Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/3230302e342e3130382e302f32332d3233203d3e20323731343739.roa
File:                     3230302e342e3130382e302f32332d3233203d3e20323731343739.roa (raw, json)
Hash identifier:          Uuykxkt30iSUGWdY5C2771hsppJFPKd71Z0M9NHrr94=
Subject key identifier:   35:17:78:CD:EB:A7:9F:3F:FE:1F:CA:55:4D:02:B2:C6:0F:8A:13:C7
Certificate issuer:       /CN=EDA8870BB94E24D2520795A47BFDF7B5E0BDD935
Certificate serial:       117903671DFCC42AF1745301BDA87133AFF1CC0B
Authority key identifier: ED:A8:87:0B:B9:4E:24:D2:52:07:95:A4:7B:FD:F7:B5:E0:BD:D9:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDA8870BB94E24D2520795A47BFDF7B5E0BDD935.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/3230302e342e3130382e302f32332d3233203d3e20323731343739.roa
Signing time:             Wed 14 Aug 2024 20:50:21 +0000
ROA not before:           Wed 14 Aug 2024 20:45:21 +0000
ROA not after:            Wed 13 Aug 2025 20:50:21 +0000
asID:                     271479
IP address blocks:        200.4.108.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/EDA8870BB94E24D2520795A47BFDF7B5E0BDD935.crl
                          rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/EDA8870BB94E24D2520795A47BFDF7B5E0BDD935.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDA8870BB94E24D2520795A47BFDF7B5E0BDD935.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 15:10:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:79:03:67:1d:fc:c4:2a:f1:74:53:01:bd:a8:71:33:af:f1:cc:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDA8870BB94E24D2520795A47BFDF7B5E0BDD935
        Validity
            Not Before: Aug 14 20:45:21 2024 GMT
            Not After : Aug 13 20:50:21 2025 GMT
        Subject: CN=351778CDEBA79F3FFE1FCA554D02B2C60F8A13C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:30:68:be:fa:dc:5a:f2:10:26:82:45:79:73:
                    4a:99:f5:3a:ef:43:a9:9b:05:c0:66:b4:9a:2d:eb:
                    29:09:8e:8f:16:16:33:75:61:a2:19:c1:61:2e:f3:
                    db:b7:eb:2d:cd:27:1b:31:90:48:62:93:34:37:9c:
                    fc:e0:d0:03:31:26:88:4a:d2:66:b4:95:0b:37:ad:
                    f7:27:56:67:75:63:1a:73:85:b4:a9:93:a4:e0:3f:
                    35:2b:4c:55:b8:11:fe:aa:5f:d6:51:47:39:63:4e:
                    93:de:0b:ed:28:0a:25:b7:27:c5:49:7a:8c:b5:dc:
                    74:4d:76:0b:d4:b3:94:f2:9d:f5:06:00:0e:bb:52:
                    03:cf:11:85:71:47:be:08:49:43:e6:53:3a:10:48:
                    c1:c2:f9:d4:27:7e:db:11:3d:ea:49:49:b6:31:69:
                    0e:2e:6a:0a:f9:3f:09:e5:dc:12:94:71:78:57:13:
                    51:48:23:38:22:2b:c6:5c:73:15:a2:fa:b1:18:92:
                    5e:2b:16:f0:6e:e8:ae:a7:79:d3:02:dd:49:6a:f7:
                    25:6e:52:86:70:98:94:03:6f:be:b6:20:8d:fd:75:
                    5e:53:b0:8c:eb:5d:90:2e:32:0c:87:d9:4e:06:01:
                    25:69:ef:2f:7b:77:81:22:4c:dc:6c:88:6b:a8:6c:
                    f0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:17:78:CD:EB:A7:9F:3F:FE:1F:CA:55:4D:02:B2:C6:0F:8A:13:C7
            X509v3 Authority Key Identifier:
                keyid:ED:A8:87:0B:B9:4E:24:D2:52:07:95:A4:7B:FD:F7:B5:E0:BD:D9:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/EDA8870BB94E24D2520795A47BFDF7B5E0BDD935.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDA8870BB94E24D2520795A47BFDF7B5E0BDD935.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/3230302e342e3130382e302f32332d3233203d3e20323731343739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.4.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:18:2f:47:a2:de:12:83:5d:19:b0:e6:18:1a:cb:87:e9:db:
         0b:f9:03:9d:59:20:0d:d1:c3:3f:ca:17:ca:51:55:07:a2:0f:
         25:a8:81:ea:7a:2c:49:26:d0:b8:10:56:6a:bd:90:ec:12:c1:
         3d:c3:62:a1:2e:ef:9e:0b:b3:c7:08:a8:e1:c2:e4:6e:af:17:
         e0:2a:f1:1d:ad:2e:32:cf:6b:78:3b:42:47:0d:9b:10:67:ee:
         ca:da:16:6a:e3:1b:38:c4:68:3c:94:0a:c0:43:a4:20:e6:a1:
         c6:9c:8e:42:e8:91:86:56:9c:e1:fa:4c:fb:9f:cb:8f:fb:c5:
         b0:74:be:b9:0c:38:69:03:37:8b:cb:05:1c:68:e2:ce:11:09:
         70:78:20:33:74:7e:91:d8:45:c0:97:28:98:b8:b9:05:cf:fe:
         47:fb:e1:7f:6b:89:d5:1d:1d:88:56:f3:ff:eb:77:cd:c7:93:
         ce:6f:d9:f7:83:a6:3e:cc:25:63:e6:1c:7f:a0:1b:56:51:15:
         9c:38:4e:25:4e:6e:12:24:af:ea:93:89:33:ba:4a:b9:a4:68:
         a4:c6:79:7c:02:da:a5:9d:b9:e1:b4:87:0d:fe:47:bb:ab:6a:
         69:f9:27:80:47:22:87:8c:90:b0:3b:17:c8:7e:09:f7:f7:46:
         87:8e:a2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 14:45:09 2024 by rpki-client on console-fra.rpki-client.org