Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/3230302e3135322e3138332e302f32342d3234203d3e203238353839.roa
File:                     3230302e3135322e3138332e302f32342d3234203d3e203238353839.roa (raw, json)
Hash identifier:          GRAKxo3ppUBo81cdb4uw3jnYkEOM+/UfU6UJqOZHnKM=
Subject key identifier:   33:00:45:75:88:0E:91:7A:A2:84:EA:08:1B:E9:D8:24:14:6C:2A:30
Certificate issuer:       /CN=ABEDCE5CA2A73752E848B305E7DCB48075860E71
Certificate serial:       5EA0DAE14C5EAA1D01322AD60B1088F43E14D137
Authority key identifier: AB:ED:CE:5C:A2:A7:37:52:E8:48:B3:05:E7:DC:B4:80:75:86:0E:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/3230302e3135322e3138332e302f32342d3234203d3e203238353839.roa
Signing time:             Fri 26 Jul 2024 20:22:54 +0000
ROA not before:           Fri 26 Jul 2024 20:17:54 +0000
ROA not after:            Fri 25 Jul 2025 20:22:54 +0000
asID:                     28589
IP address blocks:        200.152.183.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.crl
                          rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:a0:da:e1:4c:5e:aa:1d:01:32:2a:d6:0b:10:88:f4:3e:14:d1:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABEDCE5CA2A73752E848B305E7DCB48075860E71
        Validity
            Not Before: Jul 26 20:17:54 2024 GMT
            Not After : Jul 25 20:22:54 2025 GMT
        Subject: CN=33004575880E917AA284EA081BE9D824146C2A30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:08:7d:54:40:30:3d:bc:99:83:f0:06:40:4b:
                    3f:92:71:ed:33:ef:74:29:e1:99:c1:9c:8b:93:a3:
                    07:c9:83:6d:b1:3e:e8:77:3d:59:cc:69:cf:b1:19:
                    d2:e9:de:b1:14:66:93:bb:ea:07:96:ca:47:9f:fb:
                    a9:43:91:3b:fc:fa:e1:7d:79:b1:50:71:a0:98:3d:
                    18:1e:f8:68:40:f8:35:20:e7:28:f7:6d:3a:f8:45:
                    0f:e8:89:da:42:ac:16:f4:46:9c:9c:d9:d4:19:fd:
                    39:f1:bf:64:7a:88:5d:f4:3d:c1:58:5d:0b:d2:b3:
                    e1:65:f7:e7:3d:4a:66:b9:92:7f:4a:cd:b7:a1:4e:
                    97:f0:cf:d2:c5:3b:e1:47:85:1e:1a:54:66:e6:13:
                    75:fa:c0:d9:ae:6c:12:ff:97:47:f6:d5:06:d0:94:
                    f4:e0:a4:dc:80:2d:5e:f2:d0:b3:3c:6b:84:56:c4:
                    f2:8f:ca:9e:75:29:9d:86:e8:d0:82:d2:c7:5b:51:
                    c2:1b:27:36:37:2a:7f:9c:72:d2:fa:e8:54:c6:0e:
                    86:7a:c2:01:94:0a:a8:e2:03:92:59:3d:6e:75:74:
                    da:2a:a3:ab:03:cf:63:76:5c:81:da:2f:7c:fb:9f:
                    76:f3:ec:27:7f:53:6d:12:08:cc:b4:21:c3:f7:df:
                    3c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:00:45:75:88:0E:91:7A:A2:84:EA:08:1B:E9:D8:24:14:6C:2A:30
            X509v3 Authority Key Identifier:
                keyid:AB:ED:CE:5C:A2:A7:37:52:E8:48:B3:05:E7:DC:B4:80:75:86:0E:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/3230302e3135322e3138332e302f32342d3234203d3e203238353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:97:b2:e7:48:32:ea:58:b3:fe:47:80:63:f7:e6:85:14:94:
         54:ab:b9:db:ea:75:a2:69:01:b9:63:f6:6b:e8:33:88:58:59:
         8e:eb:81:f0:df:79:66:45:f5:95:0c:91:6e:8a:ab:4c:5f:3c:
         02:fe:f9:76:8a:00:4d:ac:50:41:91:8b:21:25:b9:14:c6:83:
         8e:11:a5:53:56:0c:c6:3e:a8:c8:4b:67:76:29:eb:10:ef:c7:
         42:81:11:5a:9b:2f:0a:be:ad:df:89:33:b7:10:53:b0:c5:02:
         c3:78:1d:ec:05:b6:79:c3:7d:8c:37:c2:22:d2:e4:6e:1b:d3:
         5d:66:45:6d:bd:3b:8d:96:45:e6:2f:48:ad:b4:fd:b7:67:fb:
         8c:24:87:d5:a9:06:6a:a9:a4:e4:5d:2d:60:5e:f9:c7:58:1f:
         58:d5:c6:cd:98:af:f5:7a:fd:54:bd:d7:ab:cb:76:43:41:09:
         27:f8:d3:0b:e5:7e:c5:e6:cc:69:06:dc:e4:51:11:b5:69:17:
         31:f2:92:86:5c:e9:59:6a:3f:3f:44:87:12:20:ef:38:9c:3d:
         04:ec:57:03:ea:31:fc:3c:87:4c:3e:1d:a3:a3:04:7c:77:50:
         2a:4f:47:61:54:92:d0:15:6e:c8:4b:ce:ee:ce:08:24:bf:96:
         c5:07:23:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:02:49 2024 by rpki-client on console-fra.rpki-client.org