Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3230302e33332e3133342e302f32342d3234203d3e20323633323633.roa
File:                     3230302e33332e3133342e302f32342d3234203d3e20323633323633.roa (raw, json)
Hash identifier:          ehLwVx6Jbave6ORsuHyvHo3Jf2NlWeBwVosxD9kBiU8=
Subject key identifier:   16:86:73:2A:BF:06:9C:CC:40:22:61:9F:CA:29:99:44:1F:43:22:06
Certificate issuer:       /CN=CE2D1BC8B26735E9068E8833320A9FDEB04E69CD
Certificate serial:       0B17BBEC15F780A69F6B140E18454F5462DE072E
Authority key identifier: CE:2D:1B:C8:B2:67:35:E9:06:8E:88:33:32:0A:9F:DE:B0:4E:69:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3230302e33332e3133342e302f32342d3234203d3e20323633323633.roa
Signing time:             Thu 04 Apr 2024 07:28:53 +0000
ROA not before:           Thu 04 Apr 2024 07:23:53 +0000
ROA not after:            Thu 03 Apr 2025 07:28:53 +0000
asID:                     263263
IP address blocks:        200.33.134.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.crl
                          rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:17:bb:ec:15:f7:80:a6:9f:6b:14:0e:18:45:4f:54:62:de:07:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE2D1BC8B26735E9068E8833320A9FDEB04E69CD
        Validity
            Not Before: Apr  4 07:23:53 2024 GMT
            Not After : Apr  3 07:28:53 2025 GMT
        Subject: CN=1686732ABF069CCC4022619FCA2999441F432206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e8:56:c4:45:08:5d:23:7b:9a:b7:a2:d9:32:
                    d2:79:76:84:b1:08:01:1c:0a:d7:5a:3c:b6:0f:c6:
                    41:26:f3:94:ee:7f:c4:fe:0c:28:78:75:61:9f:62:
                    97:a5:85:aa:b5:39:39:f8:71:91:f3:62:f4:2b:76:
                    a2:64:f1:56:ba:a7:43:a9:88:14:29:78:fc:c4:2b:
                    b2:41:b9:05:98:3d:e2:7b:07:9a:0e:2b:01:42:39:
                    46:f0:ca:70:63:e3:cc:0a:94:36:c1:68:19:9e:08:
                    e1:62:45:75:ce:53:fd:67:74:59:05:b2:cc:24:16:
                    b7:aa:d4:82:09:10:cd:56:7d:4c:bb:c7:5a:e5:8f:
                    31:32:14:3d:b2:7d:4f:41:ef:85:15:c7:10:7a:eb:
                    a1:e3:b8:13:66:0f:39:b6:05:f4:70:c7:1f:87:97:
                    84:8a:91:96:17:5f:38:58:19:bc:21:31:ab:17:b3:
                    f2:da:df:11:16:bb:fa:59:af:aa:d4:55:9f:67:b6:
                    45:0d:a6:77:a3:fb:ed:6e:61:75:f2:3f:6c:e3:51:
                    75:75:0a:f2:4f:f2:56:49:df:b9:68:ca:db:d5:60:
                    d8:59:1c:53:3a:95:60:c9:e6:a6:f8:a6:50:46:77:
                    b7:94:41:af:8b:ef:7c:ca:2f:4a:88:4c:27:36:c4:
                    9a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:86:73:2A:BF:06:9C:CC:40:22:61:9F:CA:29:99:44:1F:43:22:06
            X509v3 Authority Key Identifier:
                keyid:CE:2D:1B:C8:B2:67:35:E9:06:8E:88:33:32:0A:9F:DE:B0:4E:69:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3230302e33332e3133342e302f32342d3234203d3e20323633323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:f0:e9:07:67:35:79:b5:5b:64:0f:83:23:6a:00:aa:af:ba:
         0c:fe:4b:70:84:59:0b:15:56:c5:01:cc:1f:8a:38:74:46:e5:
         98:30:fe:c8:bb:42:e7:cd:b6:72:d0:7f:55:a9:bf:62:7b:57:
         39:91:a3:86:b2:9d:8c:ec:3b:3e:81:cd:16:a5:64:e6:c8:d7:
         88:72:e2:8b:d0:a9:48:b7:40:d1:05:4f:69:3f:02:f4:7c:de:
         d5:bc:87:eb:90:5c:e0:21:48:3c:ab:5c:e1:7e:d0:e4:5b:0e:
         9c:04:ef:19:18:e3:7f:88:0c:31:05:4a:b7:25:fe:54:fb:e8:
         a6:0a:f2:c9:27:1d:5f:7c:0e:31:f2:bc:d7:6b:90:d2:33:6b:
         42:25:48:41:29:fd:6c:79:b1:d2:64:1c:4f:40:6b:e6:0b:70:
         47:cd:28:b4:14:cc:5d:35:33:89:cb:f6:33:67:b8:ee:d2:8a:
         8d:7b:9b:49:45:1f:47:d0:4b:0d:b0:4e:dc:bc:d5:d6:45:0d:
         04:10:b7:32:8c:a5:57:a5:a1:57:55:2b:86:9c:56:f6:6e:60:
         cf:98:29:f4:68:d8:71:97:17:87:5d:b9:eb:3f:08:45:44:be:
         20:ec:ca:e4:95:0e:05:8f:1a:4b:29:b7:70:ef:16:e2:87:a3:
         ef:27:de:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:31 2024 by rpki-client on console-fra.rpki-client.org