Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/1/3230302e3132332e3233352e302f32342d3234203d3e20323730323838.roa
File:                     3230302e3132332e3233352e302f32342d3234203d3e20323730323838.roa (raw, json)
Hash identifier:          m7OfH7COcoFjKsFBdR2QIPuHkBjd7a+lene9o179loc=
Subject key identifier:   9F:F0:FB:3F:AB:9D:47:6E:0F:6D:AB:76:4F:BF:36:53:D0:5C:97:C6
Certificate issuer:       /CN=B646C835E3D595CAB108A2D2ED63E639BDC130B4
Certificate serial:       201977E3B05033763B18C75EAF0C772D68A08FC1
Authority key identifier: B6:46:C8:35:E3:D5:95:CA:B1:08:A2:D2:ED:63:E6:39:BD:C1:30:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B646C835E3D595CAB108A2D2ED63E639BDC130B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/1/3230302e3132332e3233352e302f32342d3234203d3e20323730323838.roa
Signing time:             Tue 20 Aug 2024 23:30:27 +0000
ROA not before:           Tue 20 Aug 2024 23:25:27 +0000
ROA not after:            Tue 19 Aug 2025 23:30:27 +0000
asID:                     270288
IP address blocks:        200.123.235.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/1/B646C835E3D595CAB108A2D2ED63E639BDC130B4.crl
                          rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/1/B646C835E3D595CAB108A2D2ED63E639BDC130B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B646C835E3D595CAB108A2D2ED63E639BDC130B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:19:77:e3:b0:50:33:76:3b:18:c7:5e:af:0c:77:2d:68:a0:8f:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B646C835E3D595CAB108A2D2ED63E639BDC130B4
        Validity
            Not Before: Aug 20 23:25:27 2024 GMT
            Not After : Aug 19 23:30:27 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:87:19:ca:ad:fd:6d:db:a8:77:96:51:bc:4b:
                    18:67:77:68:fa:9a:76:43:bd:00:33:d6:4a:f9:0f:
                    4d:d2:bd:9d:49:5c:f4:57:35:1c:4e:7d:13:93:64:
                    a4:d9:d6:05:94:ee:7f:55:41:40:cb:2e:f7:66:89:
                    e0:cb:36:b0:35:42:48:b5:c8:68:d4:de:be:86:f5:
                    4d:45:24:fe:24:bc:7b:07:72:b9:56:2d:d8:fc:26:
                    5e:0d:84:14:11:9d:89:53:df:34:55:01:54:42:41:
                    aa:8d:3f:26:ad:11:eb:e2:b9:fa:a6:8f:b6:ff:ed:
                    1c:a2:94:ce:1b:6f:11:6f:f0:87:bf:df:52:fd:ec:
                    ec:de:aa:e4:0d:7d:56:3b:73:a8:dc:71:76:cc:7c:
                    d6:0f:c8:8d:43:5a:5b:7c:03:df:e9:9d:f9:60:9d:
                    75:e4:ae:a5:73:c4:d0:4f:f5:1a:b8:bc:4d:c0:78:
                    a9:c9:d0:c2:0e:3d:a0:92:41:72:c4:3b:c6:89:2e:
                    56:27:54:e1:ac:c8:10:dc:52:53:c7:bd:8e:27:56:
                    45:c1:44:f3:34:76:c4:5c:08:46:d9:30:eb:3f:89:
                    d0:2a:31:af:53:24:d7:de:67:24:1c:2c:5b:fe:f1:
                    8a:46:76:43:64:6f:66:b2:43:89:a0:a5:14:ab:80:
                    e6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:F0:FB:3F:AB:9D:47:6E:0F:6D:AB:76:4F:BF:36:53:D0:5C:97:C6
            X509v3 Authority Key Identifier:
                keyid:B6:46:C8:35:E3:D5:95:CA:B1:08:A2:D2:ED:63:E6:39:BD:C1:30:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/1/B646C835E3D595CAB108A2D2ED63E639BDC130B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B646C835E3D595CAB108A2D2ED63E639BDC130B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/1/3230302e3132332e3233352e302f32342d3234203d3e20323730323838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:3e:61:fd:32:a7:86:3d:46:4b:40:69:4f:8c:e1:8e:da:99:
         64:06:f0:93:5a:c2:19:30:b0:17:34:b1:92:35:cc:e0:a5:51:
         38:26:f0:c1:f8:e8:ee:a7:06:7c:f0:78:12:55:09:0a:25:e6:
         8d:be:53:b0:57:5c:42:f8:73:62:f5:86:3f:95:ba:42:ac:af:
         5d:ac:fb:a2:44:5a:70:36:f3:65:85:25:9e:8f:b1:94:26:f8:
         b9:1a:81:34:51:62:21:31:0c:4a:1c:85:cd:1d:2b:b1:56:ab:
         11:7a:ef:93:32:e1:fb:38:93:a9:c2:c4:48:68:3c:0a:d1:62:
         bd:46:ec:aa:0a:18:29:76:97:9d:60:c9:f4:f8:16:08:b7:7e:
         76:5f:fb:58:d4:b5:97:45:b7:a3:2e:9a:9f:05:1a:2a:20:4e:
         16:29:d4:3e:bd:a7:48:fd:bc:65:f4:e5:65:24:fa:01:34:b6:
         04:1e:c3:23:58:44:a1:a5:cb:73:61:0f:d1:32:2c:0a:24:b6:
         0e:48:70:2b:a0:ca:ff:57:28:30:a5:3d:13:a5:ef:e0:90:3c:
         ec:41:3f:ec:28:d9:70:e2:c7:8a:f6:4a:92:16:c2:c1:55:08:
         df:24:68:00:f1:48:36:40:17:97:14:f9:ef:d6:c0:ff:d4:4f:
         e2:c6:10:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:20 2024 by rpki-client on console-ams.rpki-client.org