Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hgGAdCbS3u5VtXfhrv6omPLXyrGYAA3aketkL2ZZiy4/1/3230302e3139362e3230312e302f32342d3234203d3e20333936393832.roa
File:                     3230302e3139362e3230312e302f32342d3234203d3e20333936393832.roa (raw, json)
Hash identifier:          WLKH0XgTRDcnQMMwkA3tbkchBzts4zRzhYJ0T6r3wQg=
Subject key identifier:   A2:AE:C5:F0:55:1A:29:73:F4:97:72:37:48:75:4A:1A:CE:E7:D7:17
Certificate issuer:       /CN=591A5E28538FC2E6A42ED311941B9D128D78D596
Certificate serial:       7A0EE6FF1E13AA64999D81552E7C062AC1DC55DF
Authority key identifier: 59:1A:5E:28:53:8F:C2:E6:A4:2E:D3:11:94:1B:9D:12:8D:78:D5:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/591A5E28538FC2E6A42ED311941B9D128D78D596.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hgGAdCbS3u5VtXfhrv6omPLXyrGYAA3aketkL2ZZiy4/1/3230302e3139362e3230312e302f32342d3234203d3e20333936393832.roa
Signing time:             Thu 04 Apr 2024 18:19:05 +0000
ROA not before:           Thu 04 Apr 2024 18:14:05 +0000
ROA not after:            Thu 03 Apr 2025 18:19:05 +0000
asID:                     396982
IP address blocks:        200.196.201.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8hgGAdCbS3u5VtXfhrv6omPLXyrGYAA3aketkL2ZZiy4/1/591A5E28538FC2E6A42ED311941B9D128D78D596.crl
                          rsync://rpki-repo.registro.br/repo/8hgGAdCbS3u5VtXfhrv6omPLXyrGYAA3aketkL2ZZiy4/1/591A5E28538FC2E6A42ED311941B9D128D78D596.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/591A5E28538FC2E6A42ED311941B9D128D78D596.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 16:51:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:0e:e6:ff:1e:13:aa:64:99:9d:81:55:2e:7c:06:2a:c1:dc:55:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=591A5E28538FC2E6A42ED311941B9D128D78D596
        Validity
            Not Before: Apr  4 18:14:05 2024 GMT
            Not After : Apr  3 18:19:05 2025 GMT
        Subject: CN=A2AEC5F0551A2973F497723748754A1ACEE7D717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:33:4c:61:ca:57:c9:50:04:2a:55:91:05:1f:
                    82:41:05:7e:64:8e:98:f7:77:37:2a:d1:c4:2e:d6:
                    ee:d5:b2:4b:7c:01:de:9c:96:17:8e:c4:c7:d1:91:
                    53:0d:af:d0:74:23:99:b7:e0:7e:25:fb:34:52:12:
                    cf:82:05:4c:13:78:93:e5:c0:62:36:3a:f4:87:19:
                    c2:69:c1:f5:56:0f:69:fe:1c:77:32:d1:c9:63:2e:
                    1f:ba:a5:a3:8e:c8:8a:91:93:8d:0b:84:5f:71:8c:
                    f6:dd:29:db:d2:5f:dd:8f:53:04:c8:46:1f:b2:55:
                    12:bb:d9:8a:2e:06:d6:d7:f6:67:8d:e2:db:69:1d:
                    f0:ce:71:5c:e2:a8:fa:2b:7a:fb:34:32:12:e4:21:
                    75:f4:63:89:5c:e3:38:1a:05:66:b8:21:ab:5f:a2:
                    62:1d:91:5d:e2:5d:13:19:1a:19:29:cf:5f:f9:f3:
                    16:22:16:af:14:ea:3b:8b:4f:56:0a:1e:20:67:7a:
                    bb:62:47:94:21:38:f8:49:ac:09:e0:b9:3d:75:eb:
                    eb:be:8a:62:6b:28:99:c5:2c:1c:18:16:d2:b7:93:
                    09:3e:22:b6:d4:2f:82:be:da:82:fe:e2:2f:e3:d8:
                    bd:6c:7d:f4:19:de:65:bb:f3:10:30:d2:de:e8:d6:
                    cd:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:AE:C5:F0:55:1A:29:73:F4:97:72:37:48:75:4A:1A:CE:E7:D7:17
            X509v3 Authority Key Identifier:
                keyid:59:1A:5E:28:53:8F:C2:E6:A4:2E:D3:11:94:1B:9D:12:8D:78:D5:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hgGAdCbS3u5VtXfhrv6omPLXyrGYAA3aketkL2ZZiy4/1/591A5E28538FC2E6A42ED311941B9D128D78D596.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/591A5E28538FC2E6A42ED311941B9D128D78D596.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hgGAdCbS3u5VtXfhrv6omPLXyrGYAA3aketkL2ZZiy4/1/3230302e3139362e3230312e302f32342d3234203d3e20333936393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.196.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:b1:df:ac:c6:80:a8:52:cc:ee:97:2e:e1:22:47:ea:55:53:
         a0:b3:de:6d:56:df:07:8e:fa:b0:43:0c:cf:f0:df:d4:ac:55:
         0d:93:3d:48:78:7f:fd:2f:4f:75:dc:25:31:91:fe:6d:73:d6:
         da:8c:1a:c8:17:85:e6:68:2f:81:d6:48:65:49:ed:b5:8a:ae:
         fa:d9:b4:24:b1:ca:ee:4f:a0:ee:e1:f8:53:8e:bc:6b:28:d5:
         ad:2e:6b:0d:a3:6a:8b:39:bd:20:0b:2e:32:7f:c0:f6:91:d8:
         a2:df:4b:33:ab:48:80:e0:33:e2:48:42:d3:a5:0f:46:b2:50:
         34:b4:b4:c3:d4:a1:47:37:c3:20:b0:09:25:f9:da:6b:60:b8:
         37:cd:a4:9f:0a:ce:eb:1b:d4:bd:ce:ca:b8:5f:9f:98:8b:0f:
         41:2b:7e:2b:94:28:b9:8f:bd:d9:9c:0c:4b:7b:c7:ca:a4:23:
         69:c2:3a:11:92:55:17:14:02:37:56:34:21:ff:84:95:67:87:
         9e:fc:a7:98:56:21:eb:ee:97:1b:69:06:fb:2c:db:f9:e8:30:
         a4:53:ac:19:ba:c8:1f:e3:44:ef:a7:cb:79:fb:4e:ae:a8:d6:
         ff:e5:75:5c:a0:88:c2:96:4a:45:51:57:7d:84:22:12:95:88:
         73:13:de:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 18:33:30 2024 by rpki-client on console-fra.rpki-client.org