Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/3230302e35302e3230302e302f32322d3234203d3e20323730343637.roa
File:                     3230302e35302e3230302e302f32322d3234203d3e20323730343637.roa (raw, json)
Hash identifier:          ikqRDeEZFEf7Hmkx1DD/dNfx0VzeelL+EGKhGGQzFMI=
Subject key identifier:   CE:05:8A:80:C5:29:18:3F:14:1F:01:DB:1F:CA:80:72:01:45:59:EF
Certificate issuer:       /CN=CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF
Certificate serial:       692334DC2FDD9F994CC78F31DD437CA42869A4C3
Authority key identifier: CA:F5:20:4B:41:16:9C:BB:F2:F6:8A:50:0E:03:6F:BA:6C:3C:3B:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/3230302e35302e3230302e302f32322d3234203d3e20323730343637.roa
Signing time:             Fri 13 Sep 2024 04:11:59 +0000
ROA not before:           Fri 13 Sep 2024 04:06:59 +0000
ROA not after:            Fri 12 Sep 2025 04:11:59 +0000
asID:                     270467
IP address blocks:        200.50.200.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.crl
                          rsync://rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 21:25:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:23:34:dc:2f:dd:9f:99:4c:c7:8f:31:dd:43:7c:a4:28:69:a4:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF
        Validity
            Not Before: Sep 13 04:06:59 2024 GMT
            Not After : Sep 12 04:11:59 2025 GMT
        Subject: CN=CE058A80C529183F141F01DB1FCA8072014559EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:fa:28:c1:1a:5e:1a:f3:c5:3e:c7:40:77:6d:
                    54:86:6e:69:74:ee:18:12:39:16:80:ac:89:22:5f:
                    ef:ef:84:c1:49:bf:81:e4:0d:82:43:54:26:3e:d3:
                    b8:0f:90:e2:2d:86:0c:4a:55:c0:7b:b9:ee:46:5c:
                    df:5f:02:bc:99:35:31:90:ab:8b:59:73:88:50:c6:
                    f4:a5:8f:0e:6b:93:d1:80:3f:3c:94:34:67:4e:6f:
                    a2:ff:88:4b:62:d1:67:c3:95:15:9b:98:3c:ec:25:
                    55:31:55:a8:da:73:b9:15:18:42:06:08:58:23:a6:
                    03:d3:b4:b0:26:ad:c4:0d:ff:77:50:74:17:fe:2a:
                    5c:eb:e2:95:37:f1:c9:48:94:de:d3:32:e8:7b:40:
                    be:f4:29:58:bf:b9:65:67:d6:a1:4f:d7:44:a8:e5:
                    4c:70:01:aa:f8:3f:c1:97:b4:b3:28:27:34:04:7c:
                    fe:a0:a2:13:92:28:fd:12:bb:2a:aa:ae:59:c7:cd:
                    41:4a:78:05:be:96:46:d6:c5:fe:b2:fa:d5:e0:42:
                    e8:0f:2b:59:27:00:6c:6b:c0:45:3b:44:df:a6:44:
                    89:1d:81:7f:12:3d:06:35:96:3c:7b:12:0c:7f:7b:
                    47:53:36:a0:2e:03:93:6e:16:e7:d8:63:fd:78:f0:
                    d8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:05:8A:80:C5:29:18:3F:14:1F:01:DB:1F:CA:80:72:01:45:59:EF
            X509v3 Authority Key Identifier:
                keyid:CA:F5:20:4B:41:16:9C:BB:F2:F6:8A:50:0E:03:6F:BA:6C:3C:3B:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/3230302e35302e3230302e302f32322d3234203d3e20323730343637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c1:6f:1f:43:03:d5:55:81:06:c4:f9:0c:8e:a5:4a:d5:48:9c:
         5c:ce:1e:cb:46:fd:e9:4b:69:84:65:a1:9b:ae:ce:6d:df:11:
         54:38:46:91:46:01:ea:b1:4c:62:cf:04:03:b2:c2:30:18:1e:
         b6:bd:f1:3e:7c:6d:de:39:16:fc:7f:a7:54:4e:9a:79:1b:4c:
         55:1c:7e:7d:21:6e:44:71:76:d7:c6:d3:7a:78:3f:01:be:2d:
         2d:0c:2e:95:14:b2:8e:0f:c6:d5:77:21:06:98:bc:95:6f:20:
         50:1c:3f:7a:c6:6e:fb:cc:6a:8d:ce:c9:95:a2:55:af:d9:f6:
         08:89:5a:8a:4a:1f:27:80:73:7c:ba:9f:55:c5:8e:18:46:f4:
         6b:19:13:b0:ce:2d:a5:48:f8:7f:38:4d:a5:d7:14:41:f2:da:
         0b:ca:da:67:93:d7:70:8e:6b:20:4a:6e:16:51:12:bb:ba:91:
         46:47:53:e7:93:05:03:e3:34:c2:8d:6c:4b:d8:c6:4e:4e:67:
         05:d9:cb:d5:a1:d3:98:64:fa:6a:78:a9:8a:7a:91:09:9a:e4:
         0a:e2:4d:24:b5:08:55:84:e2:20:67:fc:d6:ee:c7:fe:8c:c8:
         f3:da:24:f4:e9:6d:2b:cd:51:02:78:54:f0:64:1c:26:70:d3:
         c4:fd:1d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:46:31 2024 by rpki-client on console-fra.rpki-client.org