Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/3230302e3135322e3138322e302f32342d3234203d3e203238353839.roa
File:                     3230302e3135322e3138322e302f32342d3234203d3e203238353839.roa (raw, json)
Hash identifier:          jp9/HrBW2RgLVu5Rz2rQ1Id0cA9H8WjyQFZyQBopUUU=
Subject key identifier:   B2:2B:8A:FF:4F:47:0D:1F:95:13:06:33:95:29:BC:70:47:46:6C:C8
Certificate issuer:       /CN=ABEDCE5CA2A73752E848B305E7DCB48075860E71
Certificate serial:       7706FB12FE84F068C5AAF46E9EFD87DCDBC3EBAD
Authority key identifier: AB:ED:CE:5C:A2:A7:37:52:E8:48:B3:05:E7:DC:B4:80:75:86:0E:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/3230302e3135322e3138322e302f32342d3234203d3e203238353839.roa
Signing time:             Fri 26 Jul 2024 20:22:49 +0000
ROA not before:           Fri 26 Jul 2024 20:17:49 +0000
ROA not after:            Fri 25 Jul 2025 20:22:49 +0000
asID:                     28589
IP address blocks:        200.152.182.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.crl
                          rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 16:40:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:06:fb:12:fe:84:f0:68:c5:aa:f4:6e:9e:fd:87:dc:db:c3:eb:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABEDCE5CA2A73752E848B305E7DCB48075860E71
        Validity
            Not Before: Jul 26 20:17:49 2024 GMT
            Not After : Jul 25 20:22:49 2025 GMT
        Subject: CN=B22B8AFF4F470D1F951306339529BC7047466CC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:65:bc:41:99:4c:72:06:e4:02:8f:3c:f7:0f:
                    3f:b2:38:c3:a0:64:fd:b0:db:5d:23:40:8a:50:72:
                    8b:51:ea:62:aa:d0:ae:fa:ee:a2:3c:61:c9:b2:61:
                    57:da:97:6f:9f:a5:73:5c:03:a5:f4:68:c9:ac:d9:
                    8e:4e:a1:1c:a0:16:b9:e3:ca:43:61:09:40:fb:9c:
                    90:34:b1:bf:2e:0d:eb:85:ae:b5:14:1c:c9:26:5d:
                    0b:b2:d6:1d:9d:8a:c2:89:9e:3a:1c:61:0e:d4:0f:
                    a3:cd:94:86:0d:7e:8d:5c:f8:9a:46:8f:99:a1:4b:
                    36:b9:95:e2:19:2c:5a:1d:c3:52:5d:77:a9:96:2a:
                    b1:87:72:49:c7:ce:ea:fc:ff:6d:42:aa:16:92:9a:
                    5d:81:78:8f:2c:ba:9b:65:14:86:26:55:a3:05:ad:
                    50:2a:3f:1e:e8:97:2e:ba:b0:c2:d4:f4:4d:ce:64:
                    9b:dd:09:0c:95:7b:47:17:06:65:85:24:f0:48:54:
                    31:60:a0:db:25:1c:13:6d:87:9d:7b:51:9d:1d:c3:
                    02:b3:8d:d9:1f:d6:0c:e3:a9:90:8c:cd:4a:6a:ee:
                    cf:4d:19:46:a9:38:a5:00:d3:12:b8:b7:9b:17:fc:
                    75:1e:79:8a:d8:20:fe:00:80:44:5f:77:ac:df:a7:
                    2c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:2B:8A:FF:4F:47:0D:1F:95:13:06:33:95:29:BC:70:47:46:6C:C8
            X509v3 Authority Key Identifier:
                keyid:AB:ED:CE:5C:A2:A7:37:52:E8:48:B3:05:E7:DC:B4:80:75:86:0E:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/3230302e3135322e3138322e302f32342d3234203d3e203238353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:d3:13:8f:39:69:bc:e3:09:1f:c1:e3:a0:d5:a5:18:44:f7:
         40:ad:5f:84:84:45:b0:a6:c2:7c:6c:af:03:72:3c:a5:86:12:
         e7:51:3f:1f:fa:5b:d5:71:c0:8c:14:47:77:55:ad:af:25:ee:
         e2:0d:9f:7a:f0:e2:b9:8d:07:0f:0c:bd:c5:3a:15:81:76:2b:
         c4:8b:df:e1:19:a9:d6:99:56:48:b1:c1:c9:d4:d6:9f:90:7e:
         77:82:82:46:a6:7a:43:fd:a2:f4:76:35:02:3a:e2:e6:e0:bc:
         dc:2a:93:69:98:8b:31:f7:45:11:df:ab:de:c5:c4:7e:8e:f9:
         66:22:2a:7e:31:45:2e:b1:98:68:bd:6d:8b:b4:1f:e6:fa:97:
         d2:ef:32:d7:f6:1d:51:1e:a0:05:0e:6f:47:d9:1d:f7:57:df:
         2f:39:5d:b2:a8:ec:df:89:78:4c:1a:84:b9:cf:a8:ba:00:45:
         fd:90:c8:ac:69:87:7d:57:9e:f6:08:6d:9c:66:be:0e:bf:be:
         ed:6c:9f:9f:04:6e:af:7a:53:27:13:7a:46:b8:a8:3b:19:4e:
         b8:01:0a:ae:49:78:2a:bf:c8:9f:90:13:55:db:57:95:f3:ec:
         8c:88:e9:4b:1f:ac:e4:6b:06:dc:c7:e2:16:49:c8:81:f2:99:
         dd:85:2c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 17:14:34 2024 by rpki-client on console-fra.rpki-client.org