Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/3230302e3231392e32322e302f32342d3234203d3e20323730383131.roa
File:                     3230302e3231392e32322e302f32342d3234203d3e20323730383131.roa (raw, json)
Hash identifier:          zxfAqPCUwmdKKlL/0U3FBOeW46tWfV3CBcm6Sy9M9TM=
Subject key identifier:   63:1A:51:A8:41:C2:0E:73:B0:51:2B:18:0C:D4:30:3B:89:62:1B:D3
Certificate issuer:       /CN=6876A918DB59AE677BB1F068BBB1EC6A5E0C6596
Certificate serial:       086FA9FCC822B2D60BADE3C20EF401A8E913C451
Authority key identifier: 68:76:A9:18:DB:59:AE:67:7B:B1:F0:68:BB:B1:EC:6A:5E:0C:65:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/3230302e3231392e32322e302f32342d3234203d3e20323730383131.roa
Signing time:             Wed 03 Apr 2024 18:50:34 +0000
ROA not before:           Wed 03 Apr 2024 18:45:34 +0000
ROA not after:            Wed 02 Apr 2025 18:50:34 +0000
asID:                     270811
IP address blocks:        200.219.22.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.crl
                          rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:6f:a9:fc:c8:22:b2:d6:0b:ad:e3:c2:0e:f4:01:a8:e9:13:c4:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6876A918DB59AE677BB1F068BBB1EC6A5E0C6596
        Validity
            Not Before: Apr  3 18:45:34 2024 GMT
            Not After : Apr  2 18:50:34 2025 GMT
        Subject: CN=631A51A841C20E73B0512B180CD4303B89621BD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:90:35:fc:d6:c7:8f:a5:ea:3e:ea:ac:f1:52:
                    64:b3:4b:69:d1:71:cb:20:3d:bb:be:31:3c:6e:e5:
                    7b:47:af:03:3c:20:63:2e:c8:12:55:cd:8a:8e:91:
                    34:0c:1f:d7:6d:8a:60:ee:22:c4:11:fe:79:9b:e7:
                    58:0a:31:29:68:66:ad:d7:57:17:6a:8a:21:6d:55:
                    bc:38:0e:61:ad:1d:fa:f9:73:86:f0:ba:98:75:c2:
                    e7:3f:f6:f3:13:47:fa:94:a1:66:fc:75:c3:05:37:
                    1b:60:f7:68:66:b7:5c:43:07:d1:e4:2f:f0:94:cf:
                    6b:5f:47:ee:1b:a6:24:3e:00:82:4b:56:01:e8:5f:
                    e0:3e:22:ac:b3:da:9d:e7:59:b2:f6:ad:57:27:64:
                    95:ee:c4:63:c8:a3:60:93:09:47:63:b6:7a:f6:0e:
                    1f:21:58:b3:7d:9b:89:7b:ef:50:a4:f3:f9:9b:4c:
                    cd:ca:07:8c:cd:12:71:d2:c0:e1:0d:aa:1d:bf:f8:
                    41:49:e6:5e:93:dc:21:51:23:69:ea:70:85:db:59:
                    da:1d:b8:53:80:e2:c4:d5:13:30:ae:61:d0:62:1f:
                    30:08:4e:22:12:95:ef:b9:1f:be:28:fa:86:ca:7c:
                    4c:b8:12:da:c2:b1:f9:68:c5:ec:2f:49:22:13:13:
                    a1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:1A:51:A8:41:C2:0E:73:B0:51:2B:18:0C:D4:30:3B:89:62:1B:D3
            X509v3 Authority Key Identifier:
                keyid:68:76:A9:18:DB:59:AE:67:7B:B1:F0:68:BB:B1:EC:6A:5E:0C:65:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/3230302e3231392e32322e302f32342d3234203d3e20323730383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:d6:49:21:ba:36:5a:ec:f5:4c:8f:f4:6a:cc:9c:a7:46:91:
         0d:f0:0c:e6:6f:63:90:33:4b:98:0c:1e:c2:22:0c:a3:52:e8:
         b0:fb:7f:e5:5d:4c:27:f5:45:e9:ed:ac:f6:3f:96:d1:2d:d1:
         fa:ff:c8:0f:9e:72:cc:d1:8b:1d:80:a8:d3:fd:b4:e4:d3:a6:
         1b:1c:9e:e3:9f:c3:86:0d:cc:7f:00:47:c7:fe:f4:f1:45:41:
         c5:6c:89:8c:40:79:2d:a7:f1:12:ba:2c:a5:ee:c8:a6:9b:c4:
         bb:1d:65:fa:1f:c2:b4:46:d2:04:52:d6:53:37:e9:57:95:fc:
         f8:d3:29:fc:93:27:b9:2f:df:9f:9c:aa:21:49:d0:5b:a1:24:
         1e:6d:a4:d5:b0:79:70:c6:ed:26:67:00:81:e8:93:59:52:69:
         04:d6:ee:10:8b:1a:71:ac:47:9b:30:6f:4c:74:44:1c:99:57:
         83:fb:d1:ba:30:0d:b9:20:ac:35:42:b6:8b:a3:91:0f:f8:19:
         d3:ea:f8:cd:0a:6a:55:5b:f9:4c:70:1f:9e:88:1a:af:25:a9:
         68:20:76:19:f4:80:4a:82:48:e5:ca:9b:f6:82:ac:93:a7:5a:
         03:08:f4:40:01:3f:f3:29:71:cf:62:31:98:c4:55:3a:35:c5:
         ff:60:8a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:20 2024 by rpki-client on console-fra.rpki-client.org