Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/1/3230302e3231352e3136302e302f32322d3234203d3e20323633363536.roa
File:                     3230302e3231352e3136302e302f32322d3234203d3e20323633363536.roa (raw, json)
Hash identifier:          O3jtO0Pb4yGIRK3HMfpTHgdxHOBTAQblcjXlImYRYi0=
Subject key identifier:   D4:A3:A3:B5:4F:0D:DB:29:48:9A:9A:81:71:58:E0:47:D8:3B:27:AB
Certificate issuer:       /CN=652C747C27E6032DB35E33D140A8860A69786CD4
Certificate serial:       599D4A9C4690F48BD3E92632644BDBB57AD247A3
Authority key identifier: 65:2C:74:7C:27:E6:03:2D:B3:5E:33:D1:40:A8:86:0A:69:78:6C:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652C747C27E6032DB35E33D140A8860A69786CD4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/1/3230302e3231352e3136302e302f32322d3234203d3e20323633363536.roa
Signing time:             Fri 26 Jul 2024 19:16:29 +0000
ROA not before:           Fri 26 Jul 2024 19:11:29 +0000
ROA not after:            Fri 25 Jul 2025 19:16:29 +0000
asID:                     263656
IP address blocks:        200.215.160.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/1/652C747C27E6032DB35E33D140A8860A69786CD4.crl
                          rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/1/652C747C27E6032DB35E33D140A8860A69786CD4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652C747C27E6032DB35E33D140A8860A69786CD4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:32:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:9d:4a:9c:46:90:f4:8b:d3:e9:26:32:64:4b:db:b5:7a:d2:47:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=652C747C27E6032DB35E33D140A8860A69786CD4
        Validity
            Not Before: Jul 26 19:11:29 2024 GMT
            Not After : Jul 25 19:16:29 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6d:04:16:2d:c5:ef:13:f0:e8:f1:82:72:80:
                    ff:f0:89:0b:db:ab:f2:5f:1f:c5:10:94:c7:bc:9e:
                    b5:17:3d:3b:ee:0d:b2:76:59:2e:de:51:b5:50:6c:
                    e9:77:79:23:17:c6:58:17:a9:12:72:e0:61:24:72:
                    34:f6:ca:ce:06:31:e0:83:e6:48:13:9b:54:e2:f0:
                    c7:c5:f9:6a:53:d4:c0:ae:8f:86:6f:3c:e3:8a:be:
                    00:71:c5:48:ca:a0:df:d5:26:ca:38:86:d2:11:8d:
                    5f:ac:41:e4:f1:13:65:77:f1:b4:a8:5e:57:db:fb:
                    d0:63:12:ae:d7:88:cb:30:02:69:a7:92:8b:f3:0e:
                    7e:b9:89:61:4e:18:ce:f6:92:24:ed:8d:7a:5d:38:
                    2b:b7:60:5b:94:d1:22:6e:da:8f:c7:9c:ba:28:78:
                    6c:8b:5a:f3:9d:5a:57:ee:cf:6b:8b:72:3c:e3:a1:
                    fc:8d:c9:af:0c:3a:6d:cd:1d:ca:d7:b9:4e:5c:77:
                    78:3b:74:36:a6:f6:5b:59:4a:3f:df:bb:0f:7f:6e:
                    01:1d:c0:6b:75:a5:d7:49:8a:3d:86:b4:2d:f2:66:
                    6e:bf:88:0f:91:51:4a:a0:d0:08:b5:9d:b0:9a:9e:
                    7c:40:b4:14:9c:aa:93:88:56:2b:ba:91:da:55:36:
                    70:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:A3:A3:B5:4F:0D:DB:29:48:9A:9A:81:71:58:E0:47:D8:3B:27:AB
            X509v3 Authority Key Identifier:
                keyid:65:2C:74:7C:27:E6:03:2D:B3:5E:33:D1:40:A8:86:0A:69:78:6C:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/1/652C747C27E6032DB35E33D140A8860A69786CD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652C747C27E6032DB35E33D140A8860A69786CD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/1/3230302e3231352e3136302e302f32322d3234203d3e20323633363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.215.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:9b:c3:49:97:9d:6f:c4:8a:04:13:70:e7:5f:2d:d0:75:a0:
         94:85:a3:74:ee:bc:30:db:6a:56:03:b5:2e:89:2c:89:98:41:
         23:16:bd:a2:96:04:2b:e0:fb:6f:77:b3:a1:b2:75:4c:3b:57:
         26:de:f7:0a:a6:2c:b7:c3:0b:ca:74:ef:ca:be:70:61:3a:81:
         60:61:91:97:7c:d4:18:cf:fa:be:fe:3c:70:fe:50:d1:33:a4:
         85:40:a2:48:7f:59:87:d5:16:56:34:a7:9e:55:f1:3f:34:52:
         d9:44:f4:1a:8b:13:ef:1c:57:bb:66:44:5e:95:e0:63:0f:91:
         50:49:b6:bd:d9:ad:44:a4:c9:46:00:a7:b9:3b:b8:bd:4a:0e:
         5e:ba:b6:48:44:05:d1:78:b1:f4:65:8e:ae:e8:a8:fc:84:b1:
         67:19:69:60:59:87:47:65:12:e1:e2:48:07:f1:18:cf:dd:9f:
         ac:92:eb:53:43:3b:96:31:4d:fc:40:a5:e4:6d:f7:f5:98:80:
         c5:0f:d3:d3:05:4b:d8:8b:f3:ca:97:71:00:9a:82:ef:54:9c:
         05:5b:5b:32:a6:f6:3e:d3:c8:bc:08:bd:ee:45:39:ca:03:b7:
         38:bb:71:ad:18:17:07:97:ac:35:de:00:73:f4:d2:2a:ff:76:
         73:f4:f9:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:11 2024 by rpki-client on console-ams.rpki-client.org