Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/1/3230302e3132332e3233322e302f32332d3233203d3e20323730323838.roa
File:                     3230302e3132332e3233322e302f32332d3233203d3e20323730323838.roa (raw, json)
Hash identifier:          CGuBZBS6hs8Fkg1+9hg6jWnqisQCktM1nwXuzbf4PrY=
Subject key identifier:   2C:A7:E0:ED:F2:A6:F4:34:86:A0:74:B8:B9:8F:FB:DC:74:49:44:F1
Certificate issuer:       /CN=B646C835E3D595CAB108A2D2ED63E639BDC130B4
Certificate serial:       788B233812C86ACD355B7B14FE5FE6196B1133A7
Authority key identifier: B6:46:C8:35:E3:D5:95:CA:B1:08:A2:D2:ED:63:E6:39:BD:C1:30:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B646C835E3D595CAB108A2D2ED63E639BDC130B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/1/3230302e3132332e3233322e302f32332d3233203d3e20323730323838.roa
Signing time:             Tue 20 Aug 2024 23:30:28 +0000
ROA not before:           Tue 20 Aug 2024 23:25:28 +0000
ROA not after:            Tue 19 Aug 2025 23:30:28 +0000
asID:                     270288
IP address blocks:        200.123.232.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/1/B646C835E3D595CAB108A2D2ED63E639BDC130B4.crl
                          rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/1/B646C835E3D595CAB108A2D2ED63E639BDC130B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B646C835E3D595CAB108A2D2ED63E639BDC130B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:8b:23:38:12:c8:6a:cd:35:5b:7b:14:fe:5f:e6:19:6b:11:33:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B646C835E3D595CAB108A2D2ED63E639BDC130B4
        Validity
            Not Before: Aug 20 23:25:28 2024 GMT
            Not After : Aug 19 23:30:28 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:82:b3:10:23:e8:f1:1d:03:e4:4c:33:4d:27:
                    f8:10:52:77:32:ec:a1:fd:70:c8:2f:07:83:f4:23:
                    76:13:d6:6c:01:15:27:9a:18:90:cf:57:94:42:61:
                    65:51:e4:35:13:61:41:55:67:c1:03:48:3e:fb:76:
                    c0:c2:ef:d8:a2:36:db:d4:9c:92:19:b8:52:a8:d3:
                    30:a1:71:73:2b:04:28:51:70:92:c7:5a:08:e0:ce:
                    c7:19:94:cd:f3:61:5a:65:8b:c2:d2:c7:07:c6:94:
                    45:3a:11:90:cc:0d:1f:ef:f8:2f:10:b3:cc:30:27:
                    f8:81:4d:b2:53:00:16:6b:42:e1:58:f2:e7:7e:cb:
                    9f:ec:b2:ef:01:b3:5c:17:73:80:5a:c2:de:5e:07:
                    49:51:50:9b:2d:89:74:1a:81:90:bc:69:35:e3:45:
                    82:c0:68:ea:d4:0a:a7:4c:a2:c9:18:e2:ab:dc:24:
                    14:8b:b3:13:94:5a:a2:4a:13:be:56:e2:64:f5:3f:
                    95:f3:0e:d0:3e:de:e7:26:7f:f4:29:01:26:c2:22:
                    29:52:5d:fc:2f:a3:68:21:00:a2:eb:97:86:22:c0:
                    68:2c:cd:2e:92:a8:b4:57:c9:59:5b:59:b9:4f:b4:
                    25:40:a3:13:5c:44:49:cf:b3:41:db:8c:28:03:11:
                    c5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:A7:E0:ED:F2:A6:F4:34:86:A0:74:B8:B9:8F:FB:DC:74:49:44:F1
            X509v3 Authority Key Identifier:
                keyid:B6:46:C8:35:E3:D5:95:CA:B1:08:A2:D2:ED:63:E6:39:BD:C1:30:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/1/B646C835E3D595CAB108A2D2ED63E639BDC130B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B646C835E3D595CAB108A2D2ED63E639BDC130B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/1/3230302e3132332e3233322e302f32332d3233203d3e20323730323838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:bf:a8:b3:1b:4e:99:3b:72:22:ff:bc:ed:54:c9:6a:62:eb:
         f8:3c:af:b1:0c:2c:4e:c0:7c:2f:a6:99:34:e4:df:93:ab:e2:
         46:ad:e5:e4:f9:f7:84:ad:49:f4:2c:1e:05:6f:ac:8b:9e:2a:
         c1:f1:23:10:84:d8:61:22:03:a8:55:02:9d:f5:38:88:ba:2d:
         97:ae:86:ce:a6:ef:f1:d5:af:4e:1c:6d:ac:13:bb:3e:27:59:
         e4:c1:2d:ee:30:38:67:f0:12:e5:ef:82:7d:b5:da:49:1b:18:
         26:75:37:40:46:36:c7:63:15:19:64:02:ef:a6:aa:03:4e:5d:
         c9:6a:d3:7d:6d:3d:41:39:1e:44:e8:ab:89:b6:9a:a6:88:4c:
         e7:22:4b:02:98:d6:3b:98:d8:a8:af:68:58:b8:44:26:ec:da:
         63:d3:cf:8f:45:ce:ca:9c:27:56:2b:eb:85:53:04:bf:84:46:
         41:46:ad:93:9a:3e:c2:bb:5e:37:17:47:ce:38:be:31:96:1e:
         c6:d1:5a:34:66:c7:fd:a1:0b:3c:c7:87:a2:d5:4a:62:f0:9e:
         fe:2d:11:8b:5c:36:84:c7:d2:5a:79:b5:44:4b:0d:f5:12:c7:
         34:56:62:c0:9b:96:0f:88:c8:3c:ff:f0:ac:56:d4:17:03:97:
         aa:63:94:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:53 2024 by rpki-client on console-fra.rpki-client.org