Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8uJYCp1ikFMksUyfqFo4koDVaVjSt7sQpu5XAW7WYKRC/0/3230302e392e3134342e302f32342d3332203d3e20323635343332.roa
File:                     3230302e392e3134342e302f32342d3332203d3e20323635343332.roa (raw, json)
Hash identifier:          3jgnd2/TJB3JAqWiqQK3J/d4DxjUI9OM163+GQoJqes=
Subject key identifier:   EF:1D:A1:79:F9:A5:52:20:BC:43:D3:4A:C9:AD:12:80:B9:7C:49:CA
Certificate issuer:       /CN=5E14615AF9BB8C45FA824EF311E6AE526A7C5B32
Certificate serial:       295B7FD5475F43DCBAD95FB3854BB37C4C9C44C5
Authority key identifier: 5E:14:61:5A:F9:BB:8C:45:FA:82:4E:F3:11:E6:AE:52:6A:7C:5B:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E14615AF9BB8C45FA824EF311E6AE526A7C5B32.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8uJYCp1ikFMksUyfqFo4koDVaVjSt7sQpu5XAW7WYKRC/0/3230302e392e3134342e302f32342d3332203d3e20323635343332.roa
Signing time:             Tue 23 Jul 2024 19:02:02 +0000
ROA not before:           Tue 23 Jul 2024 18:57:02 +0000
ROA not after:            Tue 22 Jul 2025 19:02:02 +0000
asID:                     265432
IP address blocks:        200.9.144.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8uJYCp1ikFMksUyfqFo4koDVaVjSt7sQpu5XAW7WYKRC/0/5E14615AF9BB8C45FA824EF311E6AE526A7C5B32.crl
                          rsync://rpki-repo.registro.br/repo/8uJYCp1ikFMksUyfqFo4koDVaVjSt7sQpu5XAW7WYKRC/0/5E14615AF9BB8C45FA824EF311E6AE526A7C5B32.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E14615AF9BB8C45FA824EF311E6AE526A7C5B32.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 20:40:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:5b:7f:d5:47:5f:43:dc:ba:d9:5f:b3:85:4b:b3:7c:4c:9c:44:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E14615AF9BB8C45FA824EF311E6AE526A7C5B32
        Validity
            Not Before: Jul 23 18:57:02 2024 GMT
            Not After : Jul 22 19:02:02 2025 GMT
        Subject: CN=EF1DA179F9A55220BC43D34AC9AD1280B97C49CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9c:ce:7b:9b:aa:42:a1:ac:8b:88:34:e8:05:
                    4e:bd:0a:79:e2:89:5e:28:b1:6f:18:27:25:4f:1e:
                    52:b9:40:a6:0a:a2:d3:ad:28:5c:a0:e0:94:f3:39:
                    42:53:36:e7:cb:3b:93:d4:1d:f1:96:85:5c:27:55:
                    d2:cf:53:de:71:02:5b:e9:01:9c:dc:e2:e7:bc:e1:
                    0d:69:e4:a1:4f:e4:87:df:64:3d:dd:a0:b1:d4:57:
                    0c:f0:74:77:bb:4a:17:59:45:23:df:01:88:79:7c:
                    4a:5a:b2:d9:86:54:d5:68:d3:55:71:c1:24:47:c0:
                    20:14:ce:26:cf:a5:fc:ad:6c:24:9b:46:eb:b8:67:
                    a9:9b:31:ab:2d:da:07:ae:f6:17:a4:a7:69:d3:86:
                    0c:63:da:6f:25:2d:d3:7d:d2:66:10:8e:53:20:a1:
                    d4:bb:10:d7:5b:81:51:4c:ac:f1:a9:20:f4:dd:dd:
                    e0:8d:42:41:5d:ea:ed:3b:a3:84:1e:50:43:a1:8c:
                    fe:f3:44:d3:cf:86:f5:b3:c8:02:54:eb:60:6b:1b:
                    ab:e3:a0:b4:fb:3f:1c:0e:37:f0:7c:b6:87:93:ef:
                    58:29:ce:95:e3:9a:71:e8:cc:3f:88:6a:85:16:fe:
                    3a:2b:3b:78:80:e2:c0:ef:93:4d:46:15:bb:b0:fe:
                    7a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:1D:A1:79:F9:A5:52:20:BC:43:D3:4A:C9:AD:12:80:B9:7C:49:CA
            X509v3 Authority Key Identifier:
                keyid:5E:14:61:5A:F9:BB:8C:45:FA:82:4E:F3:11:E6:AE:52:6A:7C:5B:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8uJYCp1ikFMksUyfqFo4koDVaVjSt7sQpu5XAW7WYKRC/0/5E14615AF9BB8C45FA824EF311E6AE526A7C5B32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E14615AF9BB8C45FA824EF311E6AE526A7C5B32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8uJYCp1ikFMksUyfqFo4koDVaVjSt7sQpu5XAW7WYKRC/0/3230302e392e3134342e302f32342d3332203d3e20323635343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:77:fb:f0:a4:a0:2e:fa:67:06:08:48:8e:b7:eb:c9:a6:1f:
         78:bb:e6:2e:84:44:32:db:3a:64:29:34:7b:53:7d:0f:c6:fb:
         6e:6e:71:f3:f9:57:3e:8a:27:79:3e:6b:a7:18:ae:50:0b:2d:
         c0:aa:13:ca:6a:2b:91:e9:19:44:6c:92:83:12:12:6c:37:88:
         06:4a:25:09:63:88:21:61:a5:88:3e:78:80:25:e6:60:a6:db:
         18:61:88:f4:6c:3f:f3:b9:41:5d:ea:74:3a:eb:04:34:d0:3d:
         48:db:88:09:79:c5:41:79:69:40:76:82:9c:dd:23:2c:1d:c2:
         ec:14:74:b2:e7:49:54:e5:70:ae:f0:2c:04:0e:81:f4:74:58:
         e8:f6:b0:ee:74:72:f5:8a:9c:7b:fc:53:44:0a:86:6a:e3:cb:
         74:ce:eb:95:87:26:f0:0a:97:dc:93:e9:3f:ac:4f:a4:3c:ff:
         d2:f7:83:bd:af:10:d0:74:37:a8:f9:86:34:3a:aa:04:aa:d0:
         d2:9e:d3:48:8a:aa:67:a9:10:09:8c:5b:44:b2:1c:15:02:f0:
         94:7f:12:39:91:2a:2e:cf:73:26:c8:0d:47:e3:be:e2:a2:5d:
         2d:8b:29:b5:cf:de:5a:f8:ac:e6:af:22:e2:bb:17:7e:ff:1b:
         ce:d9:dc:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 20:48:56 2024 by rpki-client on console-ams.rpki-client.org