Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/3132382e3230312e3231302e302f32342d3234203d3e20323634353235.roa
File:                     3132382e3230312e3231302e302f32342d3234203d3e20323634353235.roa (raw, json)
Hash identifier:          AogsBxS7rAvcsITR6sP/r1L4+o3EoYUZTjbNE/S+qeM=
Subject key identifier:   29:A7:97:7A:7C:57:61:CC:AA:8B:6B:71:98:15:FE:57:21:C1:FB:DD
Certificate issuer:       /CN=B9DB8EACB9F78A564A559454E357E1E31344B1C8
Certificate serial:       3ED7259443BAE720192F116E254E3D66FA8D574C
Authority key identifier: B9:DB:8E:AC:B9:F7:8A:56:4A:55:94:54:E3:57:E1:E3:13:44:B1:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/3132382e3230312e3231302e302f32342d3234203d3e20323634353235.roa
Signing time:             Tue 30 Apr 2024 21:01:19 +0000
ROA not before:           Tue 30 Apr 2024 20:56:19 +0000
ROA not after:            Tue 29 Apr 2025 21:01:19 +0000
asID:                     264525
IP address blocks:        128.201.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.crl
                          rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:d7:25:94:43:ba:e7:20:19:2f:11:6e:25:4e:3d:66:fa:8d:57:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB8EACB9F78A564A559454E357E1E31344B1C8
        Validity
            Not Before: Apr 30 20:56:19 2024 GMT
            Not After : Apr 29 21:01:19 2025 GMT
        Subject: CN=29A7977A7C5761CCAA8B6B719815FE5721C1FBDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6a:a3:c8:95:14:8a:d2:80:40:29:e6:f9:6b:
                    b2:f1:0d:13:98:29:2a:6a:80:75:08:4d:3a:89:ca:
                    ec:53:c0:62:b7:2f:cc:3b:b7:16:6f:fe:c1:ac:e3:
                    fe:1e:71:ee:5a:c1:8a:e8:6a:38:76:2a:41:bd:8b:
                    d4:dd:62:0e:13:dd:dc:12:8a:e0:8e:16:b7:4d:9c:
                    7f:e3:71:1d:93:ea:db:18:30:40:c0:65:cb:0a:d5:
                    ca:b6:b8:e2:c0:d1:88:58:9c:b8:f1:98:c8:2f:08:
                    aa:1e:d7:03:61:a8:c8:1b:f3:d9:13:96:6a:f9:98:
                    40:a7:1e:16:94:5f:1a:7c:f8:60:71:dc:92:43:39:
                    45:58:4a:36:3f:1c:88:69:2a:32:a0:37:4e:9a:ff:
                    33:25:ea:ee:79:2d:78:d2:1b:c1:4a:f7:d1:dc:7e:
                    08:2b:82:de:1f:22:57:0b:55:b1:e4:d4:d1:de:c8:
                    a5:98:72:74:17:8a:7d:10:4c:64:08:09:91:71:06:
                    a3:c9:bd:b5:81:a6:39:61:51:54:09:2f:92:0d:ee:
                    26:81:17:3b:2c:d2:ff:53:4c:21:65:67:d8:70:1c:
                    45:68:09:cd:56:78:85:fe:23:e1:11:40:2d:c7:c9:
                    3a:00:df:0b:f5:8a:f9:9b:31:5f:02:2d:5d:57:09:
                    b5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:A7:97:7A:7C:57:61:CC:AA:8B:6B:71:98:15:FE:57:21:C1:FB:DD
            X509v3 Authority Key Identifier:
                keyid:B9:DB:8E:AC:B9:F7:8A:56:4A:55:94:54:E3:57:E1:E3:13:44:B1:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/3132382e3230312e3231302e302f32342d3234203d3e20323634353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:28:e6:1d:0e:c4:99:7b:d6:a5:68:0c:cb:56:3b:a7:cd:ee:
         7a:4e:51:b1:b5:f1:75:ab:79:7f:e5:8c:8e:a2:c4:01:c8:05:
         75:a3:d8:ad:5a:0c:a0:a3:2b:ef:5c:98:85:d7:8b:97:c2:97:
         db:52:00:f8:71:a7:a3:e4:cc:48:a9:56:bb:06:5e:2a:a8:67:
         09:98:9b:fb:b8:2a:19:f3:fa:a0:cb:76:cc:aa:3f:4c:61:27:
         e6:3a:35:a0:fd:98:72:ca:ed:37:14:af:36:a4:f2:53:d9:66:
         e5:43:4f:3f:10:a3:2d:4c:4d:68:04:c5:ac:3c:97:c5:d4:b2:
         d9:b3:cb:4f:ff:cb:7e:bc:6d:17:5c:f5:32:c9:73:b0:e4:1e:
         98:f3:93:04:d1:45:92:1e:2f:1f:25:2e:52:b1:1a:50:41:7f:
         ba:3a:c8:57:5e:7d:15:ae:64:bf:de:41:e9:e7:46:13:dd:25:
         26:28:94:de:a7:72:df:bd:e6:6d:3b:1c:68:46:0a:ad:96:2b:
         f2:4a:57:6b:f0:e8:21:df:6e:c3:9c:0b:a4:21:69:29:92:5d:
         be:72:b0:14:de:09:48:64:5e:14:06:d7:cd:61:e9:a3:68:38:
         ca:e3:21:fd:8d:e1:c7:bb:95:c8:b0:f6:ad:34:e3:c0:3c:f4:
         fa:b3:dc:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:28 2024 by rpki-client on console-ams.rpki-client.org