Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/3230302e3231392e32302e302f32332d3233203d3e20323730383131.roa
File:                     3230302e3231392e32302e302f32332d3233203d3e20323730383131.roa (raw, json)
Hash identifier:          gPEdhcRwghYDs5dbHW9F8cWfKIOVI3hlcB03+CisG8A=
Subject key identifier:   82:4F:E7:CA:33:4D:55:D8:53:DD:39:29:53:FB:95:CE:0F:C0:60:4B
Certificate issuer:       /CN=6876A918DB59AE677BB1F068BBB1EC6A5E0C6596
Certificate serial:       1024A36392644FCA6CFF64F0BBD84A9B8EBCA8B6
Authority key identifier: 68:76:A9:18:DB:59:AE:67:7B:B1:F0:68:BB:B1:EC:6A:5E:0C:65:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/3230302e3231392e32302e302f32332d3233203d3e20323730383131.roa
Signing time:             Wed 03 Apr 2024 18:50:34 +0000
ROA not before:           Wed 03 Apr 2024 18:45:34 +0000
ROA not after:            Wed 02 Apr 2025 18:50:34 +0000
asID:                     270811
IP address blocks:        200.219.20.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.crl
                          rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:24:a3:63:92:64:4f:ca:6c:ff:64:f0:bb:d8:4a:9b:8e:bc:a8:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6876A918DB59AE677BB1F068BBB1EC6A5E0C6596
        Validity
            Not Before: Apr  3 18:45:34 2024 GMT
            Not After : Apr  2 18:50:34 2025 GMT
        Subject: CN=824FE7CA334D55D853DD392953FB95CE0FC0604B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:41:cf:f2:2b:39:c6:99:91:b5:ac:15:80:e7:
                    59:7b:62:9d:c7:a9:62:04:cd:53:6f:00:31:d9:d4:
                    b8:88:81:97:4b:8b:96:9b:56:7e:23:92:26:bf:15:
                    61:68:0b:ef:e5:ad:1c:9b:a8:18:2f:d1:23:a1:e0:
                    43:72:04:71:81:5a:8d:ce:bf:d8:51:70:36:87:2c:
                    94:14:07:cc:e3:8e:b2:63:fb:e1:57:4b:19:96:d1:
                    cd:aa:65:81:e4:19:87:91:2a:21:59:4e:08:ba:d1:
                    15:b2:ad:71:53:8b:92:a4:c5:53:27:b5:99:42:cf:
                    6a:66:63:d5:b0:f2:db:f0:dd:0f:ad:50:76:94:5c:
                    ee:fc:5a:a8:b2:da:ca:a1:08:87:7f:8d:55:08:04:
                    5b:73:3d:79:c7:f6:4e:1b:7c:f2:b9:e2:b6:18:e1:
                    34:c2:85:c9:a1:62:e3:d1:6e:7a:ba:30:25:5f:bf:
                    e8:71:7e:1b:c5:e9:b2:02:00:85:6a:77:66:bf:a0:
                    53:d3:fa:08:be:b6:67:d2:7f:0d:3a:c3:df:26:9b:
                    90:a4:ef:e9:9a:c8:81:ce:ac:99:9a:bd:fc:34:5e:
                    1d:33:2d:9e:63:5a:38:f3:18:ad:15:11:02:98:3c:
                    d6:32:39:80:da:42:5e:30:2f:d7:96:47:73:2d:5e:
                    98:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:4F:E7:CA:33:4D:55:D8:53:DD:39:29:53:FB:95:CE:0F:C0:60:4B
            X509v3 Authority Key Identifier:
                keyid:68:76:A9:18:DB:59:AE:67:7B:B1:F0:68:BB:B1:EC:6A:5E:0C:65:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/3230302e3231392e32302e302f32332d3233203d3e20323730383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:22:80:42:c1:f6:e3:c5:55:33:28:a9:bf:44:ae:90:dc:8d:
         92:b7:32:29:33:08:11:4b:83:48:74:e6:47:56:53:23:ff:32:
         77:1c:aa:8f:31:c9:19:94:02:02:55:39:6d:3f:dc:71:fc:67:
         8d:f0:a0:d3:6f:58:81:bd:50:23:1b:a0:69:26:da:80:ae:86:
         22:ff:7d:c0:72:7e:d0:94:77:99:2d:fd:5e:ee:9b:be:c6:76:
         09:c7:63:35:9e:19:f5:01:68:23:a7:0f:8e:a2:2b:8c:f4:49:
         0b:16:6a:23:d5:79:95:d8:76:29:9d:0d:fa:e2:14:de:43:49:
         05:f8:f4:76:c2:ef:d9:8d:8a:10:4f:d0:b3:d8:1d:d5:03:14:
         be:6e:bd:76:18:fd:3e:ea:ad:69:c6:75:60:fa:4e:12:42:d3:
         3b:52:17:4b:ad:b9:b7:61:b7:00:e3:a8:80:20:8b:a2:dc:9d:
         84:17:2d:6a:28:b7:65:d8:1c:09:24:66:be:d4:f0:7f:53:f0:
         07:e1:45:f7:80:25:83:6a:5f:b8:01:41:f8:fb:a9:17:55:01:
         75:ad:03:d9:e1:48:93:1e:de:69:18:80:95:f4:cf:5b:be:70:
         99:2b:eb:54:9c:69:95:64:34:18:59:fd:79:4d:ba:90:58:1c:
         cb:d4:b7:45
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUECSjY5JkT8ps/2Twu9hKm468qLYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjg3NkE5MThEQjU5QUU2NzdCQjFGMDY4QkJCMUVDNkE1
RTBDNjU5NjAeFw0yNDA0MDMxODQ1MzRaFw0yNTA0MDIxODUwMzRaMDMxMTAvBgNV
BAMTKDgyNEZFN0NBMzM0RDU1RDg1M0REMzkyOTUzRkI5NUNFMEZDMDYwNEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHQc/yKznGmZG1rBWA51l7Yp3H
qWIEzVNvADHZ1LiIgZdLi5abVn4jkia/FWFoC+/lrRybqBgv0SOh4ENyBHGBWo3O
v9hRcDaHLJQUB8zjjrJj++FXSxmW0c2qZYHkGYeRKiFZTgi60RWyrXFTi5KkxVMn
tZlCz2pmY9Ww8tvw3Q+tUHaUXO78Wqiy2sqhCId/jVUIBFtzPXnH9k4bfPK54rYY
4TTChcmhYuPRbnq6MCVfv+hxfhvF6bICAIVqd2a/oFPT+gi+tmfSfw06w98mm5Ck
7+mayIHOrJmavfw0Xh0zLZ5jWjjzGK0VEQKYPNYyOYDaQl4wL9eWR3MtXpizAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUgk/nyjNNVdhT3TkpU/uVzg/AYEswHwYDVR0j
BBgwFoAUaHapGNtZrmd7sfBou7Hsal4MZZYwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9jVG5BcWJxTEpUVVlSNUpXanh0SzVnaFVIZ0hxNkJYdDVvckJrRVBBZHI2
LzEvNjg3NkE5MThEQjU5QUU2NzdCQjFGMDY4QkJCMUVDNkE1RTBDNjU5Ni5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS82ODc2QTkxOERCNTlBRTY3N0JC
MUYwNjhCQkIxRUM2QTVFMEM2NTk2LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9j
VG5BcWJxTEpUVVlSNUpXanh0SzVnaFVIZ0hxNkJYdDVvckJrRVBBZHI2LzEvMzIz
MDMwMmUzMjMxMzkyZTMyMzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM3MzAz
ODMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAHI2xQwDQYJKoZIhvcNAQELBQADggEBAFwigELB9uPF
VTMoqb9ErpDcjZK3MikzCBFLg0h05kdWUyP/Mnccqo8xyRmUAgJVOW0/3HH8Z43w
oNNvWIG9UCMboGkm2oCuhiL/fcByftCUd5kt/V7um77GdgnHYzWeGfUBaCOnD46i
K4z0SQsWaiPVeZXYdimdDfriFN5DSQX49HbC79mNihBP0LPYHdUDFL5uvXYY/T7q
rWnGdWD6ThJC0ztSF0utubdhtwDjqIAgi6LcnYQXLWoot2XYHAkkZr7U8H9T8Afh
RfeAJYNqX7gBQfj7qRdVAXWtA9nhSJMe3mkYgJX0z1u+cJkr61ScaZVkNBhZ/XlN
upBYHMvUt0U=
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:20 2024 by rpki-client on console-fra.rpki-client.org