Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/3230302e31332e38372e302f32342d3234203d3e20323730343430.roa
File:                     3230302e31332e38372e302f32342d3234203d3e20323730343430.roa (raw, json)
Hash identifier:          nREYgh23NiEnBV0yl72zKOLElixjgI/vKhWVTyy7IwI=
Subject key identifier:   E9:24:0B:88:77:DE:92:40:09:2F:1A:C3:7D:03:07:4F:27:0A:7E:15
Certificate issuer:       /CN=88F8C25C5F36E30578C91973467F9861B5E60B72
Certificate serial:       2F26602233D618F60489CA15CAF2E5770DC277E7
Authority key identifier: 88:F8:C2:5C:5F:36:E3:05:78:C9:19:73:46:7F:98:61:B5:E6:0B:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88F8C25C5F36E30578C91973467F9861B5E60B72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/3230302e31332e38372e302f32342d3234203d3e20323730343430.roa
Signing time:             Thu 27 Jun 2024 13:50:13 +0000
ROA not before:           Thu 27 Jun 2024 13:45:13 +0000
ROA not after:            Thu 26 Jun 2025 13:50:13 +0000
asID:                     270440
IP address blocks:        200.13.87.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/88F8C25C5F36E30578C91973467F9861B5E60B72.crl
                          rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/88F8C25C5F36E30578C91973467F9861B5E60B72.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88F8C25C5F36E30578C91973467F9861B5E60B72.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:26:60:22:33:d6:18:f6:04:89:ca:15:ca:f2:e5:77:0d:c2:77:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88F8C25C5F36E30578C91973467F9861B5E60B72
        Validity
            Not Before: Jun 27 13:45:13 2024 GMT
            Not After : Jun 26 13:50:13 2025 GMT
        Subject: CN=E9240B8877DE9240092F1AC37D03074F270A7E15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d0:ad:3c:bb:a0:79:66:f3:d1:83:ee:be:f3:
                    3f:08:f5:bb:91:09:4f:35:58:d2:be:3d:94:93:84:
                    9f:3d:b8:48:c2:c4:f7:b3:80:38:d9:02:89:87:c1:
                    c4:bf:fb:c8:75:77:98:c8:f2:de:71:b4:da:8d:09:
                    3d:f4:0d:a7:14:10:81:bc:22:0c:93:5b:af:b3:38:
                    36:d2:21:d3:80:50:b4:46:47:1a:e3:07:52:3c:ea:
                    cf:0a:f4:cb:18:cb:2e:e5:45:76:e0:a8:b7:54:4e:
                    de:5b:91:68:a1:f8:e7:da:d2:1f:89:b3:20:9b:26:
                    e6:aa:aa:e2:c2:4a:02:c0:20:f8:b3:3c:ea:3f:69:
                    1a:e6:86:34:a5:8e:42:90:7a:8b:2d:eb:f8:01:e0:
                    71:da:17:0d:7a:5b:aa:bc:7b:28:96:fe:88:da:d1:
                    02:fe:b6:5f:c3:b4:11:5d:5c:e5:2a:8e:37:6c:35:
                    21:c7:f4:ae:2b:36:42:62:b1:9b:62:97:b7:95:bd:
                    7e:37:7f:3a:a2:cc:9a:1a:ab:3e:3e:56:71:6a:76:
                    a1:60:1a:e4:f0:70:58:01:08:62:31:77:43:cc:f1:
                    3d:b1:6d:9f:c8:99:ce:d9:3c:04:c7:b1:7e:a8:79:
                    b8:d6:c8:6d:3e:f1:12:25:b6:96:dd:a1:16:33:dc:
                    3d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:24:0B:88:77:DE:92:40:09:2F:1A:C3:7D:03:07:4F:27:0A:7E:15
            X509v3 Authority Key Identifier:
                keyid:88:F8:C2:5C:5F:36:E3:05:78:C9:19:73:46:7F:98:61:B5:E6:0B:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/88F8C25C5F36E30578C91973467F9861B5E60B72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88F8C25C5F36E30578C91973467F9861B5E60B72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/3230302e31332e38372e302f32342d3234203d3e20323730343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:ea:f2:98:30:fe:16:69:63:d7:0b:09:19:d2:92:c9:fd:e3:
         b9:2b:24:07:1b:19:8f:5e:9e:63:75:62:98:79:47:65:5d:d3:
         f5:03:de:c0:01:93:ad:96:0a:cb:68:89:41:35:59:61:4c:e2:
         42:f4:9b:0d:5e:76:dc:32:5f:54:b8:31:c1:22:f2:be:9c:cb:
         15:8b:bc:19:50:de:a4:6f:b6:c6:57:56:03:44:89:ae:3c:43:
         67:a5:53:15:d9:ab:bb:7b:8e:27:9c:39:33:54:39:46:9b:92:
         8e:5d:40:f5:64:44:d9:f0:77:d6:ae:ac:e0:61:22:c6:8d:88:
         bc:ce:7d:52:bb:e5:40:26:56:2c:93:7f:41:e2:7e:92:30:d9:
         de:46:b2:a7:a5:c5:5e:a2:00:cd:fe:f5:1f:eb:bc:a7:e4:82:
         68:ae:53:2c:1f:1d:51:f4:30:0c:0f:e3:6d:fd:2e:9d:23:8f:
         08:ff:90:73:00:ee:ee:0a:ab:e6:cc:c3:25:11:37:47:b4:a8:
         2e:04:68:6f:d8:29:18:f3:3e:69:3a:3e:b8:90:27:f2:1f:0a:
         2d:43:5b:16:92:c5:a3:d5:1f:d9:7e:07:06:c4:ea:37:f3:9d:
         81:7d:ea:39:bf:30:5e:f0:52:cc:71:70:50:2d:16:d6:2c:97:
         ea:a4:b9:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 06:50:50 2024 by rpki-client on console-fra.rpki-client.org