:52:09:17:44:35:29:82:83:76:
                    db:72:33:7e:3e:64:36:84:6b:7c:9e:39:5e:f9:b9:
                    c0:14:1b:ba:55:53:d9:5d:96:fa:01:d6:0e:b4:f1:
                    36:c8:7a:93:5a:85:ff:3a:db:49:d0:d3:7f:db:99:
                    72:63:38:eb:fe:e0:66:70:ab:f7:66:d7:b3:14:05:
                    51:3a:84:49:88:01:49:1d:68:1f:93:27:1d:03:1c:
                    ed:4e:04:b5:da:95:63:5f:d5:34:96:9c:67:b4:b5:
                    9c:28:f5:bc:ea:14:38:6e:9c:4d:90:90:8f:4b:c0:
                    85:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:D9:03:D6:E4:AD:16:36:44:D9:C3:36:A3:82:8B:31:8C:BA:B7:79
            X509v3 Authority Key Identifier:
                keyid:B2:A1:BA:E4:B3:4B:FC:AC:AD:5F:1A:7C:AF:81:C3:FE:7E:9C:02:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ENZNLMwewHzpbJmgndnh9VuSSbK2cc1PUFXF4voAXCn4/0/B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ENZNLMwewHzpbJmgndnh9VuSSbK2cc1PUFXF4voAXCn4/0/3230302e31302e3133322e302f32322d3234203d3e203631393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:39:67:b9:e0:fc:5a:dd:c1:30:02:d7:62:f8:3c:80:ed:f5:
         a5:59:76:36:49:f8:19:65:b4:a7:26:1f:19:a1:ad:63:d4:f2:
         1a:31:5d:5a:18:06:0a:82:28:69:2d:23:63:3e:80:ff:24:c4:
         dc:79:df:d8:15:22:73:6d:fd:c0:51:d1:7d:24:5a:6f:88:a4:
         d9:10:dc:82:6c:88:3b:7f:39:f0:a1:10:95:e0:08:66:ea:ed:
         ff:ff:8e:d3:02:1f:3e:17:58:b0:31:dc:e4:b9:a8:76:83:2a:
         5b:16:96:ca:eb:a5:cb:f1:92:24:4e:8e:ad:df:7f:4d:3d:de:
         16:ed:5a:fa:66:bc:78:8f:bc:33:b5:41:af:33:9c:c8:ee:30:
         8d:cf:31:20:38:c4:ef:56:38:58:d5:dc:db:4c:dd:60:13:77:
         ea:01:b1:a2:1e:40:98:76:87:b5:31:4f:56:fd:be:e9:73:1e:
         92:82:15:ed:78:0d:75:da:72:1d:a4:bb:04:15:a9:d8:01:55:
         3d:1c:52:9e:94:7d:ab:e1:13:07:71:56:77:c0:97:00:63:36:
         ed:20:ec:ea:bf:39:aa:83:d8:70:7d:41:14:0a:94:43:0f:72:
         eb:08:14:34:91:10:6e:8c:42:ec:21:14:df:a8:5e:93:92:b7:
         1b:6a:35:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:21:12 2024 by rpki-client on console-ams.rpki-client.org