Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/1/3230302e362e3132382e302f32322d3233203d3e203532363934.roa
File:                     3230302e362e3132382e302f32322d3233203d3e203532363934.roa (raw, json)
Hash identifier:          88GAB/ajNFejeg79McmE93cg65dzwZWhFtZgL4eeiWk=
Subject key identifier:   22:A3:42:CA:EB:E8:6F:4C:EB:3F:C7:CF:9D:DB:27:D3:6B:5A:A7:5D
Certificate issuer:       /CN=83129E5E092C29B388C70341FCF41F83A69B3CCC
Certificate serial:       3C4CD3346210583605FC263FCC39BF9469D9A98D
Authority key identifier: 83:12:9E:5E:09:2C:29:B3:88:C7:03:41:FC:F4:1F:83:A6:9B:3C:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83129E5E092C29B388C70341FCF41F83A69B3CCC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/1/3230302e362e3132382e302f32322d3233203d3e203532363934.roa
Signing time:             Wed 03 Apr 2024 23:47:21 +0000
ROA not before:           Wed 03 Apr 2024 23:42:21 +0000
ROA not after:            Wed 02 Apr 2025 23:47:21 +0000
asID:                     52694
IP address blocks:        200.6.128.0/22 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/1/83129E5E092C29B388C70341FCF41F83A69B3CCC.crl
                          rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/1/83129E5E092C29B388C70341FCF41F83A69B3CCC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83129E5E092C29B388C70341FCF41F83A69B3CCC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 16:15:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:4c:d3:34:62:10:58:36:05:fc:26:3f:cc:39:bf:94:69:d9:a9:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83129E5E092C29B388C70341FCF41F83A69B3CCC
        Validity
            Not Before: Apr  3 23:42:21 2024 GMT
            Not After : Apr  2 23:47:21 2025 GMT
        Subject: CN=22A342CAEBE86F4CEB3FC7CF9DDB27D36B5AA75D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c5:81:6a:8b:1d:d9:f4:bf:c1:8e:7e:25:52:
                    7c:23:4f:65:32:06:78:ef:a6:3e:73:6a:c8:6a:ca:
                    66:46:80:02:34:e5:be:e0:ba:51:fc:e2:4e:2e:39:
                    26:11:e6:04:b2:a7:d9:71:fe:ac:b2:1a:7a:91:91:
                    a7:c3:ee:0b:6f:a0:fe:07:47:e3:8e:ad:f5:09:19:
                    b4:93:e0:28:82:76:45:fe:d4:ce:34:d1:eb:6e:7c:
                    07:38:42:00:95:df:39:16:32:6e:18:a8:1e:31:be:
                    af:88:30:ae:fb:97:15:0a:bc:98:01:7b:dc:25:73:
                    a8:07:27:7c:a4:dc:9a:34:02:36:9d:79:f4:39:aa:
                    64:26:1e:5c:96:54:0a:15:56:41:d8:ea:a2:13:e1:
                    72:bf:4d:01:de:f9:71:15:fd:19:1b:c9:cc:a9:e5:
                    9c:88:60:47:17:78:0a:8c:a6:7f:00:7a:0a:1b:51:
                    75:13:54:46:ca:65:b3:ed:a8:27:af:9b:d7:88:37:
                    81:85:b1:a0:1a:47:16:5b:38:95:13:a3:54:49:a7:
                    b4:98:d4:ed:ce:cd:51:de:2c:c1:82:59:23:9a:c6:
                    1c:66:13:3c:a1:f7:06:dc:af:5f:ad:03:9f:46:ca:
                    77:4f:b5:e3:58:42:87:61:c3:a4:c2:82:e1:66:56:
                    14:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:A3:42:CA:EB:E8:6F:4C:EB:3F:C7:CF:9D:DB:27:D3:6B:5A:A7:5D
            X509v3 Authority Key Identifier:
                keyid:83:12:9E:5E:09:2C:29:B3:88:C7:03:41:FC:F4:1F:83:A6:9B:3C:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/1/83129E5E092C29B388C70341FCF41F83A69B3CCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83129E5E092C29B388C70341FCF41F83A69B3CCC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/1/3230302e362e3132382e302f32322d3233203d3e203532363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.6.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:8f:31:d2:79:f9:24:1e:56:ab:88:f6:01:1b:5c:92:39:95:
         ef:fe:52:8c:1d:43:84:7f:c5:7c:79:5f:ec:11:93:29:e4:70:
         c9:f0:c8:0f:de:ef:d7:7c:44:43:91:99:5d:d5:26:e0:7c:08:
         d8:19:12:c8:0b:3a:bd:10:45:16:81:59:8c:13:fa:75:f4:1c:
         40:d5:20:46:7b:70:7a:4c:71:90:38:53:be:a1:44:bd:fd:0b:
         e2:9f:2a:12:f6:6d:bf:58:ea:f9:6c:12:66:0f:e1:c4:2e:91:
         43:98:a2:7e:ae:f0:7e:78:15:ac:9a:55:8c:f5:40:a1:eb:e2:
         b2:3a:46:1b:8d:ba:04:88:cf:b6:67:09:fc:4d:af:53:a3:b8:
         28:73:4c:cd:1d:d2:50:8a:f8:a0:c5:d6:98:69:03:a5:e3:43:
         f0:36:8e:29:0a:2b:e8:e3:7e:9e:6e:87:6c:2b:7f:51:2d:e8:
         6d:8b:3d:55:25:28:ee:63:c0:92:15:67:eb:d8:37:20:99:37:
         02:20:3b:d5:87:aa:36:73:22:04:9d:dc:66:4a:11:71:74:34:
         cb:04:9c:36:05:e4:8e:d0:2a:0c:b1:5a:40:be:61:1a:5f:d3:
         90:98:dc:44:dc:49:ec:7c:eb:f2:57:2a:f9:28:4b:2c:3c:24:
         d0:4f:0d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:31:58 2024 by rpki-client on console-fra.rpki-client.org