Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/3230302e31372e39362e302f32302d3234203d3e203130383831.roa
File:                     3230302e31372e39362e302f32302d3234203d3e203130383831.roa (raw, json)
Hash identifier:          hclbZL2ndW4fMWri31FLGCTsHdwFR8dLK8BeefpAB84=
Subject key identifier:   88:10:B5:7C:C9:4F:27:D2:17:EB:8A:57:8E:B9:20:E1:B6:20:FD:14
Certificate issuer:       /CN=470BFABD451A375BCBD5E6F088E3BC9AFB00642A
Certificate serial:       1066D80C8F2FF481711E7B4EC7B0547AEBC9EEB9
Authority key identifier: 47:0B:FA:BD:45:1A:37:5B:CB:D5:E6:F0:88:E3:BC:9A:FB:00:64:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/3230302e31372e39362e302f32302d3234203d3e203130383831.roa
Signing time:             Thu 04 Apr 2024 14:52:38 +0000
ROA not before:           Thu 04 Apr 2024 14:47:38 +0000
ROA not after:            Thu 03 Apr 2025 14:52:38 +0000
asID:                     10881
IP address blocks:        200.17.96.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.crl
                          rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:66:d8:0c:8f:2f:f4:81:71:1e:7b:4e:c7:b0:54:7a:eb:c9:ee:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=470BFABD451A375BCBD5E6F088E3BC9AFB00642A
        Validity
            Not Before: Apr  4 14:47:38 2024 GMT
            Not After : Apr  3 14:52:38 2025 GMT
        Subject: CN=8810B57CC94F27D217EB8A578EB920E1B620FD14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3e:2a:1c:db:a1:67:4c:5f:a1:b9:56:30:fd:
                    47:cd:5b:b9:2f:6d:51:80:cd:80:b2:f8:64:e2:3b:
                    76:7c:6f:e1:1b:a5:8e:3a:f6:cb:a7:c8:12:58:93:
                    9d:47:64:31:9c:db:46:bc:80:c6:be:b4:47:2e:6d:
                    44:86:f4:99:1c:53:30:42:bf:b7:77:86:66:52:8a:
                    33:e9:fe:4b:49:cc:b0:ee:fc:16:a8:dc:04:39:e0:
                    45:01:7c:ef:c7:a7:56:91:6c:d8:02:41:c3:ed:f4:
                    86:35:bb:58:4d:48:65:2b:c8:b8:eb:c5:3a:3a:98:
                    ed:62:70:a1:b1:04:42:7a:d2:36:a6:63:89:9b:2d:
                    05:96:c8:1e:1a:3f:9f:b6:d7:4f:30:e0:87:61:11:
                    56:f7:b9:3b:fe:1e:16:4d:39:26:11:79:3e:51:ab:
                    0a:54:04:12:b7:2f:d5:42:93:67:f2:9f:bc:ca:f4:
                    ad:9a:ff:d5:64:17:8d:2a:68:77:d5:e8:0b:2f:e7:
                    b9:1a:62:3c:9d:e2:4c:ae:8b:fa:75:a7:c1:0f:d9:
                    6a:71:e9:c0:2d:5f:ff:0c:8d:76:f8:78:87:37:14:
                    a3:b7:95:18:d2:2a:29:48:b8:87:e8:cb:70:d2:9c:
                    ff:a9:0b:e3:15:55:81:e3:c9:8a:37:8f:c9:5b:b3:
                    a5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:10:B5:7C:C9:4F:27:D2:17:EB:8A:57:8E:B9:20:E1:B6:20:FD:14
            X509v3 Authority Key Identifier:
                keyid:47:0B:FA:BD:45:1A:37:5B:CB:D5:E6:F0:88:E3:BC:9A:FB:00:64:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/3230302e31372e39362e302f32302d3234203d3e203130383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.17.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         73:45:23:fd:95:23:0d:54:0b:b8:13:c1:b7:5c:14:ad:73:e5:
         da:53:62:55:b7:2b:66:db:f6:02:3e:51:e7:2f:a7:0e:cc:2e:
         82:fc:f1:2b:47:b1:db:69:7a:36:41:c8:bd:05:a3:ac:f9:13:
         31:5e:7a:3e:e2:47:37:6a:cb:bc:ac:80:89:e1:3a:f0:f9:ff:
         22:62:d4:ec:31:e3:d0:ff:ce:dc:4a:b7:a8:62:8c:25:2f:bb:
         bf:a1:69:fb:6d:9c:3c:c2:a3:2d:b6:6b:56:49:ed:6a:75:8a:
         03:03:ca:3b:10:58:22:71:71:60:84:ec:3d:21:4f:6a:bd:4a:
         bb:44:a3:eb:8e:1c:eb:e5:44:41:e1:e2:f3:e1:12:e4:1c:46:
         0d:81:9c:05:ee:49:6c:30:37:99:0d:85:d7:8e:fe:98:7e:12:
         43:8a:6f:36:22:ed:72:fe:54:aa:b9:96:5e:30:9b:3a:23:5a:
         20:dd:52:f3:df:45:0b:f9:2d:0f:74:ab:36:2b:b4:ce:a0:d7:
         eb:1c:31:32:61:ad:a1:90:99:6e:db:77:8d:34:4d:3d:93:cd:
         92:00:7f:a3:4f:36:ea:8f:e1:00:5b:3f:c1:b8:4c:bb:d7:0e:
         3b:bc:4e:62:dc:b5:48:14:02:33:7e:a3:2f:e1:f4:67:29:71:
         8d:b6:78:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:20 2024 by rpki-client on console-fra.rpki-client.org