Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/3230302e3231392e32302e302f32322d3232203d3e20323730383131.roa
File:                     3230302e3231392e32302e302f32322d3232203d3e20323730383131.roa (raw, json)
Hash identifier:          9DpAit0yyddwmXWipt0OaZwe3lVjkJn4MIwmF0FqFwk=
Subject key identifier:   B8:0E:0D:0A:E5:E1:7F:02:3E:B3:1F:8B:E0:82:57:5B:EE:D2:4C:8C
Certificate issuer:       /CN=6876A918DB59AE677BB1F068BBB1EC6A5E0C6596
Certificate serial:       3240118EED14EDC73D4754BB006B5C28D00CBEB9
Authority key identifier: 68:76:A9:18:DB:59:AE:67:7B:B1:F0:68:BB:B1:EC:6A:5E:0C:65:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/3230302e3231392e32302e302f32322d3232203d3e20323730383131.roa
Signing time:             Wed 03 Apr 2024 18:50:34 +0000
ROA not before:           Wed 03 Apr 2024 18:45:34 +0000
ROA not after:            Wed 02 Apr 2025 18:50:34 +0000
asID:                     270811
IP address blocks:        200.219.20.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.crl
                          rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:40:11:8e:ed:14:ed:c7:3d:47:54:bb:00:6b:5c:28:d0:0c:be:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6876A918DB59AE677BB1F068BBB1EC6A5E0C6596
        Validity
            Not Before: Apr  3 18:45:34 2024 GMT
            Not After : Apr  2 18:50:34 2025 GMT
        Subject: CN=B80E0D0AE5E17F023EB31F8BE082575BEED24C8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:68:0c:d0:73:a4:c8:1c:4d:fb:20:2e:21:2b:
                    6a:4e:6b:ca:66:91:ac:6a:da:1a:f5:5b:43:02:bc:
                    d7:8e:d1:74:7d:cb:fa:a7:2f:3c:9a:49:e4:8b:27:
                    8a:e8:74:d3:39:6a:1c:b8:f3:0a:d3:ba:c9:bf:ae:
                    6d:52:34:bf:ca:7e:45:6a:79:31:bd:2e:9b:ad:86:
                    13:e1:aa:16:fb:99:00:65:60:35:3d:b4:97:48:02:
                    14:88:9c:bc:6f:7f:ae:47:c6:78:a0:6d:df:fd:e7:
                    7f:52:18:e7:e3:34:df:20:fe:ec:08:f0:71:9a:dd:
                    1e:05:1a:3d:72:5f:8d:c2:e2:a5:74:9a:90:14:98:
                    18:8a:67:de:9a:ef:f0:a8:f7:db:18:88:c6:53:64:
                    6f:9b:0a:80:58:d9:87:7d:2a:b8:34:7d:0b:b1:65:
                    52:f5:f8:b6:b1:53:2e:df:33:53:35:dd:c9:99:bb:
                    46:d0:bc:cd:fd:79:6e:f9:67:03:74:00:55:cd:d2:
                    6d:53:e4:7d:c7:af:30:16:55:7d:f8:25:74:d4:67:
                    35:d7:20:19:08:1d:4f:0d:bd:c0:fd:23:e1:93:c4:
                    d3:bc:94:55:07:8c:5e:79:0e:bd:94:5e:a5:39:d2:
                    88:43:7e:71:97:6c:dc:58:a3:35:c5:71:7e:6c:b8:
                    7b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:0E:0D:0A:E5:E1:7F:02:3E:B3:1F:8B:E0:82:57:5B:EE:D2:4C:8C
            X509v3 Authority Key Identifier:
                keyid:68:76:A9:18:DB:59:AE:67:7B:B1:F0:68:BB:B1:EC:6A:5E:0C:65:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/3230302e3231392e32302e302f32322d3232203d3e20323730383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:93:22:1d:ae:f6:0e:58:92:4c:3b:9c:b1:d9:02:1a:05:a0:
         ce:8a:23:1f:00:21:a8:8d:43:61:5f:11:f5:48:2b:a0:de:69:
         20:38:6c:9b:b6:c0:9a:93:95:cc:98:94:4a:ca:20:a5:fe:eb:
         0a:f9:f4:25:98:7e:53:3b:14:c5:12:3a:5b:fc:f2:1e:4b:43:
         5e:bf:a2:34:7f:cc:e0:64:2f:d5:52:b7:9a:8d:89:a8:46:bd:
         18:6c:be:bb:d1:98:52:10:28:42:15:05:30:ba:e7:c6:54:1c:
         c8:bb:71:5e:97:fe:84:17:bf:92:da:e7:1a:0e:40:1a:db:74:
         de:bd:f6:78:70:c5:67:75:4d:ce:af:a8:fc:3c:41:1f:2e:7d:
         40:9b:a1:b6:00:df:63:71:cc:4d:ac:a1:34:28:21:7d:31:78:
         97:04:d3:87:27:7b:e5:9f:ea:36:5a:de:1c:72:e2:70:b1:79:
         e1:88:0c:af:b2:6a:ce:23:d6:c3:05:cc:e3:ae:05:b3:79:0f:
         b3:f2:e6:62:37:f4:a6:07:ea:d7:39:fc:4f:b3:a2:00:25:98:
         a1:a6:e9:b9:c2:d1:7c:ea:c4:09:51:bd:d1:53:0d:52:45:a1:
         98:6a:eb:3f:ef:6a:db:0e:e6:cc:dd:9e:02:5f:74:1e:f3:f2:
         a5:82:7b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:20 2024 by rpki-client on console-fra.rpki-client.org