Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/1/3230302e392e3131362e302f32322d3234203d3e20323731333238.roa
File:                     3230302e392e3131362e302f32322d3234203d3e20323731333238.roa (raw, json)
Hash identifier:          49eHjmzdViGuTPS7ysF5BC8+4t6DwApS4I/9fFPSeZU=
Subject key identifier:   09:56:1E:9C:62:A5:6E:D2:BC:55:2F:26:AE:23:21:7F:D9:88:36:BC
Certificate issuer:       /CN=3DFAB11D75C819D05773554EBACF15CD75341EF8
Certificate serial:       5161DA7E72C505335C86B3D96E9996024E485BCB
Authority key identifier: 3D:FA:B1:1D:75:C8:19:D0:57:73:55:4E:BA:CF:15:CD:75:34:1E:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/1/3230302e392e3131362e302f32322d3234203d3e20323731333238.roa
Signing time:             Wed 03 Apr 2024 18:30:56 +0000
ROA not before:           Wed 03 Apr 2024 18:25:56 +0000
ROA not after:            Wed 02 Apr 2025 18:30:56 +0000
asID:                     271328
IP address blocks:        200.9.116.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.crl
                          rsync://rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 18:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:61:da:7e:72:c5:05:33:5c:86:b3:d9:6e:99:96:02:4e:48:5b:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DFAB11D75C819D05773554EBACF15CD75341EF8
        Validity
            Not Before: Apr  3 18:25:56 2024 GMT
            Not After : Apr  2 18:30:56 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:44:8e:31:51:fa:c1:34:46:ca:fb:5b:81:31:
                    ae:3a:4c:4e:70:0a:c9:6e:16:e8:d4:3f:3d:87:e3:
                    f7:c9:8c:ab:1b:f6:10:ff:c1:18:4e:cb:2e:59:13:
                    24:df:d4:6d:07:f4:da:74:09:97:47:09:49:be:b7:
                    f7:37:12:65:f2:71:a8:c5:26:43:10:a3:26:c9:a4:
                    c9:6c:8e:6c:9e:f5:5d:29:c3:2d:bd:28:1e:bf:67:
                    b8:5c:b1:92:60:f7:c2:24:88:96:9e:ef:6c:69:eb:
                    45:89:10:b6:53:78:9a:01:3c:c0:b9:c6:77:e3:d1:
                    3b:c9:41:79:20:bf:d0:86:f4:46:99:aa:7a:ed:35:
                    3f:86:5b:fa:e5:55:d6:5c:04:ff:8b:31:05:65:a1:
                    34:0a:10:be:c3:f7:c9:3e:1c:c6:f2:c2:96:a3:2c:
                    1d:ae:21:de:11:e2:33:b9:ab:fb:1a:b8:ed:88:99:
                    00:50:97:b4:ee:66:5d:b0:0c:c2:6e:e0:c4:72:b0:
                    c2:49:d1:ef:98:a3:e4:de:57:53:90:de:91:97:09:
                    e4:d2:f3:69:22:3c:8e:9e:dd:da:05:04:25:98:85:
                    1b:e1:38:02:17:45:52:1f:f9:35:1c:a2:6c:df:c8:
                    b0:48:93:46:80:2c:13:7a:5a:eb:e3:75:fa:4b:f3:
                    cd:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:56:1E:9C:62:A5:6E:D2:BC:55:2F:26:AE:23:21:7F:D9:88:36:BC
            X509v3 Authority Key Identifier:
                keyid:3D:FA:B1:1D:75:C8:19:D0:57:73:55:4E:BA:CF:15:CD:75:34:1E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/1/3230302e392e3131362e302f32322d3234203d3e20323731333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:fb:64:7e:b9:d4:b8:ba:98:04:14:e6:60:6a:a9:f7:6c:8a:
         00:10:b0:e0:3d:6c:b1:ea:5a:18:1a:ff:53:02:e8:a4:92:1f:
         7c:da:46:8c:24:5d:90:e8:0b:15:03:e9:f7:49:90:19:dc:75:
         cc:ad:50:76:a8:a2:f7:5e:71:65:a6:38:bb:82:dd:2b:aa:32:
         08:0d:66:6d:ae:21:8d:f3:a1:58:41:da:99:08:ad:ce:31:b4:
         e7:d7:cc:b6:02:a3:b5:7b:ab:85:e3:01:51:69:30:f8:3b:42:
         32:2b:c6:6c:05:f3:26:e6:b3:93:e6:72:c2:d9:13:73:ef:bc:
         64:38:28:79:83:13:ae:49:4b:b6:c6:6b:a0:43:ed:4e:66:44:
         6d:3f:dc:61:6a:04:f6:7c:0d:44:fd:b0:88:e7:46:0a:c5:8d:
         e6:df:57:7f:19:18:03:62:d9:32:45:e6:f1:0d:ed:e8:c7:de:
         46:28:9e:88:f0:81:83:49:7f:8d:72:f4:e2:fa:6a:93:b5:fc:
         6f:89:b6:32:7c:80:c1:84:d4:18:fa:56:e4:41:94:f0:0d:9f:
         f4:4f:08:40:20:5e:c7:2f:77:06:a7:3e:a4:06:f8:bc:f2:b9:
         05:b6:e8:4b:e1:a1:60:01:10:a5:c3:56:2b:e9:3e:18:89:18:
         0d:67:1e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 22:39:48 2024 by rpki-client on console-fra.rpki-client.org