Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyq5Pd5SHowmEwmqdN4ivBJTZBLv14yazRkWRq6BmzVe/0/3230302e35332e36382e302f32322d3332203d3e20323731333034.roa
File:                     3230302e35332e36382e302f32322d3332203d3e20323731333034.roa (raw, json)
Hash identifier:          sZyEdVohpk8RsRSoiEtky97IK6VHiInOQWNTY4wLWFE=
Subject key identifier:   B2:4E:74:51:B5:D5:85:E5:C9:65:55:C1:14:29:6C:68:C7:5E:6E:8E
Certificate issuer:       /CN=FB6D7199BFDFE92288F7B49F621FD09D2FF9FE89
Certificate serial:       4EF6537EDAB7AD1E4B9AD3B2F7FB8220B60E9A40
Authority key identifier: FB:6D:71:99:BF:DF:E9:22:88:F7:B4:9F:62:1F:D0:9D:2F:F9:FE:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB6D7199BFDFE92288F7B49F621FD09D2FF9FE89.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyq5Pd5SHowmEwmqdN4ivBJTZBLv14yazRkWRq6BmzVe/0/3230302e35332e36382e302f32322d3332203d3e20323731333034.roa
Signing time:             Thu 25 Jul 2024 17:27:00 +0000
ROA not before:           Thu 25 Jul 2024 17:22:00 +0000
ROA not after:            Thu 24 Jul 2025 17:27:00 +0000
asID:                     271304
IP address blocks:        200.53.68.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyq5Pd5SHowmEwmqdN4ivBJTZBLv14yazRkWRq6BmzVe/0/FB6D7199BFDFE92288F7B49F621FD09D2FF9FE89.crl
                          rsync://rpki-repo.registro.br/repo/Fyq5Pd5SHowmEwmqdN4ivBJTZBLv14yazRkWRq6BmzVe/0/FB6D7199BFDFE92288F7B49F621FD09D2FF9FE89.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB6D7199BFDFE92288F7B49F621FD09D2FF9FE89.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 07:55:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:f6:53:7e:da:b7:ad:1e:4b:9a:d3:b2:f7:fb:82:20:b6:0e:9a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB6D7199BFDFE92288F7B49F621FD09D2FF9FE89
        Validity
            Not Before: Jul 25 17:22:00 2024 GMT
            Not After : Jul 24 17:27:00 2025 GMT
        Subject: CN=B24E7451B5D585E5C96555C114296C68C75E6E8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:42:e2:cd:6e:2f:18:e5:5f:e5:0d:06:84:f5:
                    ed:8b:85:31:e6:5b:09:7e:11:c1:80:ea:04:1b:29:
                    54:01:a2:a4:d6:85:80:c1:11:f6:00:0d:cc:99:e5:
                    b2:55:d6:37:52:53:98:87:73:58:ce:a4:c5:fa:38:
                    78:16:ba:28:c3:96:aa:0b:dc:21:1c:c1:52:49:68:
                    66:44:bd:32:8b:63:44:f3:eb:2b:14:ab:ce:67:3d:
                    4d:d6:d6:a5:2e:cc:0d:43:57:65:72:0f:98:78:09:
                    12:a3:b8:6c:1f:20:d4:91:2a:f2:86:ec:8b:de:75:
                    9d:15:7e:2d:ec:7e:58:0f:db:21:b6:58:8b:97:4a:
                    c0:c1:12:fa:7d:b9:43:6f:28:1f:1c:ba:62:d4:64:
                    5e:50:97:7b:c5:dc:c3:cc:d6:df:84:93:fe:19:29:
                    f1:c6:b7:35:e9:b8:1c:77:42:de:49:4d:00:bd:54:
                    e4:a9:42:68:7f:6b:c5:5d:01:e1:1d:14:04:a6:68:
                    40:45:48:87:d8:8d:a9:6e:bf:71:c1:bc:b0:95:43:
                    30:76:a7:fc:6e:e3:ab:18:3d:06:6c:22:7f:e8:cb:
                    f4:8f:ea:9b:26:e4:cd:08:54:19:ce:88:3b:08:c3:
                    ed:a2:69:28:4f:25:6b:95:15:96:73:34:ba:61:77:
                    5c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:4E:74:51:B5:D5:85:E5:C9:65:55:C1:14:29:6C:68:C7:5E:6E:8E
            X509v3 Authority Key Identifier:
                keyid:FB:6D:71:99:BF:DF:E9:22:88:F7:B4:9F:62:1F:D0:9D:2F:F9:FE:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyq5Pd5SHowmEwmqdN4ivBJTZBLv14yazRkWRq6BmzVe/0/FB6D7199BFDFE92288F7B49F621FD09D2FF9FE89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB6D7199BFDFE92288F7B49F621FD09D2FF9FE89.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyq5Pd5SHowmEwmqdN4ivBJTZBLv14yazRkWRq6BmzVe/0/3230302e35332e36382e302f32322d3332203d3e20323731333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:40:a5:f7:b0:a5:4a:33:56:dc:6e:f8:92:c4:33:0c:ab:75:
         a1:8f:5c:16:48:b7:62:db:c7:e6:3b:4f:73:11:ae:4e:25:35:
         37:94:49:72:8c:dd:63:53:d6:06:a2:61:f5:2b:17:89:7a:dd:
         b3:72:cf:fd:de:4d:70:85:f5:36:12:57:b3:ed:84:fa:12:56:
         e8:20:19:be:cd:8c:49:99:f1:78:5e:c1:1b:b7:32:d5:75:06:
         b2:66:29:04:f1:26:8f:86:14:e0:55:b0:a6:d7:65:23:36:b8:
         47:33:b7:fb:f3:33:58:d0:39:ee:0f:42:63:39:0e:39:b9:2f:
         1e:a5:a2:c8:7d:dd:23:37:e4:a0:0d:74:90:ff:62:17:b2:86:
         97:7e:3f:ef:b4:e8:d1:99:7e:c9:ba:31:f8:df:c5:30:f8:86:
         05:3f:4c:f7:82:63:4e:c7:7c:c9:bd:67:f0:4f:c9:e9:6b:1e:
         fa:b4:22:f6:96:88:de:6b:0f:27:da:df:0b:2e:d2:f8:e8:fc:
         c5:0a:0f:1a:13:62:59:77:5d:f2:0e:ed:c4:5c:b5:e4:38:e2:
         c0:82:e4:b7:4f:fe:ce:12:8b:6e:dc:aa:53:1a:c2:42:e5:9a:
         f8:71:0e:b0:d7:3d:1e:99:ec:da:19:b6:69:92:2f:bb:d8:56:
         5d:8b:2f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:34:12 2024 by rpki-client on console-ams.rpki-client.org