Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GYFExock2FghYAVhXCiaXfTHQUGcMN5sctFjMC8HfgCv/0/3230302e33362e3133322e302f32322d3234203d3e20323731333838.roa
File:                     3230302e33362e3133322e302f32322d3234203d3e20323731333838.roa (raw, json)
Hash identifier:          98Ki6ZkWYMSrPVC49t8Fl325VZc/SOLiyPfhbcodO6A=
Subject key identifier:   7F:7F:1A:48:18:18:11:E8:77:54:9A:23:56:7C:38:BE:F7:F0:FD:FF
Certificate issuer:       /CN=D15F1C5EAD15FBAE8E480C1C766B191ED12881AE
Certificate serial:       7781BD2956FB5BFFF12F7D5F743182E9A5775E39
Authority key identifier: D1:5F:1C:5E:AD:15:FB:AE:8E:48:0C:1C:76:6B:19:1E:D1:28:81:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D15F1C5EAD15FBAE8E480C1C766B191ED12881AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GYFExock2FghYAVhXCiaXfTHQUGcMN5sctFjMC8HfgCv/0/3230302e33362e3133322e302f32322d3234203d3e20323731333838.roa
Signing time:             Tue 25 Jun 2024 18:07:26 +0000
ROA not before:           Tue 25 Jun 2024 18:02:26 +0000
ROA not after:            Tue 24 Jun 2025 18:07:26 +0000
asID:                     271388
IP address blocks:        200.36.132.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GYFExock2FghYAVhXCiaXfTHQUGcMN5sctFjMC8HfgCv/0/D15F1C5EAD15FBAE8E480C1C766B191ED12881AE.crl
                          rsync://rpki-repo.registro.br/repo/GYFExock2FghYAVhXCiaXfTHQUGcMN5sctFjMC8HfgCv/0/D15F1C5EAD15FBAE8E480C1C766B191ED12881AE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D15F1C5EAD15FBAE8E480C1C766B191ED12881AE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:29:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:81:bd:29:56:fb:5b:ff:f1:2f:7d:5f:74:31:82:e9:a5:77:5e:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D15F1C5EAD15FBAE8E480C1C766B191ED12881AE
        Validity
            Not Before: Jun 25 18:02:26 2024 GMT
            Not After : Jun 24 18:07:26 2025 GMT
        Subject: CN=7F7F1A48181811E877549A23567C38BEF7F0FDFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:00:f7:c4:12:d7:37:75:46:0f:e0:74:96:9f:
                    36:22:c2:41:35:96:9e:46:81:44:03:4f:10:30:37:
                    20:7b:92:93:12:25:29:da:d5:f0:3d:b2:67:88:00:
                    1c:a5:45:0a:45:87:10:51:d8:06:ea:34:5c:8e:2c:
                    62:7e:95:3a:7b:64:16:1c:07:b2:93:b4:50:89:59:
                    55:7f:51:ab:f0:ac:0f:b4:4e:24:11:20:43:5e:c1:
                    10:f2:87:ad:bb:d4:f8:ec:53:90:92:e8:4e:41:8c:
                    f8:b6:25:f4:56:db:16:70:b2:db:e8:46:5a:4b:0e:
                    19:ba:4b:7f:40:ef:e6:68:ea:12:00:05:d3:8a:9b:
                    3a:75:d0:50:74:d0:3b:b9:fc:8e:b3:f5:da:1f:8e:
                    39:89:df:1d:ef:86:8d:3c:ca:cb:b5:fb:05:4a:7b:
                    f9:50:53:2e:1f:eb:47:5a:4f:e5:1d:3b:3a:48:82:
                    0e:39:74:c7:52:e2:45:b1:39:93:e0:cb:66:e6:6a:
                    f4:73:92:eb:2f:c3:f4:42:26:d7:b3:fe:d1:d6:96:
                    a6:61:b0:b8:89:b9:99:40:04:6e:33:4e:d9:e9:0c:
                    92:bb:4c:c6:d6:73:11:81:3a:3b:aa:3d:4a:b9:03:
                    58:7d:cd:d5:c1:dc:ef:d3:40:40:05:94:f1:a7:db:
                    00:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:7F:1A:48:18:18:11:E8:77:54:9A:23:56:7C:38:BE:F7:F0:FD:FF
            X509v3 Authority Key Identifier:
                keyid:D1:5F:1C:5E:AD:15:FB:AE:8E:48:0C:1C:76:6B:19:1E:D1:28:81:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GYFExock2FghYAVhXCiaXfTHQUGcMN5sctFjMC8HfgCv/0/D15F1C5EAD15FBAE8E480C1C766B191ED12881AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D15F1C5EAD15FBAE8E480C1C766B191ED12881AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GYFExock2FghYAVhXCiaXfTHQUGcMN5sctFjMC8HfgCv/0/3230302e33362e3133322e302f32322d3234203d3e20323731333838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:7a:be:53:47:65:b6:c2:8c:23:af:06:e7:14:0f:75:13:6e:
         3b:b2:ac:bd:80:a0:44:b6:89:aa:06:39:5f:b0:cf:bf:d2:69:
         85:43:6c:d8:14:f5:6a:ba:b0:6f:06:3f:69:ff:fd:ef:85:88:
         55:c1:b3:b9:96:71:1d:d1:95:a6:c1:f7:f5:0c:4d:af:e9:4b:
         2c:43:66:1e:44:a4:cc:9c:e8:22:86:68:d6:74:34:b8:08:2f:
         9a:20:89:de:26:df:22:c0:6a:71:40:33:d5:22:74:52:dd:a5:
         19:9b:58:4c:70:5e:26:17:42:f9:79:78:6e:cb:60:ba:60:3d:
         0f:d6:79:f2:eb:b9:75:52:15:58:60:12:73:50:1d:e7:8f:6d:
         6a:6b:f0:75:c6:0a:01:16:97:2a:e6:34:cb:2e:2e:99:0f:66:
         28:85:7b:2b:96:7b:fb:e0:d7:37:7d:56:14:62:79:18:e6:ef:
         ae:02:e6:15:2e:d9:10:0f:32:a9:ae:14:07:6d:37:26:b7:81:
         08:6c:98:99:7c:c5:55:16:e8:65:64:63:09:12:a0:9c:a4:ae:
         f1:00:b4:9f:bd:29:50:3c:4a:06:44:64:46:71:ab:ea:a5:ac:
         d7:45:a4:17:ae:9a:0d:97:16:1c:1b:d6:45:42:5c:20:0d:08:
         90:a9:6c:94
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUd4G9KVb7W//xL31fdDGC6aV3XjkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDE1RjFDNUVBRDE1RkJBRThFNDgwQzFDNzY2QjE5MUVE
MTI4ODFBRTAeFw0yNDA2MjUxODAyMjZaFw0yNTA2MjQxODA3MjZaMDMxMTAvBgNV
BAMTKDdGN0YxQTQ4MTgxODExRTg3NzU0OUEyMzU2N0MzOEJFRjdGMEZERkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8APfEEtc3dUYP4HSWnzYiwkE1
lp5GgUQDTxAwNyB7kpMSJSna1fA9smeIABylRQpFhxBR2AbqNFyOLGJ+lTp7ZBYc
B7KTtFCJWVV/UavwrA+0TiQRIENewRDyh6271PjsU5CS6E5BjPi2JfRW2xZwstvo
RlpLDhm6S39A7+Zo6hIABdOKmzp10FB00Du5/I6z9dofjjmJ3x3vho08ysu1+wVK
e/lQUy4f60daT+UdOzpIgg45dMdS4kWxOZPgy2bmavRzkusvw/RCJtez/tHWlqZh
sLiJuZlABG4zTtnpDJK7TMbWcxGBOjuqPUq5A1h9zdXB3O/TQEAFlPGn2wCTAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUf38aSBgYEeh3VJojVnw4vvfw/f8wHwYDVR0j
BBgwFoAU0V8cXq0V+66OSAwcdmsZHtEoga4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1lGRXhvY2syRmdoWUFWaFhDaWFYZlRIUVVHY01ONXNjdEZqTUM4SGZn
Q3YvMC9EMTVGMUM1RUFEMTVGQkFFOEU0ODBDMUM3NjZCMTkxRUQxMjg4MUFFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxNUYxQzVFQUQxNUZCQUU4
RTQ4MEMxQzc2NkIxOTFFRDEyODgxQUUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dZRkV4b2NrMkZnaFlBVmhYQ2lhWGZUSFFVR2NNTjVzY3RGak1DOEhmZ0N2LzAv
MzIzMDMwMmUzMzM2MmUzMTMzMzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3
MzEzMzM4Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALIJIQwDQYJKoZIhvcNAQELBQADggEBACt6vlNH
ZbbCjCOvBucUD3UTbjuyrL2AoES2iaoGOV+wz7/SaYVDbNgU9Wq6sG8GP2n//e+F
iFXBs7mWcR3RlabB9/UMTa/pSyxDZh5EpMyc6CKGaNZ0NLgIL5ogid4m3yLAanFA
M9UidFLdpRmbWExwXiYXQvl5eG7LYLpgPQ/WefLruXVSFVhgEnNQHeePbWpr8HXG
CgEWlyrmNMsuLpkPZiiFeyuWe/vg1zd9VhRieRjm764C5hUu2RAPMqmuFAdtNya3
gQhsmJl8xVUW6GVkYwkSoJykrvEAtJ+9KVA8SgZEZEZxq+qlrNdFpBeumg2XFhwb
1kVCXCANCJCpbJQ=
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:45 2024 by rpki-client on console-fra.rpki-client.org