Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9NQAbH6qBU4xDXTPDJrAMMf1n3YV8C7CEiKdesWtc9eB/1/3230372e3234382e31362e302f32322d3332203d3e20323731343132.roa
File:                     3230372e3234382e31362e302f32322d3332203d3e20323731343132.roa (raw, json)
Hash identifier:          Na5J8Oc2+/nJ2MycirCSotW4W48ywAoryousiXo4c/c=
Subject key identifier:   D1:E5:8F:66:85:87:21:A8:6A:B7:86:43:EE:9A:C4:EF:8D:72:B0:4C
Certificate issuer:       /CN=CC8A9D2053AFF19B22251EBD605E94A3AF50E281
Certificate serial:       51280134E4598A0E390B789D5398625EB1078162
Authority key identifier: CC:8A:9D:20:53:AF:F1:9B:22:25:1E:BD:60:5E:94:A3:AF:50:E2:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC8A9D2053AFF19B22251EBD605E94A3AF50E281.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9NQAbH6qBU4xDXTPDJrAMMf1n3YV8C7CEiKdesWtc9eB/1/3230372e3234382e31362e302f32322d3332203d3e20323731343132.roa
Signing time:             Thu 04 Apr 2024 10:31:30 +0000
ROA not before:           Thu 04 Apr 2024 10:26:30 +0000
ROA not after:            Thu 03 Apr 2025 10:31:30 +0000
asID:                     271412
IP address blocks:        207.248.16.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9NQAbH6qBU4xDXTPDJrAMMf1n3YV8C7CEiKdesWtc9eB/1/CC8A9D2053AFF19B22251EBD605E94A3AF50E281.crl
                          rsync://rpki-repo.registro.br/repo/9NQAbH6qBU4xDXTPDJrAMMf1n3YV8C7CEiKdesWtc9eB/1/CC8A9D2053AFF19B22251EBD605E94A3AF50E281.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC8A9D2053AFF19B22251EBD605E94A3AF50E281.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:28:01:34:e4:59:8a:0e:39:0b:78:9d:53:98:62:5e:b1:07:81:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC8A9D2053AFF19B22251EBD605E94A3AF50E281
        Validity
            Not Before: Apr  4 10:26:30 2024 GMT
            Not After : Apr  3 10:31:30 2025 GMT
        Subject: CN=D1E58F66858721A86AB78643EE9AC4EF8D72B04C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d0:c3:25:dc:35:2f:40:4a:7c:87:aa:cd:64:
                    18:4c:85:ef:6a:b0:be:db:5b:95:7f:80:b6:b1:1a:
                    f7:c8:02:47:f4:d5:55:be:c7:47:67:50:62:77:81:
                    18:ac:9a:73:24:46:6e:c0:44:0c:f6:f4:cf:39:cb:
                    ff:0f:0d:f8:9a:be:9a:da:85:54:ed:8f:de:a1:fd:
                    c4:2c:61:59:ca:06:be:0a:3f:ff:a6:56:a8:b8:78:
                    f1:6b:89:01:ef:5a:45:ec:a0:bb:04:c0:61:be:ba:
                    9a:bb:9a:d9:44:d6:45:ff:2b:af:4a:cf:8f:fb:37:
                    33:6e:c1:c3:3b:84:6b:68:e4:09:5c:d0:8d:54:90:
                    0c:3a:41:52:15:11:50:13:a0:a0:57:e5:08:63:2b:
                    54:66:0a:f6:c3:73:ff:7b:87:48:79:7e:66:83:60:
                    2a:9a:8e:f0:d0:9f:a5:d0:1d:6b:c6:3a:f0:7d:13:
                    90:e6:a8:1f:c4:70:b4:51:3e:fc:59:05:60:1f:28:
                    38:78:ac:96:85:ae:b1:52:d2:99:62:07:43:88:d6:
                    06:97:a1:af:4f:08:45:82:6a:57:44:30:58:06:86:
                    b9:76:db:ee:6a:f8:8d:d4:e4:a6:80:86:75:82:52:
                    8e:f0:6d:d3:57:2a:17:1e:c3:72:7b:8a:3a:dc:55:
                    40:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:E5:8F:66:85:87:21:A8:6A:B7:86:43:EE:9A:C4:EF:8D:72:B0:4C
            X509v3 Authority Key Identifier:
                keyid:CC:8A:9D:20:53:AF:F1:9B:22:25:1E:BD:60:5E:94:A3:AF:50:E2:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9NQAbH6qBU4xDXTPDJrAMMf1n3YV8C7CEiKdesWtc9eB/1/CC8A9D2053AFF19B22251EBD605E94A3AF50E281.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC8A9D2053AFF19B22251EBD605E94A3AF50E281.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9NQAbH6qBU4xDXTPDJrAMMf1n3YV8C7CEiKdesWtc9eB/1/3230372e3234382e31362e302f32322d3332203d3e20323731343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c9:eb:28:88:26:d9:3f:ea:7f:2b:5b:e3:29:af:98:63:98:de:
         66:0b:ee:fa:ad:74:6d:cb:53:89:e1:5f:ce:76:53:dc:dd:f9:
         bd:88:35:ec:36:21:d3:bd:ef:37:87:ea:8b:4f:b1:24:e4:87:
         15:4a:d6:61:0e:5a:6a:46:46:98:99:93:3b:63:57:24:35:2b:
         69:e0:fa:01:71:ac:fd:4f:35:5d:bb:2b:ad:a8:7b:e4:a5:99:
         39:b9:15:82:ce:51:c7:c1:84:6d:ca:dc:ff:e7:aa:c6:cd:fc:
         54:4f:de:54:a6:44:b0:ea:fb:e7:1c:75:69:b3:ce:64:df:49:
         a7:9b:f4:8c:1c:c9:0d:f5:d9:a1:83:b5:47:2b:72:01:64:2b:
         24:82:f2:07:ae:a2:97:2a:d8:5e:4f:37:6d:96:fb:02:b3:45:
         33:c7:69:7a:88:64:09:46:77:3a:49:7a:7c:39:08:3c:58:fe:
         fc:06:eb:0b:24:e8:fe:25:14:fd:12:8d:59:f5:11:2f:2c:0f:
         6e:99:9d:b3:2c:96:3f:7c:67:f3:c8:8b:f1:9c:10:36:97:22:
         77:7b:1f:01:f0:d5:a9:d0:4b:70:6f:09:93:b8:65:7a:78:b3:
         22:e9:97:4a:5e:0b:3b:f9:90:cc:c3:c0:e8:41:14:e0:55:06:
         a6:e6:e1:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 06:48:53 2024 by rpki-client on console-fra.rpki-client.org