Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234342e302f32322d3232203d3e20323730383135.roa
File:                     3230302e3232392e3234342e302f32322d3232203d3e20323730383135.roa (raw, json)
Hash identifier:          v34aZ3jnch1rFCf0eDVjGGp3K712xjQso4n8usWPbN0=
Subject key identifier:   F6:F3:C1:6C:80:B3:8C:44:63:B3:34:08:60:35:2A:72:CB:F0:F6:30
Certificate issuer:       /CN=6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A
Certificate serial:       3B8F5B558FE571754ECAFBCA97561CC47E88FA4F
Authority key identifier: 6A:41:E5:59:8C:15:DD:30:85:A3:2C:5C:38:EB:D8:C2:FA:47:F2:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234342e302f32322d3232203d3e20323730383135.roa
Signing time:             Thu 07 Nov 2024 17:45:02 +0000
ROA not before:           Thu 07 Nov 2024 17:40:02 +0000
ROA not after:            Thu 06 Nov 2025 17:45:02 +0000
asID:                     270815
IP address blocks:        200.229.244.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A.crl
                          rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 06:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:8f:5b:55:8f:e5:71:75:4e:ca:fb:ca:97:56:1c:c4:7e:88:fa:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A
        Validity
            Not Before: Nov  7 17:40:02 2024 GMT
            Not After : Nov  6 17:45:02 2025 GMT
        Subject: CN=F6F3C16C80B38C4463B3340860352A72CBF0F630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b8:70:60:d5:c4:f5:9c:6f:29:23:7e:8d:c2:
                    32:48:5f:e1:bf:3c:ae:d8:e2:8c:3e:06:a7:24:37:
                    74:e9:de:04:23:50:09:04:88:c4:49:d3:6e:9f:21:
                    a3:7f:9d:d8:b7:95:fd:66:e6:ea:b2:f4:77:6c:11:
                    bf:78:54:5d:c9:1e:4a:6e:61:d7:92:fa:56:df:5f:
                    8e:0f:44:5b:c8:4e:2b:e4:ee:61:c7:c0:aa:7d:6b:
                    1c:39:b8:20:bc:e0:0f:d5:82:6a:c5:66:26:21:63:
                    4f:30:28:77:c9:8a:2f:73:39:fd:ab:b5:87:d3:1b:
                    24:62:62:61:da:b9:31:74:bf:f1:68:9d:95:ef:e9:
                    63:3a:67:c2:9f:b1:cd:db:76:1d:be:d1:4d:63:35:
                    e8:99:d6:c4:a0:bd:2d:16:e9:1a:88:3e:64:54:da:
                    8e:15:20:5e:87:32:d4:f2:35:53:c5:7c:7b:0d:b2:
                    eb:3d:50:ba:6b:3f:88:06:51:95:21:a6:ba:94:3f:
                    05:95:8e:4b:f8:e9:f7:27:92:8e:9d:30:c4:57:19:
                    12:18:81:39:50:54:d0:e1:76:c0:ef:24:50:f9:90:
                    2a:f6:fd:6f:78:00:33:09:6c:d8:32:e5:14:e2:01:
                    c8:ef:36:ff:1b:e6:f5:e1:72:63:64:87:b5:a1:03:
                    f6:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F3:C1:6C:80:B3:8C:44:63:B3:34:08:60:35:2A:72:CB:F0:F6:30
            X509v3 Authority Key Identifier:
                keyid:6A:41:E5:59:8C:15:DD:30:85:A3:2C:5C:38:EB:D8:C2:FA:47:F2:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234342e302f32322d3232203d3e20323730383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:fa:ac:6f:54:47:1e:07:ac:d8:6e:3f:c5:54:6e:90:bc:09:
         8a:3c:f6:f5:d7:ba:62:86:cd:2b:e3:e7:71:15:3c:5a:65:ba:
         aa:c0:6a:3b:ef:58:a3:c9:51:a7:d1:61:0b:3b:bd:63:41:57:
         09:b1:6d:78:47:76:d9:dd:dd:d5:3d:f7:3f:9d:be:ec:97:2b:
         af:f1:1e:9e:2c:ee:1b:a9:cb:f9:e5:2b:57:f1:df:f4:18:f4:
         ae:1b:a9:99:d3:34:4a:54:02:d1:71:0b:55:cf:b9:30:3d:08:
         c0:e5:b1:4d:37:7e:8b:d5:ac:c7:e4:04:41:d0:3f:2b:fd:90:
         e3:40:2f:15:0e:25:7e:37:7a:44:f6:3f:ea:b9:17:87:4e:c8:
         72:62:12:fb:ae:6c:92:82:67:b1:62:b5:65:c9:ca:b3:5d:54:
         81:ac:72:a3:d3:de:d9:53:d0:b2:4c:ac:62:72:2f:ed:1e:04:
         1a:b7:39:5f:d9:a4:6d:1f:62:aa:41:f8:ca:6f:45:35:2b:93:
         f6:bf:0d:75:0b:b3:cc:37:21:c7:eb:d9:47:37:75:78:d1:d7:
         16:36:6a:9f:80:a1:0d:6c:55:ef:79:06:5f:09:39:5a:22:0c:
         dd:fe:9b:19:93:d8:76:92:13:c6:30:d9:62:75:8a:aa:c0:66:
         c2:dc:93:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 06:32:15 2024 by rpki-client on console-fra.rpki-client.org