Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3230302e33332e3133322e302f32342d3234203d3e20323633323633.roa
File:                     3230302e33332e3133322e302f32342d3234203d3e20323633323633.roa (raw, json)
Hash identifier:          dZGnss2dKJOdkeRN28vqtwvwM5rEDY75NF3EQTgccG4=
Subject key identifier:   6B:EC:0B:B9:CC:7A:6A:EA:CD:2B:55:63:F3:AD:7A:31:F4:F5:32:60
Certificate issuer:       /CN=CE2D1BC8B26735E9068E8833320A9FDEB04E69CD
Certificate serial:       5B29D4FC17B845C5D1B1F2D77B7D5C360FAEBCD1
Authority key identifier: CE:2D:1B:C8:B2:67:35:E9:06:8E:88:33:32:0A:9F:DE:B0:4E:69:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3230302e33332e3133322e302f32342d3234203d3e20323633323633.roa
Signing time:             Thu 04 Apr 2024 07:28:54 +0000
ROA not before:           Thu 04 Apr 2024 07:23:54 +0000
ROA not after:            Thu 03 Apr 2025 07:28:54 +0000
asID:                     263263
IP address blocks:        200.33.132.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.crl
                          rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:29:d4:fc:17:b8:45:c5:d1:b1:f2:d7:7b:7d:5c:36:0f:ae:bc:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE2D1BC8B26735E9068E8833320A9FDEB04E69CD
        Validity
            Not Before: Apr  4 07:23:54 2024 GMT
            Not After : Apr  3 07:28:54 2025 GMT
        Subject: CN=6BEC0BB9CC7A6AEACD2B5563F3AD7A31F4F53260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b8:fd:c9:33:03:57:01:fa:4a:9d:f1:f4:4a:
                    d8:36:b2:d4:d1:df:ef:fe:46:15:14:7c:df:62:52:
                    d4:1e:93:8b:2e:50:cf:d2:4d:d5:34:82:f2:11:60:
                    85:f2:07:41:5c:1f:2c:ee:07:5c:d8:28:b7:fe:c9:
                    08:49:04:a8:8f:f6:54:01:64:94:73:34:5e:16:7e:
                    b5:9d:91:d5:70:e3:e4:a6:d0:65:be:d2:ae:98:8c:
                    23:00:60:f9:20:d7:85:52:bc:af:2e:52:2f:76:ca:
                    f2:14:97:d7:08:2b:bf:bb:96:e1:19:d0:4b:95:3e:
                    5d:14:bb:1b:05:9d:cc:e6:77:4d:28:5c:31:ea:68:
                    d8:49:32:9a:59:0b:9e:a5:93:3c:d5:e9:2d:0d:ed:
                    8d:15:12:77:3d:5f:64:27:a4:63:6e:48:ac:1d:f7:
                    66:11:26:56:20:99:08:5d:2e:f3:d7:d4:2f:2b:47:
                    81:3f:a9:d3:bb:d2:11:86:40:75:56:42:24:89:68:
                    83:f2:88:af:c2:03:a7:6d:a5:f2:f2:4c:e4:bc:28:
                    a1:4f:cd:d7:f0:6e:97:d7:f2:53:d2:e8:2c:d7:17:
                    16:3f:f0:84:ef:a3:fb:d2:e0:5a:e5:da:b1:cc:12:
                    5c:a9:d6:c2:74:a9:b9:09:1d:59:59:33:98:d1:c8:
                    2b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:EC:0B:B9:CC:7A:6A:EA:CD:2B:55:63:F3:AD:7A:31:F4:F5:32:60
            X509v3 Authority Key Identifier:
                keyid:CE:2D:1B:C8:B2:67:35:E9:06:8E:88:33:32:0A:9F:DE:B0:4E:69:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3230302e33332e3133322e302f32342d3234203d3e20323633323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:79:c8:26:08:62:8e:2d:3b:cd:c0:b2:75:d9:c7:f3:4c:57:
         95:64:14:0c:6a:59:37:ac:b3:65:c8:1e:d5:3c:4c:2f:19:41:
         6c:d3:17:d9:91:b8:cc:a8:84:b5:b2:84:86:2d:67:c0:cb:72:
         93:78:78:fd:d6:b7:29:41:9a:c2:32:76:69:67:c7:69:ea:84:
         35:f8:74:07:f4:c0:d1:56:7d:c9:6a:b4:c0:58:80:52:be:7a:
         f7:e1:8c:fc:ba:9d:c6:e1:d1:a4:37:7f:e4:cf:91:87:9e:65:
         64:1c:44:21:2f:a0:02:90:2b:8c:92:f7:a2:20:b0:16:2e:5d:
         50:ec:50:78:3d:5e:8c:19:c9:a0:24:18:08:9a:2b:82:d8:00:
         55:0e:10:09:f5:67:5b:dd:67:a5:62:e6:28:87:97:94:42:f5:
         fe:f1:8d:f0:b4:a8:db:8e:d2:cf:81:6b:ee:11:81:6f:1f:cc:
         6b:fd:ce:6d:60:7a:2b:09:36:0b:0e:a3:85:e5:cf:b8:33:1c:
         d1:4e:c6:d2:13:f2:81:60:ad:96:9b:7b:c9:f7:2f:5d:e3:81:
         d3:47:b0:a4:3d:d9:cf:2d:01:64:11:17:e7:10:43:3f:0b:e5:
         45:85:01:7b:af:04:8c:17:37:bd:75:1d:3a:3d:bb:ea:16:97:
         4f:63:7a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:35 2024 by rpki-client on console-ams.rpki-client.org