Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/3230302e3135322e3138372e302f32342d3234203d3e203238353839.roa
File:                     3230302e3135322e3138372e302f32342d3234203d3e203238353839.roa (raw, json)
Hash identifier:          pG5CjO1xGntyxBGUvXqnSNzo8P7xdWLKLX5wyXCVUQA=
Subject key identifier:   3F:A5:52:93:45:51:8D:AE:8A:F9:F0:71:89:3A:96:EA:7B:B6:F1:C4
Certificate issuer:       /CN=ABEDCE5CA2A73752E848B305E7DCB48075860E71
Certificate serial:       3DE9C716D723B26422182DF6D03AAF754C43973D
Authority key identifier: AB:ED:CE:5C:A2:A7:37:52:E8:48:B3:05:E7:DC:B4:80:75:86:0E:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/3230302e3135322e3138372e302f32342d3234203d3e203238353839.roa
Signing time:             Fri 26 Jul 2024 20:23:04 +0000
ROA not before:           Fri 26 Jul 2024 20:18:04 +0000
ROA not after:            Fri 25 Jul 2025 20:23:04 +0000
asID:                     28589
IP address blocks:        200.152.187.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.crl
                          rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:e9:c7:16:d7:23:b2:64:22:18:2d:f6:d0:3a:af:75:4c:43:97:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABEDCE5CA2A73752E848B305E7DCB48075860E71
        Validity
            Not Before: Jul 26 20:18:04 2024 GMT
            Not After : Jul 25 20:23:04 2025 GMT
        Subject: CN=3FA5529345518DAE8AF9F071893A96EA7BB6F1C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5f:69:19:f4:34:d8:13:fe:30:c9:17:a7:a3:
                    60:82:d0:18:b5:f6:29:2d:cf:3f:39:d5:ff:e6:22:
                    8c:7e:32:91:76:8e:0a:ca:72:75:c7:fd:f5:85:19:
                    b9:30:b2:73:f7:4e:32:f1:3f:f6:f0:06:ae:1d:b0:
                    e2:46:d1:7a:cc:58:9f:af:70:1f:f8:de:a6:3d:8f:
                    b9:98:5d:d5:30:c5:a6:86:62:6c:ad:86:12:79:00:
                    c2:9b:6f:8d:e3:a2:03:09:18:ff:7e:76:00:62:57:
                    35:f3:ff:14:94:0e:1b:ba:fe:26:06:40:c1:78:83:
                    7e:91:f5:26:dc:9f:9d:78:6d:16:2c:ad:f0:22:a7:
                    07:91:32:ca:bc:e1:17:48:15:89:a5:bb:8e:10:f7:
                    3f:b0:37:43:29:5e:c5:fc:43:64:40:07:95:9b:46:
                    c6:39:f5:62:4d:8f:4c:c7:55:fb:fa:32:db:ab:48:
                    b9:37:42:7a:3d:bc:4f:36:44:c8:2e:9f:c8:13:8b:
                    67:b4:13:26:c2:cc:fa:7f:fb:c0:e2:f5:e8:3f:27:
                    e8:2e:94:46:15:32:23:b0:51:e8:14:cd:5b:db:87:
                    6a:06:df:87:ec:92:6f:f8:4d:25:d6:7d:bb:fa:69:
                    9f:b6:92:58:04:62:d5:8c:c6:da:5d:ea:39:43:e0:
                    ac:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:A5:52:93:45:51:8D:AE:8A:F9:F0:71:89:3A:96:EA:7B:B6:F1:C4
            X509v3 Authority Key Identifier:
                keyid:AB:ED:CE:5C:A2:A7:37:52:E8:48:B3:05:E7:DC:B4:80:75:86:0E:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/3230302e3135322e3138372e302f32342d3234203d3e203238353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:b1:9e:71:65:6e:b4:8b:25:28:67:dc:bc:4a:30:07:07:be:
         b4:08:50:1c:73:6b:80:02:67:9a:2f:93:a4:09:17:e1:74:c4:
         de:74:d2:36:70:39:a7:39:e0:09:c4:5a:c1:f9:46:30:dc:8f:
         83:0e:ec:d3:7b:da:4e:ba:a5:89:43:c7:cf:e4:88:06:c3:a7:
         69:05:f5:09:b9:a9:06:24:48:ab:96:4e:90:8a:e9:b0:92:97:
         48:9d:27:f2:13:09:48:d3:30:38:9d:a3:8a:45:48:2b:d3:13:
         df:1b:b3:55:37:2f:24:83:a7:b0:9b:84:ed:e3:2e:bc:32:83:
         df:b1:bc:79:bc:f4:63:94:92:ea:b7:5a:3e:ed:bf:15:af:fc:
         c0:02:f2:c3:1c:19:18:1a:bf:06:3f:0d:1e:ef:7d:e4:11:96:
         b2:30:ba:db:2d:16:0e:bf:f8:03:27:16:f7:6b:47:ac:95:5b:
         64:be:0b:72:76:49:4c:16:09:c3:ed:40:d7:7b:09:cb:81:ae:
         a8:85:cf:7c:8a:df:00:96:6d:f2:de:ad:2a:ef:2d:c6:c0:d1:
         e4:f0:12:a6:ae:9a:09:0b:c9:71:4e:69:46:36:b6:fe:69:78:
         cc:d9:ae:eb:27:a1:38:da:7f:e3:f9:ee:f5:d2:62:6a:24:b3:
         37:27:e7:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:53:01 2024 by rpki-client on console-ams.rpki-client.org