Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136382e302f32342d3234203d3e203631333137.roa
File:                     3230302e3232302e3136382e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          DD2Zp3Ev6N/1F2hnS6qswoEqZC/segN/XLAnE3uDYyA=
Subject key identifier:   99:A6:FF:8D:12:2E:58:52:FF:19:D1:88:C3:2D:C7:F6:50:F7:63:D2
Certificate issuer:       /CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
Certificate serial:       4F15F1431991734A46AECCB4C76D4622CF132C34
Authority key identifier: 80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136382e302f32342d3234203d3e203631333137.roa
Signing time:             Thu 04 Apr 2024 14:17:22 +0000
ROA not before:           Thu 04 Apr 2024 14:12:22 +0000
ROA not after:            Thu 03 Apr 2025 14:17:22 +0000
asID:                     61317
IP address blocks:        200.220.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.crl
                          rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 13:05:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:15:f1:43:19:91:73:4a:46:ae:cc:b4:c7:6d:46:22:cf:13:2c:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=801C62756CEAB17FA0153A254E96D04D8EA570B3
        Validity
            Not Before: Apr  4 14:12:22 2024 GMT
            Not After : Apr  3 14:17:22 2025 GMT
        Subject: CN=99A6FF8D122E5852FF19D188C32DC7F650F763D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:92:e4:0d:f1:06:a8:e6:ab:45:2e:fa:30:97:
                    a5:00:d2:86:36:ab:8f:7e:cf:a8:2d:8e:2a:46:e5:
                    59:a9:15:c6:10:a7:9f:17:1e:eb:b9:c0:11:3b:32:
                    b5:67:17:4d:b6:e4:af:0a:c5:db:2f:9e:be:88:78:
                    a8:c4:83:e9:4b:5d:d6:ae:1d:e6:d7:f8:d3:3d:51:
                    02:a0:96:71:59:ac:b4:ba:17:b1:14:8a:44:8c:29:
                    d0:bd:86:14:48:16:a9:4f:f6:23:2c:e9:91:58:1f:
                    b2:1c:21:04:47:43:32:ff:6f:f0:11:9d:b4:4f:c9:
                    0b:3f:92:ad:b7:9b:56:b2:c9:83:a2:75:17:c5:a6:
                    2d:46:3a:e2:93:ac:62:a2:6a:7b:b3:59:7b:fe:8e:
                    bf:8c:69:cb:52:fc:48:3e:b4:9e:37:a0:dd:e7:50:
                    a0:cf:70:a9:df:01:ad:cc:64:d9:7e:27:72:d8:1a:
                    56:15:05:ff:f2:44:61:47:2e:1c:f5:c8:72:3f:76:
                    7b:1d:82:93:25:c2:03:52:94:a6:50:f3:3c:a3:49:
                    51:6e:e2:37:07:ac:7a:a0:76:b7:e6:1f:a8:84:cf:
                    96:86:1c:88:56:36:ea:91:36:8d:7e:85:b5:c4:c8:
                    13:f7:46:45:f3:d4:a2:21:6d:be:df:57:eb:32:d3:
                    1a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:A6:FF:8D:12:2E:58:52:FF:19:D1:88:C3:2D:C7:F6:50:F7:63:D2
            X509v3 Authority Key Identifier:
                keyid:80:1C:62:75:6C:EA:B1:7F:A0:15:3A:25:4E:96:D0:4D:8E:A5:70:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801C62756CEAB17FA0153A254E96D04D8EA570B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/1/3230302e3232302e3136382e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:6b:24:54:72:8f:df:78:b9:8b:85:06:40:b8:6e:55:6a:c4:
         7f:2d:63:7e:18:70:6f:c8:1d:e5:f0:9a:2b:ea:3b:d2:8d:72:
         50:46:e8:a6:91:44:94:24:67:6d:b8:c1:92:da:0b:cf:c9:bd:
         55:57:20:6f:d9:75:56:7c:72:71:59:2e:99:21:11:66:e8:5c:
         43:94:db:a6:9b:ba:c6:c6:fc:c2:37:32:3c:8e:52:b7:6c:95:
         27:cb:88:e5:61:d0:99:90:9a:16:c2:a7:3b:c2:5e:67:a9:d7:
         8f:30:47:f2:a7:a2:5a:fe:05:0a:b1:09:ab:c0:01:38:92:b3:
         4f:0b:8b:fb:db:76:b5:10:6b:4a:34:4e:2c:b0:8f:3d:ff:a1:
         67:94:80:c1:9e:7a:fe:ea:8c:8c:44:7f:98:3c:6d:77:86:9b:
         b5:e7:35:af:f7:f8:c1:04:3c:14:f3:73:1e:51:10:8f:3d:58:
         27:82:de:11:26:8c:29:f7:da:62:1d:41:f8:f7:d4:a8:9a:94:
         9d:00:1c:e0:23:bd:f1:9c:b9:0f:57:50:fa:f2:6f:3f:47:35:
         8d:74:6e:7e:88:85:06:80:6f:28:80:bd:86:42:1b:63:ed:e8:
         91:f7:66:4f:91:33:ba:d1:eb:8f:85:d9:1a:e1:84:12:6c:98:
         fd:c8:46:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:38:06 2024 by rpki-client on console-ams.rpki-client.org