Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3230302e35322e31362e302f32302d3234203d3e20323632363539.roa
File:                     3230302e35322e31362e302f32302d3234203d3e20323632363539.roa (raw, json)
Hash identifier:          0v0Ec6TbhhS0Xbdpj/Sv3I/NTT0RK9SbOG+Lzhe265A=
Subject key identifier:   D4:6A:82:0A:E3:B1:A6:58:1D:89:48:95:A5:C3:45:AC:55:14:27:73
Certificate issuer:       /CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Certificate serial:       4CA0E772CEFDE04B37CE6B46B5BD0A328F5AE4A6
Authority key identifier: BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3230302e35322e31362e302f32302d3234203d3e20323632363539.roa
Signing time:             Mon 25 Nov 2024 17:04:00 +0000
ROA not before:           Mon 25 Nov 2024 16:59:00 +0000
ROA not after:            Mon 24 Nov 2025 17:04:00 +0000
asID:                     262659
IP address blocks:        200.52.16.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl
                          rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 17:34:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:a0:e7:72:ce:fd:e0:4b:37:ce:6b:46:b5:bd:0a:32:8f:5a:e4:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
        Validity
            Not Before: Nov 25 16:59:00 2024 GMT
            Not After : Nov 24 17:04:00 2025 GMT
        Subject: CN=D46A820AE3B1A6581D894895A5C345AC55142773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a8:f3:06:1e:a7:b3:fd:d1:36:30:0c:1f:5f:
                    ce:04:64:e2:32:ed:36:22:04:76:a2:72:77:3e:1a:
                    f4:5e:05:82:56:55:34:89:ed:35:de:f5:47:f6:34:
                    89:67:73:ce:7f:78:cb:7a:88:bc:b4:c2:dd:1b:be:
                    32:97:90:31:3c:75:dc:bd:62:25:15:db:1c:b3:e9:
                    34:49:71:cf:01:d6:ef:19:52:a4:8a:3e:63:ac:00:
                    80:ec:18:45:60:19:3b:03:a6:1b:6b:a5:46:e2:e7:
                    be:0b:b7:0a:26:65:55:1d:c7:1f:ac:c9:ab:e5:7e:
                    c7:89:f2:99:3a:b9:8e:be:a9:5c:82:68:b2:f8:c7:
                    98:cd:82:fa:27:fb:7a:f7:85:3d:5b:4e:14:1f:3a:
                    e9:f1:14:4c:7e:72:6e:f6:97:b7:1f:d0:e7:e9:de:
                    f8:65:87:03:09:bc:49:d7:fa:90:8e:5c:07:73:4e:
                    59:9c:38:4d:2a:81:9d:b1:a3:95:91:f9:98:98:6b:
                    f9:94:03:7a:01:cf:22:ff:00:ec:6c:b3:26:cf:2b:
                    1a:61:d4:b5:9f:b0:65:3c:19:74:2e:11:68:7b:92:
                    c6:ee:2d:68:d2:a1:b5:04:28:b2:a5:33:57:1c:02:
                    c7:3d:94:15:41:9e:fa:c6:99:2d:18:6d:e5:61:75:
                    10:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:6A:82:0A:E3:B1:A6:58:1D:89:48:95:A5:C3:45:AC:55:14:27:73
            X509v3 Authority Key Identifier:
                keyid:BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3230302e35322e31362e302f32302d3234203d3e20323632363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.52.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b3:8f:d9:ee:2c:b7:ef:b8:61:85:5c:6d:8c:b7:b8:2f:58:ac:
         8d:30:a8:6b:b3:a7:78:9c:c1:08:57:2e:ed:14:d4:00:b8:d8:
         0a:fe:e4:da:da:2c:87:bb:7b:57:f2:26:41:59:f4:9c:ea:62:
         ca:aa:da:19:3b:72:3e:de:b8:cb:1a:2a:88:da:b6:26:2f:73:
         90:fa:08:56:b4:21:c4:a4:7d:12:83:ce:1d:59:a6:83:c4:d8:
         6f:7e:15:43:c2:1c:fe:f2:1b:f8:7b:6e:ff:45:89:54:50:a5:
         2f:17:04:ce:60:74:26:4e:65:ab:a7:e8:8d:96:78:b1:64:03:
         f4:2a:0a:a8:1d:43:7b:65:cd:c8:b2:3d:71:cb:e1:44:f3:a8:
         ae:a1:54:1a:76:24:d3:dc:e9:91:4b:fb:1c:66:45:7d:b0:5b:
         d1:96:09:43:8b:9f:a9:90:e6:1e:64:9e:fa:b0:32:de:88:e3:
         76:70:28:3f:f8:28:dc:7b:b2:1f:b2:cf:1c:19:4a:78:96:7c:
         29:2d:df:40:f0:81:3d:f8:e9:3b:1e:44:c3:3f:e4:35:b7:6c:
         16:9c:8b:ae:2e:5c:46:19:7a:26:2b:fe:b6:ad:99:c2:ad:dc:
         63:36:2a:ef:0a:e2:df:8b:17:c4:ba:61:62:84:17:8c:88:9d:
         d8:3e:16:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:43:15 2024 by rpki-client on console-ams.rpki-client.org