Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/3230302e342e3131302e302f32332d3233203d3e20323731343739.roa
File:                     3230302e342e3131302e302f32332d3233203d3e20323731343739.roa (raw, json)
Hash identifier:          XlpZM2eOVBFq9Yi+erYBAWuSdL+Du4tmA+VBiBc8vXY=
Subject key identifier:   65:5F:E4:4B:40:A5:77:3B:1A:F7:26:48:4C:56:AE:B4:72:74:6B:51
Certificate issuer:       /CN=EDA8870BB94E24D2520795A47BFDF7B5E0BDD935
Certificate serial:       3D2B9ADC3BAC2D3A6A44D942DD90D9F6B639B4B4
Authority key identifier: ED:A8:87:0B:B9:4E:24:D2:52:07:95:A4:7B:FD:F7:B5:E0:BD:D9:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDA8870BB94E24D2520795A47BFDF7B5E0BDD935.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/3230302e342e3131302e302f32332d3233203d3e20323731343739.roa
Signing time:             Wed 14 Aug 2024 20:50:29 +0000
ROA not before:           Wed 14 Aug 2024 20:45:29 +0000
ROA not after:            Wed 13 Aug 2025 20:50:29 +0000
asID:                     271479
IP address blocks:        200.4.110.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/EDA8870BB94E24D2520795A47BFDF7B5E0BDD935.crl
                          rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/EDA8870BB94E24D2520795A47BFDF7B5E0BDD935.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDA8870BB94E24D2520795A47BFDF7B5E0BDD935.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 16:15:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:2b:9a:dc:3b:ac:2d:3a:6a:44:d9:42:dd:90:d9:f6:b6:39:b4:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDA8870BB94E24D2520795A47BFDF7B5E0BDD935
        Validity
            Not Before: Aug 14 20:45:29 2024 GMT
            Not After : Aug 13 20:50:29 2025 GMT
        Subject: CN=655FE44B40A5773B1AF726484C56AEB472746B51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:59:e6:83:0b:b0:65:fc:4d:0b:36:50:b1:fb:
                    49:68:8d:bc:2c:42:55:7a:e9:21:92:3c:dd:ae:80:
                    6b:8e:b3:f6:40:d0:0e:7e:0c:cc:bd:60:a0:d8:a6:
                    3a:db:a2:c3:fc:c6:b4:c0:5c:a0:ae:23:97:39:cb:
                    5c:c9:fe:66:fb:f2:d1:10:61:97:bb:ff:36:d8:4c:
                    43:af:b1:ba:1c:8d:79:65:22:24:46:7f:57:9b:e1:
                    a5:f4:90:db:16:f0:e0:16:68:db:b3:e7:f6:25:e4:
                    bb:a0:28:92:4f:01:43:98:7b:79:03:ce:1b:7f:c7:
                    ac:87:af:d4:43:06:54:e6:de:37:e5:f8:81:83:7f:
                    f4:cd:34:40:43:a3:92:27:9f:95:da:f1:59:23:41:
                    88:c0:9a:49:13:76:3c:9e:2b:37:55:0e:7f:f5:99:
                    e8:dc:b1:93:98:b5:6a:2a:99:f4:c7:4f:1d:a4:ea:
                    e9:72:57:a6:b2:36:f5:00:b7:98:b3:fb:76:81:12:
                    71:8b:f8:9c:8c:e1:94:ef:b1:ba:bb:0c:58:a5:fc:
                    4d:a5:f7:a1:20:d2:16:ff:72:66:8a:89:99:a0:19:
                    29:0e:40:f7:e6:0f:39:1a:4e:a5:78:eb:3a:68:36:
                    54:70:d2:6f:ca:ac:e6:22:65:7d:e6:fd:6f:22:b1:
                    62:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:5F:E4:4B:40:A5:77:3B:1A:F7:26:48:4C:56:AE:B4:72:74:6B:51
            X509v3 Authority Key Identifier:
                keyid:ED:A8:87:0B:B9:4E:24:D2:52:07:95:A4:7B:FD:F7:B5:E0:BD:D9:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/EDA8870BB94E24D2520795A47BFDF7B5E0BDD935.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDA8870BB94E24D2520795A47BFDF7B5E0BDD935.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/3230302e342e3131302e302f32332d3233203d3e20323731343739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.4.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:6f:a7:a1:ee:cd:cb:ad:e9:5c:99:43:30:3a:25:3a:0d:43:
         d7:a1:11:40:1b:be:cb:13:43:65:17:a1:5e:40:39:83:43:83:
         2c:44:eb:70:81:2c:88:88:a8:1c:08:4c:a1:68:19:65:60:81:
         bc:37:ec:89:d8:47:6c:63:84:fa:1e:36:4c:d0:0d:1a:38:9c:
         ab:db:db:72:0b:a4:53:c9:9d:59:be:9b:9c:57:10:71:64:62:
         bc:63:9a:ea:06:7d:ba:fa:6e:3a:1c:28:0a:b1:fb:92:8f:80:
         0c:c5:da:e2:9d:2e:b1:ef:71:e1:4f:8d:64:60:50:b1:53:66:
         82:52:96:f8:ab:97:09:3a:9d:61:90:26:60:63:04:68:cd:15:
         61:f9:09:0d:8c:42:e3:34:bd:82:d8:21:91:40:c6:69:d8:24:
         b7:83:bc:8d:0a:9e:0d:c6:57:2a:3f:44:cd:9a:93:de:50:eb:
         53:d5:6a:19:8f:52:bb:f5:9f:2c:b0:48:fc:91:c3:31:ec:d7:
         2d:8b:9d:02:23:bf:fc:8b:33:b1:1a:bd:55:c3:d6:6d:85:f7:
         47:0f:70:99:f2:f9:57:20:00:57:a2:f6:6c:39:9b:24:2b:f3:
         e4:15:cc:d1:6e:8f:25:ca:44:0e:a1:45:18:6c:cc:bf:48:29:
         e7:68:69:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 17:55:48 2024 by rpki-client on console-fra.rpki-client.org