Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATPVmXwY6zqHTYx5AuztY1wd7ZYWk3sazUnwx4oQyhny/1/3230312e3134302e3233362e302f32322d3234203d3e20323636313438.roa
File:                     3230312e3134302e3233362e302f32322d3234203d3e20323636313438.roa (raw, json)
Hash identifier:          xMGF+v4tIdE0K/C6oI+NqRsuHVIc/rLGsE1L+NkeQdQ=
Subject key identifier:   48:5F:F6:E0:D7:60:E5:2B:A3:91:A6:B6:E2:D0:29:7F:BF:DF:C9:05
Certificate issuer:       /CN=8C2E92E0BAD02E89BAE6DBB5B23B674A2D577A1D
Certificate serial:       25DC287FA0D9C3D3722E7E6385A929E9E7ACC599
Authority key identifier: 8C:2E:92:E0:BA:D0:2E:89:BA:E6:DB:B5:B2:3B:67:4A:2D:57:7A:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C2E92E0BAD02E89BAE6DBB5B23B674A2D577A1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATPVmXwY6zqHTYx5AuztY1wd7ZYWk3sazUnwx4oQyhny/1/3230312e3134302e3233362e302f32322d3234203d3e20323636313438.roa
Signing time:             Thu 04 Apr 2024 07:11:22 +0000
ROA not before:           Thu 04 Apr 2024 07:06:22 +0000
ROA not after:            Thu 03 Apr 2025 07:11:22 +0000
asID:                     266148
IP address blocks:        201.140.236.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ATPVmXwY6zqHTYx5AuztY1wd7ZYWk3sazUnwx4oQyhny/1/8C2E92E0BAD02E89BAE6DBB5B23B674A2D577A1D.crl
                          rsync://rpki-repo.registro.br/repo/ATPVmXwY6zqHTYx5AuztY1wd7ZYWk3sazUnwx4oQyhny/1/8C2E92E0BAD02E89BAE6DBB5B23B674A2D577A1D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C2E92E0BAD02E89BAE6DBB5B23B674A2D577A1D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 20:41:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:dc:28:7f:a0:d9:c3:d3:72:2e:7e:63:85:a9:29:e9:e7:ac:c5:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C2E92E0BAD02E89BAE6DBB5B23B674A2D577A1D
        Validity
            Not Before: Apr  4 07:06:22 2024 GMT
            Not After : Apr  3 07:11:22 2025 GMT
        Subject: CN=485FF6E0D760E52BA391A6B6E2D0297FBFDFC905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cd:1f:1d:ca:e7:70:39:d6:92:ff:33:e8:5a:
                    16:4b:11:dc:34:cf:b9:c6:fd:ed:0f:31:9b:59:97:
                    00:4e:c2:86:79:59:c9:d4:95:db:b0:f5:78:44:1e:
                    68:c8:c9:20:28:11:a5:43:5c:ce:6d:0b:f3:9d:4a:
                    42:b1:df:37:8f:4b:b2:7b:b9:14:56:39:67:d4:bb:
                    2b:f7:b5:06:84:34:f1:73:af:b4:15:5b:d8:ef:20:
                    24:46:15:56:fb:93:36:31:f7:15:59:ae:b7:ab:d9:
                    17:2b:35:dc:4b:75:7e:4d:92:91:ae:12:87:37:ce:
                    82:bf:39:df:ee:86:7d:5b:fc:56:c3:9b:44:4e:54:
                    12:eb:b0:c5:05:d3:df:d1:12:68:3e:46:85:5b:37:
                    2c:c8:fb:31:80:cb:b0:22:d6:a3:da:1f:07:84:83:
                    33:de:76:43:ca:3b:bf:9c:e5:65:51:49:72:72:ce:
                    52:d6:76:89:49:79:d5:97:e1:93:33:92:6e:b7:00:
                    95:12:36:8c:f8:94:09:35:c1:d0:57:a6:3d:bd:0e:
                    d7:98:d3:ad:d2:2e:a1:d3:34:d9:83:01:41:6a:19:
                    43:bd:55:30:0d:b6:39:ee:d1:96:1e:ac:80:57:54:
                    ad:9b:76:b3:36:f4:b1:9e:9d:0c:99:6b:ea:6b:45:
                    b7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:5F:F6:E0:D7:60:E5:2B:A3:91:A6:B6:E2:D0:29:7F:BF:DF:C9:05
            X509v3 Authority Key Identifier:
                keyid:8C:2E:92:E0:BA:D0:2E:89:BA:E6:DB:B5:B2:3B:67:4A:2D:57:7A:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATPVmXwY6zqHTYx5AuztY1wd7ZYWk3sazUnwx4oQyhny/1/8C2E92E0BAD02E89BAE6DBB5B23B674A2D577A1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C2E92E0BAD02E89BAE6DBB5B23B674A2D577A1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATPVmXwY6zqHTYx5AuztY1wd7ZYWk3sazUnwx4oQyhny/1/3230312e3134302e3233362e302f32322d3234203d3e20323636313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.140.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:cd:36:a3:f8:b5:c1:47:c1:4e:79:81:37:7f:e0:87:d3:8e:
         0a:66:ba:e2:0d:00:40:05:df:d8:bb:7c:fe:a8:3b:ea:54:01:
         63:63:a2:a6:9b:65:9a:2a:7d:fd:7f:27:05:e6:ea:68:d2:8c:
         5a:5a:1e:11:f0:03:c9:bc:ed:aa:3c:b1:8a:dc:f5:73:73:90:
         f5:aa:cb:be:21:cd:f9:e3:f4:53:62:50:6c:ed:5d:96:7d:7a:
         53:fe:0a:7b:28:68:d1:d7:3f:82:4f:19:8d:67:6f:a3:01:8a:
         77:ea:4f:29:58:18:d8:13:13:e8:0d:5f:f9:78:7c:09:b3:13:
         01:ec:68:6a:19:40:9b:49:4c:a3:44:49:73:c2:66:c2:1a:84:
         14:56:a6:ff:18:f9:38:7c:c0:cb:44:73:81:0b:78:f9:88:01:
         84:6a:a5:d4:90:80:ce:e6:83:f6:0f:d7:58:2f:f3:42:f6:f5:
         aa:a6:ac:81:62:32:fb:2e:41:cc:e4:88:87:ce:71:b0:dd:84:
         a9:1d:20:b0:3b:fe:52:e9:c8:6e:a2:ce:4d:de:3f:3d:bb:77:
         77:aa:49:cf:f3:52:5d:3f:f0:0d:bb:28:3d:07:f2:56:69:91:
         a7:68:18:6f:3d:10:d7:d8:cb:52:02:be:c3:05:c8:81:7a:02:
         25:86:d3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:31:41 2024 by rpki-client on console-ams.rpki-client.org