Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/1/3230302e3132332e3233322e302f32322d3232203d3e20323730323838.roa
File:                     3230302e3132332e3233322e302f32322d3232203d3e20323730323838.roa (raw, json)
Hash identifier:          KuDbZAkRisbJvqoCqNPPBIgAYimv1aIEQN1Az4wp6nQ=
Subject key identifier:   EF:75:B2:D1:E2:03:61:59:B8:55:31:E4:7E:12:F8:46:2F:35:94:26
Certificate issuer:       /CN=B646C835E3D595CAB108A2D2ED63E639BDC130B4
Certificate serial:       7C2343CF471531F76EFC65EBF1985279FE3EE3A7
Authority key identifier: B6:46:C8:35:E3:D5:95:CA:B1:08:A2:D2:ED:63:E6:39:BD:C1:30:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B646C835E3D595CAB108A2D2ED63E639BDC130B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/1/3230302e3132332e3233322e302f32322d3232203d3e20323730323838.roa
Signing time:             Tue 20 Aug 2024 23:30:27 +0000
ROA not before:           Tue 20 Aug 2024 23:25:27 +0000
ROA not after:            Tue 19 Aug 2025 23:30:27 +0000
asID:                     270288
IP address blocks:        200.123.232.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/1/B646C835E3D595CAB108A2D2ED63E639BDC130B4.crl
                          rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/1/B646C835E3D595CAB108A2D2ED63E639BDC130B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B646C835E3D595CAB108A2D2ED63E639BDC130B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:23:43:cf:47:15:31:f7:6e:fc:65:eb:f1:98:52:79:fe:3e:e3:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B646C835E3D595CAB108A2D2ED63E639BDC130B4
        Validity
            Not Before: Aug 20 23:25:27 2024 GMT
            Not After : Aug 19 23:30:27 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:35:03:1e:8c:60:2e:97:38:67:6e:00:dd:ad:
                    1f:ad:ce:c5:fc:a8:54:89:11:e8:ec:d1:91:4e:50:
                    61:95:23:48:56:e9:39:78:63:12:0f:dd:67:b4:12:
                    33:67:da:a1:58:da:c7:89:ef:08:7b:5e:6d:e3:b0:
                    59:50:8c:dc:a4:68:7b:4b:e2:a9:cb:ce:f6:53:59:
                    9b:99:46:f6:a0:be:fa:01:69:1c:71:28:ad:38:be:
                    42:87:9c:ca:67:c4:c1:32:8e:88:a4:5c:7d:5e:0b:
                    52:1f:74:59:db:d6:79:54:d7:42:8b:fd:05:96:fe:
                    d5:88:60:d8:4d:6b:73:0f:d7:cb:c1:4b:d2:10:90:
                    9f:7c:08:ef:fa:75:f8:cb:26:2c:2c:9b:77:5b:03:
                    53:1c:d9:0e:4b:54:3a:f1:00:e4:f0:e1:58:59:99:
                    a2:5f:61:79:28:d7:8c:54:77:b8:9b:9a:cf:e9:cb:
                    c8:59:73:a4:7c:f4:e0:dd:6f:4f:fe:da:ee:9d:90:
                    b6:e0:d3:27:33:58:59:fb:e1:26:1a:46:56:3b:44:
                    fa:24:65:55:d3:3c:5e:f6:dc:fd:7f:5b:88:cd:93:
                    58:4c:3f:fc:f5:1a:b9:5b:3b:94:27:8b:d4:36:5b:
                    58:dc:42:e6:b5:ab:3b:a4:a7:26:f3:18:db:7b:dc:
                    35:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:75:B2:D1:E2:03:61:59:B8:55:31:E4:7E:12:F8:46:2F:35:94:26
            X509v3 Authority Key Identifier:
                keyid:B6:46:C8:35:E3:D5:95:CA:B1:08:A2:D2:ED:63:E6:39:BD:C1:30:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/1/B646C835E3D595CAB108A2D2ED63E639BDC130B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B646C835E3D595CAB108A2D2ED63E639BDC130B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/1/3230302e3132332e3233322e302f32322d3232203d3e20323730323838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:94:0e:62:c9:f6:59:95:3b:a6:47:a4:4d:cf:88:a1:bf:46:
         29:53:6e:3c:b1:2b:be:9a:93:5f:ee:fb:37:79:fd:d1:ea:67:
         0a:7b:63:c3:bc:6b:f8:8c:f5:9c:33:81:84:7d:4b:e4:6f:c5:
         35:95:d9:0e:e8:a5:33:81:11:be:97:f2:e4:98:28:3a:f9:64:
         fd:0b:ab:f7:9f:ff:49:e4:8c:07:4d:37:b4:9d:c7:5a:19:4f:
         90:47:f1:7b:5a:fc:a9:85:31:ab:a1:e7:b4:df:45:27:ad:e1:
         7d:13:56:20:da:23:67:d7:38:b2:69:0c:9d:91:64:e5:5e:d7:
         0c:aa:ad:52:71:65:b1:17:10:24:8a:2f:22:64:80:ec:af:c4:
         f5:f9:72:a1:30:0b:a9:8c:13:87:b8:e4:8e:07:7c:b2:64:d5:
         19:c6:c6:b7:1b:f7:33:7d:bd:ed:86:6d:fd:85:a2:88:15:dd:
         eb:74:11:78:a7:ee:aa:33:0f:c9:ec:d2:b1:d5:82:3c:be:68:
         9b:aa:d6:c1:07:fb:83:6f:5a:a7:99:4d:1d:bd:cc:85:06:09:
         08:70:70:de:02:90:23:c5:37:a5:45:bd:89:20:e4:22:2b:3f:
         45:4a:46:a6:e8:8b:96:e7:1f:64:25:e7:f4:ce:00:50:c7:89:
         b2:a4:d4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:53 2024 by rpki-client on console-fra.rpki-client.org