Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/3230302e3132342e38392e302f32342d3234203d3e20323730323735.roa
File:                     3230302e3132342e38392e302f32342d3234203d3e20323730323735.roa (raw, json)
Hash identifier:          wZAV2NsEUMB2Y+4RJViT57fY7K6Y9XscWbAEq+R3Smk=
Subject key identifier:   DE:2D:CE:EB:09:C7:D8:A4:67:07:C9:6A:49:16:6A:F1:E0:8A:F8:12
Certificate issuer:       /CN=1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6
Certificate serial:       2CCEBFD0A4C79AB84A8DA45788B1C4F3145113F5
Authority key identifier: 1A:50:5F:A7:6D:FA:4D:23:0C:9E:04:A9:1C:C5:9D:7C:F8:1D:72:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/3230302e3132342e38392e302f32342d3234203d3e20323730323735.roa
Signing time:             Thu 04 Apr 2024 06:00:38 +0000
ROA not before:           Thu 04 Apr 2024 05:55:38 +0000
ROA not after:            Thu 03 Apr 2025 06:00:38 +0000
asID:                     270275
IP address blocks:        200.124.89.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.crl
                          rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:ce:bf:d0:a4:c7:9a:b8:4a:8d:a4:57:88:b1:c4:f3:14:51:13:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6
        Validity
            Not Before: Apr  4 05:55:38 2024 GMT
            Not After : Apr  3 06:00:38 2025 GMT
        Subject: CN=DE2DCEEB09C7D8A46707C96A49166AF1E08AF812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:02:aa:6a:12:56:8e:ec:ed:e9:73:82:6c:d5:
                    0c:e2:20:5d:63:35:6d:c2:43:7b:24:0a:28:35:5c:
                    2e:3c:07:18:64:6a:27:31:b0:37:cd:65:e7:c9:13:
                    dc:ac:d4:8d:24:27:52:4e:e5:94:55:c2:a1:2a:62:
                    1f:62:17:c2:fc:ca:d3:e2:47:7b:e2:a3:ad:7b:45:
                    53:a6:02:f1:a1:b2:b8:62:8f:05:7c:6a:a7:f8:d8:
                    78:be:f1:5c:8e:de:9a:d2:60:83:34:e5:7b:d2:6f:
                    12:93:49:79:b9:91:17:de:a6:4b:b2:eb:77:8a:4d:
                    1b:8e:c9:21:f8:f0:60:87:e2:fb:4a:19:13:51:c8:
                    b2:cd:6d:cf:df:9d:96:8e:88:7d:58:66:68:aa:db:
                    74:a4:73:61:1d:f8:19:17:66:a6:45:17:55:30:25:
                    76:7e:d6:5a:5b:aa:dd:1c:4b:20:da:10:58:cf:2e:
                    ee:b3:b3:01:39:22:4c:4a:a0:97:ad:b1:42:1a:11:
                    2b:34:6e:c1:55:63:d2:af:1f:6b:0b:75:16:3f:05:
                    8b:10:41:92:3a:75:36:b2:bc:09:65:e7:68:6c:75:
                    0d:d7:5f:b6:a7:29:32:f9:f6:78:de:42:68:68:c0:
                    6b:9b:1a:d3:fb:5a:2e:9b:d4:4a:6c:6d:08:ab:36:
                    c8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:2D:CE:EB:09:C7:D8:A4:67:07:C9:6A:49:16:6A:F1:E0:8A:F8:12
            X509v3 Authority Key Identifier:
                keyid:1A:50:5F:A7:6D:FA:4D:23:0C:9E:04:A9:1C:C5:9D:7C:F8:1D:72:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/3230302e3132342e38392e302f32342d3234203d3e20323730323735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:b8:a0:e4:b5:68:67:cc:10:8e:79:31:5f:45:5e:68:b3:82:
         74:ab:8b:99:82:98:3f:c3:50:7c:16:f5:04:cc:b6:ad:84:a7:
         60:4d:7d:a7:68:1a:24:2e:82:45:6f:29:da:42:ef:9a:8e:dd:
         58:95:d0:0c:31:4a:f7:7e:e4:3b:fe:d2:29:38:7a:93:47:a7:
         b8:59:6f:f6:e1:ad:95:9e:17:94:96:f9:e5:23:5e:cb:68:fc:
         92:3c:a9:c5:e8:e8:1f:c2:b4:4a:6d:79:37:e9:37:3f:a3:0f:
         e4:1d:09:7e:1f:f8:43:81:d6:7a:11:1c:aa:a2:d0:54:2b:5a:
         78:a0:48:6f:ac:29:63:31:80:13:12:74:ec:40:52:d6:b5:e4:
         dc:14:9b:a2:78:88:bc:e6:9b:59:cc:60:02:23:ec:37:1d:df:
         89:36:c0:c7:d8:89:71:c3:1b:55:54:eb:ef:f5:7e:41:54:0c:
         11:a0:18:bc:60:cc:71:1c:73:9e:09:ee:60:c8:88:ea:f6:6a:
         b6:1e:29:f6:db:fe:6e:60:77:e4:50:fb:53:0c:a6:d5:69:9d:
         95:2c:50:08:c2:78:0e:8b:84:c6:01:08:a1:c8:8a:ce:06:89:
         af:3e:51:a6:0e:aa:07:14:08:cf:67:db:bb:e9:94:c6:44:a8:
         8b:23:80:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:28 2024 by rpki-client on console-fra.rpki-client.org