Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/3230302e3232352e3130382e302f32322d3332203d3e20323633343431.roa
File:                     3230302e3232352e3130382e302f32322d3332203d3e20323633343431.roa (raw, json)
Hash identifier:          Tv1DhkLF72WXG+HT0k0m01/N6w/YVxAa9iTaH27Oe3o=
Subject key identifier:   64:A5:6B:30:61:AA:85:99:CB:46:91:EA:EE:CC:B7:9B:D5:B3:A5:25
Certificate issuer:       /CN=26E3D1B009E7A8557F73668315C1AA6376A4A0C1
Certificate serial:       200AA3126A8992286EA08608947B8A75A9D9D763
Authority key identifier: 26:E3:D1:B0:09:E7:A8:55:7F:73:66:83:15:C1:AA:63:76:A4:A0:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26E3D1B009E7A8557F73668315C1AA6376A4A0C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/3230302e3232352e3130382e302f32322d3332203d3e20323633343431.roa
Signing time:             Sat 09 Nov 2024 14:29:18 +0000
ROA not before:           Sat 09 Nov 2024 14:24:18 +0000
ROA not after:            Sat 08 Nov 2025 14:29:18 +0000
asID:                     263441
IP address blocks:        200.225.108.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/26E3D1B009E7A8557F73668315C1AA6376A4A0C1.crl
                          rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/26E3D1B009E7A8557F73668315C1AA6376A4A0C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26E3D1B009E7A8557F73668315C1AA6376A4A0C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 23:15:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:0a:a3:12:6a:89:92:28:6e:a0:86:08:94:7b:8a:75:a9:d9:d7:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26E3D1B009E7A8557F73668315C1AA6376A4A0C1
        Validity
            Not Before: Nov  9 14:24:18 2024 GMT
            Not After : Nov  8 14:29:18 2025 GMT
        Subject: CN=64A56B3061AA8599CB4691EAEECCB79BD5B3A525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:60:1f:cf:c9:8a:83:f9:ae:74:ce:fd:87:4e:
                    fa:13:4d:61:ad:de:84:72:89:d1:f9:61:50:8a:60:
                    fd:f4:87:81:4f:1f:34:15:a9:e9:cb:5a:36:7b:d7:
                    28:fa:4b:6c:df:e3:e3:f5:5c:94:df:14:97:80:7e:
                    4d:b1:2a:e2:ae:9a:d9:d5:9b:02:01:df:a8:14:08:
                    36:02:b4:be:dd:bf:46:11:6f:68:21:a2:0a:0d:7c:
                    3b:ac:37:10:6c:de:63:45:18:f8:26:0b:7e:4b:60:
                    81:62:3c:ed:07:f5:ac:e6:a2:87:aa:ed:8d:e2:2f:
                    49:84:a7:80:68:44:32:a6:ac:b5:34:06:de:64:d7:
                    c9:7b:1e:82:43:9c:3c:dc:26:72:3f:b7:c7:b6:5d:
                    d7:7e:76:64:74:34:5d:b1:ba:b1:0a:d3:6b:7f:34:
                    46:43:05:78:15:48:52:0f:2e:5e:1b:3a:0e:d2:e4:
                    3e:d4:88:0b:e8:aa:6b:76:1c:ad:f2:70:a6:79:8b:
                    f8:9e:1b:d1:fc:08:d1:dc:56:26:d1:79:17:ca:11:
                    dd:b0:5e:68:f6:90:de:d4:c8:2c:b7:11:70:3f:b6:
                    6c:d9:83:cc:4c:60:c9:17:0c:13:b5:a5:78:a8:1f:
                    1a:35:6b:a5:83:aa:cb:72:41:ff:14:de:7e:a1:c1:
                    97:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A5:6B:30:61:AA:85:99:CB:46:91:EA:EE:CC:B7:9B:D5:B3:A5:25
            X509v3 Authority Key Identifier:
                keyid:26:E3:D1:B0:09:E7:A8:55:7F:73:66:83:15:C1:AA:63:76:A4:A0:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/26E3D1B009E7A8557F73668315C1AA6376A4A0C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26E3D1B009E7A8557F73668315C1AA6376A4A0C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/3230302e3232352e3130382e302f32322d3332203d3e20323633343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.225.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:b5:ea:84:0a:88:24:8a:ea:07:33:50:1b:d3:2a:af:8d:71:
         b8:64:74:69:bc:86:70:f4:e6:40:cc:9e:98:68:50:b9:70:e7:
         14:cf:7f:27:2a:9d:d3:32:a2:08:39:ce:0c:0f:50:ac:5f:49:
         4e:6b:51:38:54:bc:72:4b:cf:cf:0d:1a:55:34:59:2d:58:0b:
         fe:23:16:ae:1e:b8:68:da:07:7e:0c:7a:cf:03:e2:a3:db:f7:
         bf:fa:0e:4f:11:54:db:63:00:c7:48:9e:82:3e:f3:b6:6d:98:
         f3:74:71:69:a4:8f:92:11:c7:c5:22:0e:f3:6e:7f:53:67:40:
         44:92:b1:fe:57:ea:f8:b1:c0:2e:c6:43:3e:90:93:e5:e5:e3:
         7b:d3:8e:30:16:7a:f2:d2:ec:17:44:c7:91:54:3a:b3:72:be:
         fd:1d:50:ac:2e:20:f4:2b:73:d6:f1:43:0a:52:c1:82:2b:8a:
         67:2f:6a:18:17:26:41:f7:d5:09:d6:e9:41:80:e3:90:61:4c:
         65:dd:e4:21:80:e6:1d:38:8d:cc:19:95:42:ff:42:7f:43:13:
         05:a4:8f:ac:a1:76:70:6c:bb:e0:c4:91:27:90:c5:1f:54:7f:
         f8:1d:6d:e4:c9:7d:e3:b1:7d:93:54:11:f8:6f:70:f6:26:07:
         29:50:9c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:22:00 2024 by rpki-client on console-fra.rpki-client.org