Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3230302e3232392e38382e302f32322d3234203d3e203533313538.roa
File:                     3230302e3232392e38382e302f32322d3234203d3e203533313538.roa (raw, json)
Hash identifier:          2SZ2FV6EXfsEXoQZVnoDAEAsg7M1xB2Unjvw7abk61k=
Subject key identifier:   FA:08:9E:0D:06:E5:DB:0B:FE:80:F2:2E:8D:FB:D0:4F:2F:D3:80:11
Certificate issuer:       /CN=BC82BE57E4F783F1814FC9D4B6B03E6937617A47
Certificate serial:       06A88DA5B3E07C4F439A2177D743678837EF0B67
Authority key identifier: BC:82:BE:57:E4:F7:83:F1:81:4F:C9:D4:B6:B0:3E:69:37:61:7A:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC82BE57E4F783F1814FC9D4B6B03E6937617A47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3230302e3232392e38382e302f32322d3234203d3e203533313538.roa
Signing time:             Mon 27 May 2024 14:41:31 +0000
ROA not before:           Mon 27 May 2024 14:36:31 +0000
ROA not after:            Mon 26 May 2025 14:41:31 +0000
asID:                     53158
IP address blocks:        200.229.88.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/BC82BE57E4F783F1814FC9D4B6B03E6937617A47.crl
                          rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/BC82BE57E4F783F1814FC9D4B6B03E6937617A47.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC82BE57E4F783F1814FC9D4B6B03E6937617A47.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:a8:8d:a5:b3:e0:7c:4f:43:9a:21:77:d7:43:67:88:37:ef:0b:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC82BE57E4F783F1814FC9D4B6B03E6937617A47
        Validity
            Not Before: May 27 14:36:31 2024 GMT
            Not After : May 26 14:41:31 2025 GMT
        Subject: CN=FA089E0D06E5DB0BFE80F22E8DFBD04F2FD38011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6a:f1:67:d7:81:c0:e3:30:16:b4:6d:be:db:
                    30:a0:44:f4:58:f1:04:3f:44:56:03:d8:bb:73:60:
                    84:d3:76:f3:39:77:54:9c:76:4e:03:2a:70:59:ff:
                    17:4c:73:f5:9e:69:2e:df:4e:71:5a:e4:40:4b:d3:
                    c3:8b:3f:8c:dc:da:69:30:c6:a3:a4:b1:f1:62:dc:
                    73:f9:89:d6:cc:c1:99:00:2c:28:28:8a:0d:18:ab:
                    dc:fa:ca:d9:75:bc:71:0e:64:de:58:33:54:9e:6b:
                    fa:d3:5c:db:4d:19:0a:26:ae:8c:55:0d:b1:fc:eb:
                    2b:1f:e7:00:3f:e6:39:49:04:e9:d4:58:14:95:01:
                    48:3b:28:d7:a5:49:a4:41:79:04:25:d8:5e:0d:2b:
                    fb:78:03:71:3c:4b:55:37:52:08:e2:2c:27:91:96:
                    89:d7:9f:e4:24:6d:eb:a2:25:1e:5d:8f:07:96:71:
                    72:2d:d1:be:99:4d:46:44:9a:64:a0:dc:ed:3d:ba:
                    ce:43:36:d7:53:db:26:c8:62:2e:8a:7f:87:23:f8:
                    03:64:46:38:12:a6:0a:2b:fe:cd:0a:35:7c:ed:67:
                    f6:21:e2:10:cd:f2:73:7d:ab:f4:04:5b:b2:24:f4:
                    5f:37:4e:38:6d:a0:48:9e:08:01:e9:c8:b9:0b:de:
                    88:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:08:9E:0D:06:E5:DB:0B:FE:80:F2:2E:8D:FB:D0:4F:2F:D3:80:11
            X509v3 Authority Key Identifier:
                keyid:BC:82:BE:57:E4:F7:83:F1:81:4F:C9:D4:B6:B0:3E:69:37:61:7A:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/BC82BE57E4F783F1814FC9D4B6B03E6937617A47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC82BE57E4F783F1814FC9D4B6B03E6937617A47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3230302e3232392e38382e302f32322d3234203d3e203533313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:22:7a:a5:a7:bc:1c:b6:77:b2:dc:32:f4:69:50:e4:0b:07:
         4c:f8:bb:9e:de:40:c3:c3:e4:1e:d4:7c:12:16:10:7b:c3:ff:
         01:1f:52:7d:1d:21:ba:87:76:cf:a3:d3:c0:a5:53:53:9c:e1:
         e9:5a:e2:4a:38:8e:5d:78:ca:36:05:a6:a0:71:df:53:17:3d:
         83:f2:ab:5f:e8:56:ec:91:f8:e0:14:da:a8:ff:ff:db:4a:66:
         3f:41:93:ee:e7:28:4e:96:f8:17:e1:be:7a:65:a1:96:c0:f4:
         3f:82:90:18:a2:5a:bf:70:87:dd:61:16:3f:1d:e6:28:af:ec:
         86:f6:5a:e8:b5:f3:b7:8f:d0:cf:84:0b:5d:39:1a:c1:86:ad:
         74:49:ae:d8:e4:d9:89:92:11:ab:bf:f1:94:6b:6a:c8:3d:7f:
         17:23:15:6b:77:ba:51:74:31:53:2e:bf:74:6f:3e:7c:8e:2d:
         5b:96:15:95:fd:29:1d:de:6f:7c:23:21:6d:36:02:7a:c4:b4:
         fc:13:65:3b:96:53:75:02:08:7d:9a:5c:c5:a5:07:2f:bf:85:
         2f:02:01:56:24:3c:72:fd:db:71:bc:c6:47:97:34:40:d0:42:
         f8:a8:fb:bc:57:7d:63:48:7a:3d:18:b8:20:77:8d:8a:c5:3e:
         8e:29:b9:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:03:01 2024 by rpki-client on console-fra.rpki-client.org