Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ei4jmNZrcWfTjuLjBXGQUV6bC5GdUwqdq5j7rZs1cyKz/0/3230302e38312e34382e302f32322d3234203d3e20323730343633.roa
File:                     3230302e38312e34382e302f32322d3234203d3e20323730343633.roa (raw, json)
Hash identifier:          rD/f3tJIZUTn89W6tNjoIAG4nN0SyLKOfnPTbcol+vI=
Subject key identifier:   82:15:59:BF:9C:94:43:39:D8:8C:C1:86:17:6E:36:C1:5F:B8:D8:23
Certificate issuer:       /CN=B882C1C7F7853B50794B0D38584713A2C1528F9D
Certificate serial:       16C6A7DABC92623A574178636557E0F97F1F0256
Authority key identifier: B8:82:C1:C7:F7:85:3B:50:79:4B:0D:38:58:47:13:A2:C1:52:8F:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B882C1C7F7853B50794B0D38584713A2C1528F9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ei4jmNZrcWfTjuLjBXGQUV6bC5GdUwqdq5j7rZs1cyKz/0/3230302e38312e34382e302f32322d3234203d3e20323730343633.roa
Signing time:             Wed 22 May 2024 17:14:25 +0000
ROA not before:           Wed 22 May 2024 17:09:25 +0000
ROA not after:            Wed 21 May 2025 17:14:25 +0000
asID:                     270463
IP address blocks:        200.81.48.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ei4jmNZrcWfTjuLjBXGQUV6bC5GdUwqdq5j7rZs1cyKz/0/B882C1C7F7853B50794B0D38584713A2C1528F9D.crl
                          rsync://rpki-repo.registro.br/repo/Ei4jmNZrcWfTjuLjBXGQUV6bC5GdUwqdq5j7rZs1cyKz/0/B882C1C7F7853B50794B0D38584713A2C1528F9D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B882C1C7F7853B50794B0D38584713A2C1528F9D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Jun 2024 11:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:c6:a7:da:bc:92:62:3a:57:41:78:63:65:57:e0:f9:7f:1f:02:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B882C1C7F7853B50794B0D38584713A2C1528F9D
        Validity
            Not Before: May 22 17:09:25 2024 GMT
            Not After : May 21 17:14:25 2025 GMT
        Subject: CN=821559BF9C944339D88CC186176E36C15FB8D823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:11:30:30:70:25:08:61:a2:b4:87:2f:34:2a:
                    3e:e8:d6:39:4f:ab:91:cc:63:b9:4a:26:3b:32:4f:
                    d0:ba:47:65:15:69:3d:17:46:33:47:0d:55:53:23:
                    8e:e8:9a:2b:34:b7:19:fe:a2:53:c7:6a:39:d4:76:
                    f6:ca:de:d0:28:48:96:32:68:bf:79:d8:ed:2f:f9:
                    e2:9f:b0:30:61:8c:8a:c9:7f:42:6f:20:e4:c9:85:
                    fa:db:b4:6c:e0:ed:b2:f4:75:4b:ad:c3:43:42:3b:
                    f7:32:7f:13:39:ee:05:08:f0:b4:79:6a:ca:01:63:
                    a3:70:1d:8a:fb:d9:17:80:c9:28:d1:d6:f8:b9:14:
                    00:e8:3e:37:30:01:6a:ab:51:6d:8f:95:41:f0:75:
                    a0:29:92:dc:8e:b7:03:19:70:c7:a6:1c:cb:32:b8:
                    b2:c8:67:b5:83:60:73:70:cc:13:7f:36:af:3d:80:
                    fe:cd:96:69:0d:1f:d3:ed:b3:89:70:fd:ba:b6:b9:
                    7f:26:f6:80:91:89:0a:8c:a6:5a:6d:05:0f:79:92:
                    dc:91:8b:07:88:7a:b5:39:e6:8f:4a:ea:b3:52:f8:
                    6b:62:f8:23:22:e5:5a:bb:e0:44:63:60:f3:59:16:
                    48:58:50:c0:ff:f5:a4:2e:c5:f6:99:45:05:c5:f6:
                    d5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:15:59:BF:9C:94:43:39:D8:8C:C1:86:17:6E:36:C1:5F:B8:D8:23
            X509v3 Authority Key Identifier:
                keyid:B8:82:C1:C7:F7:85:3B:50:79:4B:0D:38:58:47:13:A2:C1:52:8F:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ei4jmNZrcWfTjuLjBXGQUV6bC5GdUwqdq5j7rZs1cyKz/0/B882C1C7F7853B50794B0D38584713A2C1528F9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B882C1C7F7853B50794B0D38584713A2C1528F9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ei4jmNZrcWfTjuLjBXGQUV6bC5GdUwqdq5j7rZs1cyKz/0/3230302e38312e34382e302f32322d3234203d3e20323730343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.81.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:23:7b:34:7a:a3:dd:b8:12:2e:af:83:04:84:d0:43:ce:c6:
         74:b9:ac:5e:ac:f4:80:ca:d4:3d:98:bb:df:30:6d:e7:19:99:
         95:fc:33:2a:6b:64:db:1d:73:49:c2:19:ee:0f:b7:16:24:33:
         4b:ad:d7:18:14:ca:ec:23:3f:83:4a:cc:52:89:84:02:24:44:
         23:3b:c0:d9:ab:6f:8f:f5:a3:f0:63:2c:6e:fb:cc:c3:62:86:
         6a:92:37:2e:58:1c:17:75:6c:d5:03:a6:a8:06:24:30:a0:41:
         ea:53:a8:59:13:ec:9c:91:d9:ab:ec:05:c3:04:44:5f:75:1d:
         e1:30:b3:02:55:f1:fd:0c:dc:d2:92:bc:c9:68:9a:14:b1:d4:
         43:5d:f2:58:54:42:43:f4:69:91:10:29:17:27:23:fa:3a:6b:
         b5:3c:5d:11:e1:bd:8a:b8:cf:39:df:6c:8e:d3:5a:07:d3:ac:
         e5:52:e6:f0:27:4e:29:01:4a:7b:c9:2d:e3:28:46:7d:03:96:
         5b:e5:44:f2:77:c3:2f:72:79:bb:8e:93:aa:27:b8:d7:14:3e:
         dc:34:50:6a:75:f1:54:89:71:da:fe:a3:99:cb:93:31:a3:1e:
         0f:b7:c9:3e:e8:28:b4:aa:57:fc:f9:41:a1:eb:f4:f8:a4:54:
         a7:4a:e2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 13:43:13 2024 by rpki-client on console-fra.rpki-client.org