Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/3230302e3231392e32302e302f32342d3234203d3e20323730383131.roa
File:                     3230302e3231392e32302e302f32342d3234203d3e20323730383131.roa (raw, json)
Hash identifier:          6uJY26AscMibbBqB0q+z6wOCPQvnzr4LnXh0TJpie+k=
Subject key identifier:   3A:D6:7C:1E:C8:4C:81:6E:28:4F:E8:67:75:74:2F:7D:2A:E3:FA:8A
Certificate issuer:       /CN=6876A918DB59AE677BB1F068BBB1EC6A5E0C6596
Certificate serial:       48A016A6B68EC5062AEDFC5FF047695503AF7287
Authority key identifier: 68:76:A9:18:DB:59:AE:67:7B:B1:F0:68:BB:B1:EC:6A:5E:0C:65:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/3230302e3231392e32302e302f32342d3234203d3e20323730383131.roa
Signing time:             Wed 03 Apr 2024 18:50:34 +0000
ROA not before:           Wed 03 Apr 2024 18:45:34 +0000
ROA not after:            Wed 02 Apr 2025 18:50:34 +0000
asID:                     270811
IP address blocks:        200.219.20.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.crl
                          rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:a0:16:a6:b6:8e:c5:06:2a:ed:fc:5f:f0:47:69:55:03:af:72:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6876A918DB59AE677BB1F068BBB1EC6A5E0C6596
        Validity
            Not Before: Apr  3 18:45:34 2024 GMT
            Not After : Apr  2 18:50:34 2025 GMT
        Subject: CN=3AD67C1EC84C816E284FE86775742F7D2AE3FA8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6f:90:2f:c4:99:9b:d1:68:1b:49:23:c5:4c:
                    cc:a2:df:d5:bb:49:24:ae:f4:5c:3f:05:ff:f0:d6:
                    a6:6b:1f:ea:14:c6:78:49:80:62:90:a7:73:e9:1c:
                    49:79:af:0f:f5:7b:76:28:1b:40:fc:56:74:89:9e:
                    28:a3:bb:c3:63:11:94:b0:14:06:de:16:bb:23:99:
                    72:25:ed:ca:17:17:cb:40:a4:6a:39:eb:2d:15:07:
                    19:56:b6:65:4e:ea:87:de:57:5f:3a:ff:b7:f8:da:
                    38:7e:c4:52:60:38:9d:02:18:71:0a:82:dd:a8:76:
                    cc:1d:6c:97:78:e7:b1:00:f0:a0:da:1d:96:42:88:
                    3a:e8:3e:f8:4a:13:ac:3f:58:97:49:8f:32:12:97:
                    8f:2f:68:c3:90:17:15:ec:61:3e:73:08:91:ed:ad:
                    98:de:5a:84:62:70:de:60:06:e0:76:62:1f:74:d2:
                    13:0c:e3:83:29:39:e2:fa:8d:0f:d4:1d:fb:46:17:
                    39:09:89:35:70:6e:ce:73:60:6d:76:b1:ba:c3:28:
                    4d:e0:85:53:62:04:ab:71:50:20:c6:d0:19:ef:64:
                    66:11:54:45:d9:a9:e8:0d:ec:1f:5d:66:96:4b:9e:
                    9c:b3:42:4c:3a:d8:a1:76:4a:6b:ca:42:19:ff:c5:
                    ed:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:D6:7C:1E:C8:4C:81:6E:28:4F:E8:67:75:74:2F:7D:2A:E3:FA:8A
            X509v3 Authority Key Identifier:
                keyid:68:76:A9:18:DB:59:AE:67:7B:B1:F0:68:BB:B1:EC:6A:5E:0C:65:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/3230302e3231392e32302e302f32342d3234203d3e20323730383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:17:7b:89:d5:dc:b1:49:d2:53:e0:d3:2b:10:88:9c:05:19:
         70:4c:5c:00:12:8a:fe:ce:41:c8:71:3d:66:0f:1e:d3:28:66:
         f4:96:ba:e7:e2:07:af:bb:b1:42:fe:1d:f2:09:99:88:c3:ef:
         11:8c:2d:c4:c7:39:b4:df:ec:0e:d3:b7:cc:a6:1f:8c:90:e5:
         79:e0:c3:64:8c:24:d3:30:21:80:60:07:34:7a:7f:a7:6b:79:
         7c:16:b8:c0:66:70:76:c9:dd:9d:e0:10:d0:ef:61:24:e7:2d:
         f6:27:bd:84:aa:d1:ea:cd:62:e7:cd:f0:e1:4a:db:b9:ee:e3:
         fc:97:d3:de:00:1e:d4:e9:8f:ae:e0:6e:38:02:7a:50:26:94:
         dd:aa:c8:ae:a5:31:36:0d:90:cc:ac:28:b9:61:42:3a:dc:b2:
         a2:fd:38:24:c7:82:b5:19:d3:7d:a8:ca:89:df:fc:09:19:bb:
         43:f7:94:10:88:f4:09:60:2f:ca:e1:5b:0f:ee:ff:52:bc:43:
         eb:35:b1:e1:a3:99:1a:76:e0:7a:1f:ad:9d:b3:51:c3:22:18:
         bf:2a:5d:fa:58:8a:15:2a:6d:56:f6:b0:18:06:88:a8:21:46:
         8a:24:a5:03:23:1a:06:98:c4:07:8e:09:8a:4f:b1:8b:dc:64:
         e0:0f:50:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:41 2024 by rpki-client on console-ams.rpki-client.org