Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/3230302e3135322e3138312e302f32342d3234203d3e203238353839.roa
File:                     3230302e3135322e3138312e302f32342d3234203d3e203238353839.roa (raw, json)
Hash identifier:          IdLCfDTj9a+UPXRfAu5BwfElmTst9FG9EFuY7md5/iI=
Subject key identifier:   49:B6:51:EE:3C:06:3D:21:53:0C:F6:17:7B:BD:A3:C0:76:B9:C1:09
Certificate issuer:       /CN=ABEDCE5CA2A73752E848B305E7DCB48075860E71
Certificate serial:       109680B0C8223FB836CEB6C78789BDCA8D37E46E
Authority key identifier: AB:ED:CE:5C:A2:A7:37:52:E8:48:B3:05:E7:DC:B4:80:75:86:0E:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/3230302e3135322e3138312e302f32342d3234203d3e203238353839.roa
Signing time:             Fri 26 Jul 2024 20:22:41 +0000
ROA not before:           Fri 26 Jul 2024 20:17:41 +0000
ROA not after:            Fri 25 Jul 2025 20:22:41 +0000
asID:                     28589
IP address blocks:        200.152.181.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.crl
                          rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 16:40:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:96:80:b0:c8:22:3f:b8:36:ce:b6:c7:87:89:bd:ca:8d:37:e4:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABEDCE5CA2A73752E848B305E7DCB48075860E71
        Validity
            Not Before: Jul 26 20:17:41 2024 GMT
            Not After : Jul 25 20:22:41 2025 GMT
        Subject: CN=49B651EE3C063D21530CF6177BBDA3C076B9C109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:46:27:7a:4d:c8:f5:72:ba:2d:60:e6:79:a9:
                    c0:a8:72:62:e5:31:aa:c6:13:85:81:be:08:f0:ef:
                    1d:fd:4d:50:fb:b1:94:a2:5e:74:01:3e:ef:e9:ab:
                    f8:ba:71:fc:3a:66:12:bb:77:a5:c9:b2:29:c1:27:
                    92:e3:39:e2:c1:96:b7:d9:0b:23:3d:56:34:2f:36:
                    ce:a0:04:fd:52:61:0c:70:aa:bc:b2:4f:bc:a4:37:
                    44:8e:ea:d6:6a:9c:82:73:20:d3:03:f9:5c:4f:54:
                    88:d2:ed:84:54:ab:24:ca:23:ac:f3:9a:07:07:c7:
                    94:2f:8b:92:ae:84:65:d7:17:d2:d3:9d:46:57:ca:
                    89:92:83:1a:51:8d:1d:1c:8b:98:8d:3e:54:8c:f3:
                    53:ae:6e:6c:b3:36:c5:95:e6:6a:39:e9:b5:7e:c5:
                    82:44:f7:18:5b:87:0c:bf:6b:1b:22:51:67:82:1a:
                    5e:cc:8c:b7:5d:d4:cc:c2:8b:1f:e5:b2:88:8d:0c:
                    55:c5:02:c6:80:76:c3:45:30:83:9a:41:97:22:ae:
                    42:39:6f:48:32:db:b0:81:12:9b:4c:32:fc:3a:7f:
                    66:7f:5f:fc:f5:6f:97:10:69:46:62:2a:a0:3e:6c:
                    30:fe:9a:21:4b:6f:fb:70:22:23:d1:c5:66:2f:35:
                    bd:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:B6:51:EE:3C:06:3D:21:53:0C:F6:17:7B:BD:A3:C0:76:B9:C1:09
            X509v3 Authority Key Identifier:
                keyid:AB:ED:CE:5C:A2:A7:37:52:E8:48:B3:05:E7:DC:B4:80:75:86:0E:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/3230302e3135322e3138312e302f32342d3234203d3e203238353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:41:af:70:a1:84:80:2a:ba:80:15:d7:5b:db:e9:a6:a1:25:
         0d:87:8a:eb:1a:2a:31:63:58:46:01:13:42:94:03:6a:cf:6d:
         80:0f:d0:99:19:10:69:11:1c:e9:33:9d:bb:e8:fb:02:8e:c1:
         59:79:4a:e5:3e:9d:3a:9e:0d:e6:07:74:0d:6e:18:6a:a2:f9:
         79:23:76:17:80:10:f4:fb:f0:d9:2d:75:28:70:5d:9b:56:73:
         ef:be:97:12:09:a9:7d:91:1a:57:1a:96:1a:1f:ce:38:fd:4e:
         7c:6c:52:57:5e:e5:92:13:69:6d:4e:18:96:8a:34:75:d6:62:
         75:6f:3e:d5:69:34:ff:d7:d4:e5:4a:c3:46:03:ff:82:5b:ce:
         e1:b1:06:62:a3:af:3d:57:35:54:0f:ed:a4:cc:26:8e:24:5d:
         6a:40:6c:dc:53:2c:4c:87:42:00:4f:aa:74:22:90:95:8f:d6:
         cc:2a:9c:22:ab:49:8e:d8:cd:80:76:b9:67:7f:6f:5d:d0:a2:
         af:69:b9:17:c8:77:4e:f8:c0:94:15:f9:ae:42:85:99:88:ab:
         75:5c:9f:9d:7f:64:f4:cd:6b:ad:40:8e:1a:54:97:eb:b3:c8:
         44:f9:15:ac:41:9b:8f:f8:18:f0:69:1a:54:44:06:df:3f:04:
         9a:de:fe:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 17:14:34 2024 by rpki-client on console-fra.rpki-client.org