Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/1/3230302e3231352e3137322e302f32322d3232203d3e20323632363938.roa
File:                     3230302e3231352e3137322e302f32322d3232203d3e20323632363938.roa (raw, json)
Hash identifier:          9sGTE2SXmGuP/8RebPAp87XXnwswR66vizMzJWjQaBA=
Subject key identifier:   60:73:BD:14:22:47:F6:28:5E:7C:2B:73:E5:38:ED:3D:BA:38:E7:E8
Certificate issuer:       /CN=B7DDBA31B3E035114E8DEE7428E921EE9085B3A1
Certificate serial:       561A5D997BBCC1B350F484445FFDCCF15447C031
Authority key identifier: B7:DD:BA:31:B3:E0:35:11:4E:8D:EE:74:28:E9:21:EE:90:85:B3:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7DDBA31B3E035114E8DEE7428E921EE9085B3A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/1/3230302e3231352e3137322e302f32322d3232203d3e20323632363938.roa
Signing time:             Thu 13 Jun 2024 19:17:23 +0000
ROA not before:           Thu 13 Jun 2024 19:12:23 +0000
ROA not after:            Thu 12 Jun 2025 19:17:23 +0000
asID:                     262698
IP address blocks:        200.215.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/1/B7DDBA31B3E035114E8DEE7428E921EE9085B3A1.crl
                          rsync://rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/1/B7DDBA31B3E035114E8DEE7428E921EE9085B3A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7DDBA31B3E035114E8DEE7428E921EE9085B3A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 12:10:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:1a:5d:99:7b:bc:c1:b3:50:f4:84:44:5f:fd:cc:f1:54:47:c0:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7DDBA31B3E035114E8DEE7428E921EE9085B3A1
        Validity
            Not Before: Jun 13 19:12:23 2024 GMT
            Not After : Jun 12 19:17:23 2025 GMT
        Subject: CN=6073BD142247F6285E7C2B73E538ED3DBA38E7E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:52:87:40:d9:c2:cb:15:39:ce:ff:9a:85:84:
                    d4:b4:80:97:b4:ea:f8:80:c7:f4:fe:b3:3a:90:f0:
                    7e:f8:bf:e6:4e:59:2d:15:36:e9:53:42:70:d8:8f:
                    b8:9d:b5:f2:92:41:09:bb:e6:49:eb:5d:2c:93:75:
                    86:da:bb:36:24:7a:21:3b:5c:44:dd:cd:0e:95:41:
                    76:74:a3:c2:84:ef:fc:90:35:86:0a:f1:47:75:13:
                    ea:31:6f:48:f3:ac:e2:9a:40:0d:21:d9:4a:4c:27:
                    20:f0:fc:1b:59:f9:09:51:cd:d0:87:2a:72:70:bb:
                    91:d6:31:9d:43:44:c6:05:58:a0:51:73:58:19:ac:
                    53:1d:dd:0e:8d:f0:ee:78:8c:2b:55:99:ce:73:72:
                    dd:03:ed:7b:0b:73:0a:17:12:39:38:03:da:51:3e:
                    de:b8:7d:df:44:e9:44:f7:a3:2d:f0:7c:f2:e3:f3:
                    37:bc:2d:79:10:bf:bf:74:76:18:8e:8b:23:51:fc:
                    c6:99:aa:64:34:f1:38:02:0b:02:3a:be:b2:77:03:
                    17:f4:0a:58:e2:ac:b1:46:7c:e5:85:fc:09:ff:a8:
                    7b:15:05:36:89:57:83:00:db:4e:25:c0:68:cc:1d:
                    5b:fd:3e:2f:46:27:a5:54:de:6a:3f:86:35:84:13:
                    2b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:73:BD:14:22:47:F6:28:5E:7C:2B:73:E5:38:ED:3D:BA:38:E7:E8
            X509v3 Authority Key Identifier:
                keyid:B7:DD:BA:31:B3:E0:35:11:4E:8D:EE:74:28:E9:21:EE:90:85:B3:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/1/B7DDBA31B3E035114E8DEE7428E921EE9085B3A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7DDBA31B3E035114E8DEE7428E921EE9085B3A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/1/3230302e3231352e3137322e302f32322d3232203d3e20323632363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.215.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:a9:76:c7:b2:21:e6:47:53:32:b4:b0:3e:42:de:9b:83:7e:
         1a:99:29:34:44:cc:5a:c7:4a:79:73:23:9c:fc:85:39:76:9c:
         64:e8:ac:d7:70:99:d7:e7:32:08:02:de:86:3a:8c:ed:f4:39:
         ac:5f:c5:35:b6:bc:80:8c:4d:d8:19:48:d7:5d:a2:37:10:4e:
         65:80:32:d2:d9:27:cd:b5:95:03:8d:34:db:ca:b8:ef:c5:a0:
         07:b9:e0:c2:35:82:a5:47:30:d5:e0:05:f6:2e:68:09:1b:f6:
         85:9a:53:c7:7d:be:e8:27:05:7c:eb:05:ac:4f:e5:10:13:6b:
         9e:39:48:c2:15:6e:39:4f:0b:e9:f6:0b:69:62:ab:02:ad:cb:
         69:09:bf:40:6e:a3:3b:64:dc:0f:7b:df:2b:29:55:89:f7:55:
         c0:92:cb:0c:23:d7:a6:c6:c6:b7:ca:6a:be:81:bd:04:39:6b:
         12:87:a6:cd:eb:79:c4:86:81:c3:48:70:6b:36:2b:7f:7b:dc:
         69:18:11:29:43:fa:39:33:f1:14:0c:bd:0b:df:ac:3b:1a:8e:
         e1:97:f0:c8:f0:47:a5:84:ff:21:8d:b9:27:5e:e3:6c:92:e3:
         9a:a4:b8:54:e9:d6:da:34:e4:fe:0b:56:7e:5b:bd:d6:d1:ad:
         8d:4e:85:c7
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUVhpdmXu8wbNQ9IREX/3M8VRHwDEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjdEREJBMzFCM0UwMzUxMTRFOERFRTc0MjhFOTIxRUU5
MDg1QjNBMTAeFw0yNDA2MTMxOTEyMjNaFw0yNTA2MTIxOTE3MjNaMDMxMTAvBgNV
BAMTKDYwNzNCRDE0MjI0N0Y2Mjg1RTdDMkI3M0U1MzhFRDNEQkEzOEU3RTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1UodA2cLLFTnO/5qFhNS0gJe0
6viAx/T+szqQ8H74v+ZOWS0VNulTQnDYj7idtfKSQQm75knrXSyTdYbauzYkeiE7
XETdzQ6VQXZ0o8KE7/yQNYYK8Ud1E+oxb0jzrOKaQA0h2UpMJyDw/BtZ+QlRzdCH
KnJwu5HWMZ1DRMYFWKBRc1gZrFMd3Q6N8O54jCtVmc5zct0D7XsLcwoXEjk4A9pR
Pt64fd9E6UT3oy3wfPLj8ze8LXkQv790dhiOiyNR/MaZqmQ08TgCCwI6vrJ3Axf0
CljirLFGfOWF/An/qHsVBTaJV4MA204lwGjMHVv9Pi9GJ6VU3mo/hjWEEyvRAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUYHO9FCJH9ihefCtz5TjtPbo45+gwHwYDVR0j
BBgwFoAUt926MbPgNRFOje50KOkh7pCFs6EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmhvbjQyajJ5bm12S1c3RENHWHFTUU5XaVg3U0c4Q0hnUTh5aExicmVu
V2ovMS9CN0REQkEzMUIzRTAzNTExNEU4REVFNzQyOEU5MjFFRTkwODVCM0ExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I3RERCQTMxQjNFMDM1MTE0
RThERUU3NDI4RTkyMUVFOTA4NUIzQTEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Zob240MmoyeW5tdktXN0RDR1hxU1FOV2lYN1NHOENIZ1E4eWhMYnJlbldqLzEv
MzIzMDMwMmUzMjMxMzUyZTMxMzczMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzMjM2MzkzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAsjXrDANBgkqhkiG9w0BAQsFAAOCAQEAaql2
x7Ih5kdTMrSwPkLem4N+GpkpNETMWsdKeXMjnPyFOXacZOis13CZ1+cyCALehjqM
7fQ5rF/FNba8gIxN2BlI112iNxBOZYAy0tknzbWVA40028q478WgB7ngwjWCpUcw
1eAF9i5oCRv2hZpTx32+6CcFfOsFrE/lEBNrnjlIwhVuOU8L6fYLaWKrAq3LaQm/
QG6jO2TcD3vfKylVifdVwJLLDCPXpsbGt8pqvoG9BDlrEoemzet5xIaBw0hwazYr
f3vcaRgRKUP6OTPxFAy9C9+sOxqO4ZfwyPBHpYT/IY25J17jbJLjmqS4VOnW2jTk
/gtWflu91tGtjU6Fxw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 02:19:43 2025 by rpki-client