Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3230302e33332e3133312e302f32342d3234203d3e20323633323633.roa
File:                     3230302e33332e3133312e302f32342d3234203d3e20323633323633.roa (raw, json)
Hash identifier:          u97q1XIIPxGL1pRdytoc32tIv3vmLI/RfY1QyFiWY5I=
Subject key identifier:   47:39:24:B2:1E:BC:70:8A:94:77:05:02:20:FB:5E:00:94:C3:DC:06
Certificate issuer:       /CN=CE2D1BC8B26735E9068E8833320A9FDEB04E69CD
Certificate serial:       4149E8E63AD2C5564D6EDA64AC7A027B13ACE868
Authority key identifier: CE:2D:1B:C8:B2:67:35:E9:06:8E:88:33:32:0A:9F:DE:B0:4E:69:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3230302e33332e3133312e302f32342d3234203d3e20323633323633.roa
Signing time:             Thu 04 Apr 2024 07:28:57 +0000
ROA not before:           Thu 04 Apr 2024 07:23:57 +0000
ROA not after:            Thu 03 Apr 2025 07:28:57 +0000
asID:                     263263
IP address blocks:        200.33.131.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.crl
                          rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:49:e8:e6:3a:d2:c5:56:4d:6e:da:64:ac:7a:02:7b:13:ac:e8:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE2D1BC8B26735E9068E8833320A9FDEB04E69CD
        Validity
            Not Before: Apr  4 07:23:57 2024 GMT
            Not After : Apr  3 07:28:57 2025 GMT
        Subject: CN=473924B21EBC708A9477050220FB5E0094C3DC06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a2:5a:25:3f:3f:4b:e3:ca:48:3d:40:a9:0a:
                    ce:96:0e:ad:93:13:c2:b2:29:7e:8b:2e:6b:6f:a5:
                    6a:af:e9:ee:82:0c:05:5e:c4:dc:80:8c:1d:b2:ee:
                    fa:81:e4:f3:b5:cd:58:f5:0c:27:a1:c1:33:d9:d9:
                    f1:ad:7f:6b:86:8a:b1:f1:61:ef:53:5d:6f:e3:6d:
                    18:23:5b:65:f5:cf:17:0a:e0:47:29:91:6b:35:a0:
                    e9:71:75:2b:5c:3e:38:0b:85:76:00:dd:3d:27:80:
                    70:14:84:f3:19:29:3f:c1:25:f9:2d:2d:4b:cd:99:
                    76:c5:75:75:3a:c9:67:ed:11:a6:c9:7a:e8:6d:4a:
                    02:32:85:d1:e2:5f:56:54:00:7b:5c:d5:ba:16:e2:
                    cb:6e:c4:47:a6:15:a9:fd:f5:7a:c9:27:a7:f0:9d:
                    45:e9:02:53:7f:20:6c:de:7b:7b:0d:65:3f:4d:b7:
                    b7:f3:dc:14:fb:cd:3c:5f:17:86:b7:a6:bc:7c:1c:
                    f4:51:36:21:c4:a8:1b:2d:0f:dc:be:0a:42:74:88:
                    ac:4b:09:d7:ad:a5:0c:14:64:ba:a5:fa:55:87:4b:
                    5a:d1:93:bf:b1:2a:36:57:1b:da:3b:d3:58:70:43:
                    6a:6b:9c:79:a0:b4:a9:86:4c:d7:c5:b3:9a:8b:9b:
                    bd:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:39:24:B2:1E:BC:70:8A:94:77:05:02:20:FB:5E:00:94:C3:DC:06
            X509v3 Authority Key Identifier:
                keyid:CE:2D:1B:C8:B2:67:35:E9:06:8E:88:33:32:0A:9F:DE:B0:4E:69:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3230302e33332e3133312e302f32342d3234203d3e20323633323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:60:4a:25:79:42:47:f4:27:60:a2:e7:ee:bf:77:cc:5f:e6:
         e0:a8:bc:8d:07:c3:0c:b0:cc:5a:a7:b4:f3:91:12:4d:7b:83:
         49:56:bf:bc:a3:19:03:36:d5:3f:18:11:46:34:5f:b0:ef:5d:
         fe:d3:17:19:07:69:14:32:2d:73:3b:7d:f8:5e:9a:ec:92:78:
         a1:01:aa:b9:67:a3:3a:4a:aa:47:8c:98:9c:6c:2e:1f:1d:3d:
         34:ed:23:a9:ab:31:78:d4:fc:d5:d9:d5:b0:4d:11:2e:99:e4:
         f2:1c:a2:d7:02:ff:a5:50:93:01:ac:09:c7:07:8a:69:99:2e:
         90:f1:35:d5:26:97:c0:13:76:1f:7b:50:06:b1:7c:41:94:ae:
         cb:7c:cf:ff:6a:9d:3f:3d:9a:32:cd:4b:8e:5d:e1:bc:17:cb:
         96:76:45:b2:6c:17:d9:4a:7a:8e:76:f3:ee:23:6a:54:af:2f:
         12:4f:0a:5e:0e:14:60:73:52:ab:10:eb:fd:1b:80:2b:3b:a9:
         44:a9:ec:08:81:c0:54:6b:55:0d:f5:10:e4:14:18:ae:0b:b5:
         ad:28:05:55:ab:54:80:00:e7:23:67:be:e8:a6:b5:b7:b7:4a:
         b8:e1:19:d5:de:a8:2a:5b:17:a2:cd:a8:35:2a:f1:83:df:52:
         c6:d7:4f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:31 2024 by rpki-client on console-fra.rpki-client.org