Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/3230302e3135322e3138302e302f32342d3234203d3e203238353839.roa
File:                     3230302e3135322e3138302e302f32342d3234203d3e203238353839.roa (raw, json)
Hash identifier:          ybumnPiC9SGlr+B2wIdv8ZmfvL50q2Gsk2KiEJJQ3yc=
Subject key identifier:   DD:39:91:0B:BC:82:A8:19:D0:6E:6C:89:18:88:D0:3E:43:EF:DC:3B
Certificate issuer:       /CN=ABEDCE5CA2A73752E848B305E7DCB48075860E71
Certificate serial:       08B422DCAC40BFA558D1AEBEC197A893B9CFA4EB
Authority key identifier: AB:ED:CE:5C:A2:A7:37:52:E8:48:B3:05:E7:DC:B4:80:75:86:0E:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/3230302e3135322e3138302e302f32342d3234203d3e203238353839.roa
Signing time:             Fri 26 Jul 2024 20:22:07 +0000
ROA not before:           Fri 26 Jul 2024 20:17:07 +0000
ROA not after:            Fri 25 Jul 2025 20:22:07 +0000
asID:                     28589
IP address blocks:        200.152.180.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.crl
                          rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:b4:22:dc:ac:40:bf:a5:58:d1:ae:be:c1:97:a8:93:b9:cf:a4:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABEDCE5CA2A73752E848B305E7DCB48075860E71
        Validity
            Not Before: Jul 26 20:17:07 2024 GMT
            Not After : Jul 25 20:22:07 2025 GMT
        Subject: CN=DD39910BBC82A819D06E6C891888D03E43EFDC3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2a:fe:71:64:71:28:71:02:d4:8b:cd:c7:aa:
                    06:e8:7e:1f:bf:87:cb:91:87:78:e1:83:94:52:08:
                    ba:af:d7:67:66:eb:36:9d:ae:a1:e0:77:26:9d:33:
                    40:e4:e1:3e:59:99:66:77:b3:71:24:a4:95:2a:38:
                    92:04:52:06:ce:b1:20:cd:ef:64:49:30:24:53:b9:
                    7c:fc:ba:ec:48:f2:d8:b7:bf:96:0a:88:f4:90:22:
                    4b:9c:af:71:5c:7b:19:f2:58:7d:91:20:4e:ff:c6:
                    aa:87:66:e8:69:03:a4:f8:d5:0f:c2:ae:ea:8c:2d:
                    fd:f1:7e:b1:6d:57:4b:3d:a0:65:06:e0:4a:40:fd:
                    2a:fd:cf:2d:58:90:1a:09:6a:a7:29:c5:5a:2e:d7:
                    c1:5b:8e:b1:d0:7f:60:2e:2d:7d:0c:62:d7:a2:ca:
                    a0:d7:17:ef:2f:81:b3:38:4e:29:c2:fd:07:92:e1:
                    fb:b7:5e:79:f5:ce:cc:fd:d1:65:9c:16:5b:48:e0:
                    ce:9b:ee:f7:34:a2:72:d8:44:4c:4c:a0:61:c3:96:
                    ac:ac:3a:f0:4a:6c:66:9f:be:ac:f2:ef:a2:f6:69:
                    40:e5:11:0a:0e:fb:b3:b8:4b:81:6c:a0:96:f0:f4:
                    44:68:0f:a2:93:8c:0d:23:a1:92:47:66:99:83:0c:
                    42:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:39:91:0B:BC:82:A8:19:D0:6E:6C:89:18:88:D0:3E:43:EF:DC:3B
            X509v3 Authority Key Identifier:
                keyid:AB:ED:CE:5C:A2:A7:37:52:E8:48:B3:05:E7:DC:B4:80:75:86:0E:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/3230302e3135322e3138302e302f32342d3234203d3e203238353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:c4:3a:80:b4:30:5e:9d:26:3c:d9:c7:41:a9:c6:d8:9c:1c:
         b3:71:6c:4c:38:b7:14:3c:eb:33:f8:a2:35:00:bf:44:6c:23:
         e4:07:a9:47:56:82:fa:f8:41:43:ac:f1:f0:8f:03:a9:62:c6:
         bb:b2:1e:ab:fc:1f:89:98:e5:fc:64:68:d6:c9:25:a9:e3:e5:
         9d:99:8c:5d:5c:86:9f:5c:79:7b:2b:c1:30:ed:dd:ad:9c:74:
         bf:ed:6d:d5:2f:43:2c:5a:94:65:fd:ba:d8:96:d4:27:2c:fc:
         79:36:3c:28:72:6d:07:79:6a:38:9e:d7:16:9f:b2:ed:7e:d0:
         eb:d2:6b:8b:16:c8:8d:06:f5:37:91:ca:be:c4:44:98:d4:e3:
         f2:78:02:49:7a:ab:93:d8:be:4c:52:3b:21:55:8e:9a:c6:0b:
         c9:bc:38:37:40:fe:3d:9c:24:63:cd:62:a8:79:a9:96:64:9d:
         8b:b2:b0:6b:a8:b1:28:f3:e3:04:56:90:f6:af:61:fe:1b:96:
         0b:00:a5:c8:e4:d8:a6:ee:16:03:89:32:ca:80:9b:76:61:39:
         eb:ae:c5:af:2d:20:fc:5d:34:b7:a6:a0:31:b8:d3:a6:3c:8a:
         3f:80:63:95:1b:93:c4:7f:b7:f3:84:ff:62:fc:57:ab:d9:34:
         6d:aa:1b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:02:49 2024 by rpki-client on console-fra.rpki-client.org