Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/3230302e362e3133342e302f32332d3233203d3e20323731353733.roa
File:                     3230302e362e3133342e302f32332d3233203d3e20323731353733.roa (raw, json)
Hash identifier:          +dcN31OZPdFWMLevLgvAVgVc0B7A5oI+/eZEeF2P/Ps=
Subject key identifier:   85:AF:54:DA:86:29:B8:25:38:1A:E7:6A:38:29:2C:14:E8:85:68:AB
Certificate issuer:       /CN=07767A41F66E619BE686DEE855A5A135F9F25C82
Certificate serial:       5B08D7D538370C1BAA7CF0ECCC775338C6A62AA5
Authority key identifier: 07:76:7A:41:F6:6E:61:9B:E6:86:DE:E8:55:A5:A1:35:F9:F2:5C:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07767A41F66E619BE686DEE855A5A135F9F25C82.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/3230302e362e3133342e302f32332d3233203d3e20323731353733.roa
Signing time:             Mon 26 Aug 2024 20:06:10 +0000
ROA not before:           Mon 26 Aug 2024 20:01:10 +0000
ROA not after:            Mon 25 Aug 2025 20:06:10 +0000
asID:                     271573
IP address blocks:        200.6.134.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/07767A41F66E619BE686DEE855A5A135F9F25C82.crl
                          rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/07767A41F66E619BE686DEE855A5A135F9F25C82.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07767A41F66E619BE686DEE855A5A135F9F25C82.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 18:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:08:d7:d5:38:37:0c:1b:aa:7c:f0:ec:cc:77:53:38:c6:a6:2a:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07767A41F66E619BE686DEE855A5A135F9F25C82
        Validity
            Not Before: Aug 26 20:01:10 2024 GMT
            Not After : Aug 25 20:06:10 2025 GMT
        Subject: CN=85AF54DA8629B825381AE76A38292C14E88568AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:28:04:08:f7:cd:2b:ed:6b:1b:68:97:32:46:
                    83:84:6e:cc:57:6f:0f:e9:0c:92:0d:58:18:37:f3:
                    00:10:d7:81:80:df:11:12:a7:8d:26:3f:3c:7e:45:
                    01:8a:8e:1f:2c:41:ea:3d:c7:d4:b2:b3:9e:15:12:
                    d1:ac:21:04:a0:d2:3f:eb:7d:8c:fd:86:df:ab:65:
                    fa:be:7d:be:68:55:f4:24:57:f0:0d:83:1a:3d:17:
                    8a:04:64:c9:7e:1a:2d:f5:22:b0:72:96:d4:fd:45:
                    e9:93:fb:67:a8:5b:21:c4:66:5a:91:2d:3d:05:f7:
                    35:6c:4b:77:0c:06:cb:87:b7:ad:cf:f6:36:fc:e2:
                    b9:68:ed:86:f6:02:13:8c:e9:05:84:e4:8f:9e:cd:
                    e9:a3:68:54:f4:9c:61:24:99:f0:2e:3e:41:88:23:
                    f1:71:7c:43:89:a7:39:ba:24:99:70:4e:b8:cc:9b:
                    43:dd:c8:b0:56:26:b8:b1:69:e5:1b:48:94:e3:9d:
                    f9:e9:21:53:29:81:60:9b:70:00:f3:d2:2e:16:41:
                    43:72:7c:15:bc:3f:36:a0:42:12:77:b9:f4:c6:19:
                    59:19:40:58:34:12:89:be:a2:2b:54:93:24:df:f8:
                    74:db:10:9e:2e:55:2e:5e:4c:8e:93:04:4f:1f:31:
                    c3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:AF:54:DA:86:29:B8:25:38:1A:E7:6A:38:29:2C:14:E8:85:68:AB
            X509v3 Authority Key Identifier:
                keyid:07:76:7A:41:F6:6E:61:9B:E6:86:DE:E8:55:A5:A1:35:F9:F2:5C:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/07767A41F66E619BE686DEE855A5A135F9F25C82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07767A41F66E619BE686DEE855A5A135F9F25C82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/3230302e362e3133342e302f32332d3233203d3e20323731353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.6.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:18:fd:5f:ae:91:fa:8c:37:6c:63:13:62:61:ad:b5:cc:2e:
         f2:15:47:4e:45:3b:af:28:e3:13:64:e7:9a:1c:16:39:d4:39:
         e3:09:c6:8b:c2:64:13:5f:75:35:77:16:09:fb:24:fa:6c:c3:
         f3:d0:74:ef:3a:a6:82:1c:44:f0:90:f4:1e:f8:6e:da:c6:5a:
         ce:7c:53:2b:48:67:9e:80:70:88:03:a2:e7:bb:1e:69:6b:e2:
         00:71:97:db:1d:8e:d1:97:de:5b:d2:46:fc:31:72:2d:28:ba:
         94:f8:2b:25:a3:aa:58:d3:e6:99:3b:92:a2:7f:e6:0a:d7:48:
         56:3e:6b:84:d8:c7:dd:8c:2b:d1:ed:8b:41:e6:d3:5a:eb:bf:
         0a:ee:85:dc:17:d4:b7:e6:67:36:38:02:71:fe:91:a7:3d:15:
         5d:18:10:27:5b:e7:81:84:64:8b:b6:c2:11:56:ef:c4:bc:84:
         32:3e:b3:e0:fc:e0:74:37:2d:be:02:51:3f:83:ae:d5:81:c3:
         d4:37:63:a2:70:4a:fc:fa:e7:33:8e:54:da:4b:7f:92:cf:e9:
         cc:34:00:b5:4a:1d:c8:27:d6:ef:35:ae:2e:1e:b9:37:f6:81:
         29:92:1f:19:6d:ec:57:df:91:e1:91:fa:24:1c:b5:fa:d6:b4:
         bb:b9:3b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 17:55:46 2024 by rpki-client on console-fra.rpki-client.org