Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/3230302e3231392e32312e302f32342d3234203d3e20323730383131.roa
File:                     3230302e3231392e32312e302f32342d3234203d3e20323730383131.roa (raw, json)
Hash identifier:          nOTM1gqfyoSruPmHAXyf2bQ5TK2a9mtZ6X9sqGWGYS0=
Subject key identifier:   10:D2:BB:D8:E1:99:8F:AB:32:3C:7D:D5:81:EC:70:48:50:DA:E3:5C
Certificate issuer:       /CN=6876A918DB59AE677BB1F068BBB1EC6A5E0C6596
Certificate serial:       0E8CD910C841C2920095A33CDD1EDF02380F9CC0
Authority key identifier: 68:76:A9:18:DB:59:AE:67:7B:B1:F0:68:BB:B1:EC:6A:5E:0C:65:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/3230302e3231392e32312e302f32342d3234203d3e20323730383131.roa
Signing time:             Wed 03 Apr 2024 18:50:34 +0000
ROA not before:           Wed 03 Apr 2024 18:45:34 +0000
ROA not after:            Wed 02 Apr 2025 18:50:34 +0000
asID:                     270811
IP address blocks:        200.219.21.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.crl
                          rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:8c:d9:10:c8:41:c2:92:00:95:a3:3c:dd:1e:df:02:38:0f:9c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6876A918DB59AE677BB1F068BBB1EC6A5E0C6596
        Validity
            Not Before: Apr  3 18:45:34 2024 GMT
            Not After : Apr  2 18:50:34 2025 GMT
        Subject: CN=10D2BBD8E1998FAB323C7DD581EC704850DAE35C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8f:e9:08:77:7a:b6:93:60:7c:ae:1d:fc:1f:
                    bf:3b:ed:15:b6:48:e3:25:f2:6d:3b:05:9e:c9:3f:
                    9c:68:a9:4d:73:d1:23:c2:3b:af:3e:63:1c:3e:99:
                    67:b7:9c:27:73:6b:92:4a:75:c4:b0:c5:01:08:22:
                    8e:99:a1:ec:5d:bb:8d:47:cd:c2:08:b8:73:95:fa:
                    13:ee:1c:64:c6:76:15:66:09:d7:24:50:6d:a7:e7:
                    0e:b4:59:65:a4:27:a8:c6:e4:bc:3e:29:37:5b:29:
                    4f:77:a2:57:e7:4f:07:b0:30:a4:68:84:ff:a7:da:
                    fd:54:6d:0a:9b:dd:ab:46:c7:d8:21:2f:42:2e:f3:
                    be:ed:f8:33:7a:2b:c5:a6:f5:74:ca:48:e7:ff:c8:
                    f1:ec:61:14:ee:e3:f2:b9:ed:ce:eb:67:1d:7e:f5:
                    c7:0f:71:ba:38:ae:8f:31:01:24:58:47:3e:da:97:
                    a2:80:4f:79:a5:e1:ea:5c:d7:25:59:b9:1b:a3:7d:
                    58:71:b0:a3:98:10:ad:53:11:d4:99:14:e4:c4:16:
                    8b:ec:bc:36:63:56:30:21:11:58:5d:fb:0a:93:96:
                    38:2d:b7:d2:8e:dd:78:b0:60:31:e3:4d:17:da:f0:
                    a0:e3:cb:a8:03:c1:b4:3e:69:c1:bb:56:bb:fd:8c:
                    72:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:D2:BB:D8:E1:99:8F:AB:32:3C:7D:D5:81:EC:70:48:50:DA:E3:5C
            X509v3 Authority Key Identifier:
                keyid:68:76:A9:18:DB:59:AE:67:7B:B1:F0:68:BB:B1:EC:6A:5E:0C:65:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/3230302e3231392e32312e302f32342d3234203d3e20323730383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:0c:a9:58:b8:60:cc:89:3e:13:a7:09:47:3f:71:a5:84:4c:
         cb:fd:7e:bd:4c:62:9b:ed:27:2d:af:f4:80:c4:33:ff:ae:03:
         74:5a:2b:7b:43:91:71:ff:36:0c:0f:bb:80:31:e3:ef:34:79:
         94:da:53:b4:1d:c9:86:13:47:a9:5e:3a:b0:c0:83:c1:44:22:
         7b:59:59:46:61:3d:00:64:f2:be:9a:3f:94:3c:4f:af:04:6d:
         78:f8:fc:8f:8a:41:2b:d7:96:27:99:f6:29:c4:fe:fc:e6:09:
         5e:f4:41:cc:e5:f9:0a:89:4a:8d:c6:30:ab:04:07:91:7f:fe:
         c5:ba:7a:29:a2:5c:e0:f4:cf:6f:a6:5f:58:33:75:da:a3:1e:
         09:db:dc:1a:58:87:c9:f3:9a:a6:f3:bc:c8:ab:5e:17:29:c1:
         ba:bf:a1:b2:90:4d:0a:ed:21:1c:39:35:fc:59:bc:62:b9:48:
         ae:f1:14:02:a2:96:c4:64:d0:f9:36:33:77:b2:f1:90:2f:65:
         16:19:60:c6:d8:94:5a:f7:a8:97:8d:a0:18:b9:e4:8f:72:59:
         a1:5f:19:40:d2:72:4c:97:ff:f9:a3:3a:e1:d7:a6:49:a9:a8:
         60:5a:0b:fe:9a:2a:df:02:5a:46:e6:6b:e5:36:da:01:d8:0e:
         26:18:b3:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:41 2024 by rpki-client on console-ams.rpki-client.org