Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/3230302e3135322e3137392e302f32342d3234203d3e203238353839.roa
File:                     3230302e3135322e3137392e302f32342d3234203d3e203238353839.roa (raw, json)
Hash identifier:          0ztvL3hVHfyZlEDgM90P1/RKZ83GH9zDza8YRbYWC7M=
Subject key identifier:   9A:86:7B:76:89:07:25:96:B7:B0:4B:94:09:BC:33:04:8C:48:4C:91
Certificate issuer:       /CN=ABEDCE5CA2A73752E848B305E7DCB48075860E71
Certificate serial:       5EF6066261022D3D3A868EA95327FE1DF7ED1488
Authority key identifier: AB:ED:CE:5C:A2:A7:37:52:E8:48:B3:05:E7:DC:B4:80:75:86:0E:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/3230302e3135322e3137392e302f32342d3234203d3e203238353839.roa
Signing time:             Fri 26 Jul 2024 20:21:52 +0000
ROA not before:           Fri 26 Jul 2024 20:16:52 +0000
ROA not after:            Fri 25 Jul 2025 20:21:52 +0000
asID:                     28589
IP address blocks:        200.152.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.crl
                          rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 11:37:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:f6:06:62:61:02:2d:3d:3a:86:8e:a9:53:27:fe:1d:f7:ed:14:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABEDCE5CA2A73752E848B305E7DCB48075860E71
        Validity
            Not Before: Jul 26 20:16:52 2024 GMT
            Not After : Jul 25 20:21:52 2025 GMT
        Subject: CN=9A867B7689072596B7B04B9409BC33048C484C91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:05:4a:42:be:f0:11:89:63:6c:26:1d:13:88:
                    62:c3:79:8d:a3:83:63:07:bb:c0:f9:a1:01:81:a3:
                    ec:45:b2:94:b8:c0:e2:74:b1:47:7d:74:cb:6a:04:
                    64:66:d8:28:41:2f:69:b1:e3:d6:be:e2:9a:cc:67:
                    46:9a:71:bb:78:b4:f5:d9:87:7d:93:ab:6f:e9:33:
                    30:75:b3:c9:8d:b4:3d:24:b8:f7:7a:69:e6:b8:3b:
                    74:27:35:6d:ab:0d:46:8a:b5:e4:73:46:98:00:6b:
                    19:e7:ff:32:bc:42:f0:c0:4c:fb:03:fe:45:40:2c:
                    de:3f:60:62:ed:98:dc:35:e9:60:46:20:94:a8:ae:
                    08:a3:67:c9:e8:c6:76:75:ea:c6:3e:34:e4:ac:21:
                    54:2a:5a:b4:04:4e:b0:52:52:a3:1d:4e:88:ad:8d:
                    3f:03:cb:98:86:6c:f8:0f:eb:b9:24:af:64:82:9e:
                    04:f5:e6:30:a9:ca:8f:c0:00:3c:a8:6b:5a:61:8d:
                    25:ec:81:28:92:46:1a:61:31:63:a4:c7:f7:6c:fb:
                    8c:a8:43:40:76:6f:2d:3e:37:96:4d:69:c8:75:f6:
                    9f:66:f2:af:e3:30:94:fc:91:99:82:1b:45:f0:f2:
                    cd:80:e5:04:b0:a4:72:41:c8:38:9b:93:6c:fa:11:
                    11:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:86:7B:76:89:07:25:96:B7:B0:4B:94:09:BC:33:04:8C:48:4C:91
            X509v3 Authority Key Identifier:
                keyid:AB:ED:CE:5C:A2:A7:37:52:E8:48:B3:05:E7:DC:B4:80:75:86:0E:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/3230302e3135322e3137392e302f32342d3234203d3e203238353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:7c:b7:35:a6:98:86:ad:5d:73:93:4d:68:73:1b:78:39:49:
         ef:fa:17:83:63:60:4c:d3:26:d1:94:07:de:3f:fc:df:a2:19:
         d8:78:11:cf:90:c9:4d:21:ed:0d:81:d7:0f:4e:9b:f1:93:0a:
         06:5e:a6:3c:36:88:16:e2:48:b9:f3:d8:1d:d3:6c:00:91:54:
         83:74:8b:75:5c:d4:8a:70:f1:40:b5:b2:ba:c0:30:6c:27:f4:
         72:4c:b6:03:51:1e:11:b2:4e:67:d0:f9:c6:29:c4:b0:8b:e8:
         b1:e6:f6:f1:53:e1:53:b3:d7:a8:12:24:48:81:ed:49:df:8d:
         dc:61:60:65:ce:3c:5a:44:66:f2:e2:9b:e5:bf:97:ec:4c:b6:
         b6:17:70:bc:2a:00:01:3b:51:f9:ce:3a:0f:cd:81:a9:cf:1d:
         21:24:3b:05:fa:c5:9c:ad:7c:56:f0:30:10:7b:5a:cb:7e:57:
         f8:86:27:e1:09:87:82:2c:b9:cf:b2:9d:74:d9:f3:6c:c7:7b:
         ce:9a:7b:88:9c:db:ac:38:1e:02:42:4a:ee:75:e4:6b:c0:ac:
         da:28:7e:55:b6:a9:f8:37:be:b0:32:f2:46:02:aa:4e:cf:c6:
         62:c3:ec:cc:d9:db:11:d0:b3:32:93:f0:75:59:33:a9:16:45:
         48:93:5d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:45:45 2025 by rpki-client