Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/3230302e3132342e39312e302f32342d3234203d3e20323730323735.roa
File:                     3230302e3132342e39312e302f32342d3234203d3e20323730323735.roa (raw, json)
Hash identifier:          5fxPIH+Qa5971ZRAUCgxnqZo+A2JbfKA2gLYzGlGvKI=
Subject key identifier:   1C:3B:8E:29:AA:9B:F4:CD:2C:D4:39:8B:B7:4D:90:70:9B:6F:54:17
Certificate issuer:       /CN=1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6
Certificate serial:       742A707678E0880FB017D85CEB9AFF329E7D07C6
Authority key identifier: 1A:50:5F:A7:6D:FA:4D:23:0C:9E:04:A9:1C:C5:9D:7C:F8:1D:72:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/3230302e3132342e39312e302f32342d3234203d3e20323730323735.roa
Signing time:             Thu 04 Apr 2024 06:00:38 +0000
ROA not before:           Thu 04 Apr 2024 05:55:38 +0000
ROA not after:            Thu 03 Apr 2025 06:00:38 +0000
asID:                     270275
IP address blocks:        200.124.91.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.crl
                          rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:2a:70:76:78:e0:88:0f:b0:17:d8:5c:eb:9a:ff:32:9e:7d:07:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6
        Validity
            Not Before: Apr  4 05:55:38 2024 GMT
            Not After : Apr  3 06:00:38 2025 GMT
        Subject: CN=1C3B8E29AA9BF4CD2CD4398BB74D90709B6F5417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:98:68:57:bc:01:26:bd:a5:7d:64:fb:41:07:
                    64:3c:ae:3f:bc:8e:f9:ed:d3:99:0a:d8:c0:a9:6e:
                    5b:77:04:3a:2f:59:41:29:83:4a:a0:74:d1:aa:37:
                    c2:9f:04:7f:52:70:33:c1:af:0a:7f:72:51:38:39:
                    8d:12:5c:2e:f5:31:cb:db:51:0d:56:97:ef:80:ee:
                    6a:50:06:9d:24:4e:39:d9:50:f8:b8:8d:c0:55:7e:
                    0a:ce:e7:b5:d3:9c:0a:0c:61:31:16:68:34:e1:16:
                    d0:e0:93:fa:36:87:ae:a0:b8:6c:5d:9c:28:93:74:
                    d1:07:e8:f6:88:06:3a:88:36:ec:44:74:51:24:c9:
                    ab:97:34:6d:86:8a:b9:0c:75:a7:6e:a7:7f:71:f8:
                    ac:18:f7:10:f0:97:bf:34:f5:5a:de:e3:49:3a:6e:
                    2f:9a:27:28:e7:90:d2:0c:60:a3:78:52:74:c1:67:
                    53:24:14:cc:a3:48:2a:d7:42:4d:99:77:5f:fe:01:
                    5f:12:b0:23:74:d1:1c:cf:e9:93:48:60:ef:37:af:
                    b4:5f:49:30:ed:cc:26:cf:a7:cb:d1:ed:50:24:e0:
                    cf:83:59:77:e5:80:ea:d4:50:8d:ab:63:74:52:41:
                    3d:a2:d3:ac:60:65:cb:a0:b6:c5:5f:a3:dd:ea:7c:
                    57:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:3B:8E:29:AA:9B:F4:CD:2C:D4:39:8B:B7:4D:90:70:9B:6F:54:17
            X509v3 Authority Key Identifier:
                keyid:1A:50:5F:A7:6D:FA:4D:23:0C:9E:04:A9:1C:C5:9D:7C:F8:1D:72:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/3230302e3132342e39312e302f32342d3234203d3e20323730323735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:84:a4:a3:2f:83:14:ee:90:4f:8e:ef:fb:48:2a:dc:cd:d5:
         fb:10:42:29:d7:86:8f:81:05:e4:79:98:02:7d:55:4d:50:8f:
         fb:35:fd:5c:27:8e:31:d5:12:52:ce:7d:62:2a:14:95:f5:6f:
         a4:b7:ca:15:87:da:a0:0c:7a:91:78:d3:67:53:e9:fe:61:cf:
         6c:61:c4:cb:55:ba:be:9b:c6:3a:97:1e:06:4b:c5:a0:a6:58:
         9c:e9:a3:c5:c4:07:7b:84:7e:7f:91:d1:aa:c9:c7:7f:18:dd:
         5a:f7:f2:e9:ad:a2:17:23:55:9b:c0:6c:84:68:c7:84:67:0c:
         7f:47:2f:a9:af:3e:a0:00:7f:51:99:a8:51:94:93:fa:cc:f9:
         c8:a8:5a:a0:ce:2f:b1:7c:5b:c8:79:5d:06:46:9e:f7:eb:09:
         0e:f4:a5:cc:89:be:ef:ac:42:50:dc:60:e2:b6:1d:ac:d6:10:
         2d:3f:85:ff:d3:6e:fb:cb:8c:e3:37:6f:3a:58:0e:d7:57:90:
         8c:fe:e8:a9:bc:05:e3:8b:17:c0:7e:7e:04:6e:01:80:0c:90:
         db:ec:e4:73:6b:92:77:53:da:46:5d:2e:4b:f7:cf:d1:d5:91:
         fe:c4:8b:12:fc:d8:73:f0:b0:d3:d1:c4:90:d8:de:f6:9d:e9:
         b4:7d:2f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:02 2024 by rpki-client on console-ams.rpki-client.org