Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/1/3230302e33332e38382e302f32312d3234203d3e20323632353330.roa
File:                     3230302e33332e38382e302f32312d3234203d3e20323632353330.roa (raw, json)
Hash identifier:          CSfJvnfi+En4Oy8Z8iAbizhGr6IHs08wIUOACTUcPOc=
Subject key identifier:   23:9E:A6:28:81:E3:13:E0:AE:6E:BC:3D:04:41:F6:9F:68:44:CC:A2
Certificate issuer:       /CN=33EC4B2F4CD1775DDA4E4AA63183A6875ED6C6F7
Certificate serial:       2193B261CF0E947EDDEDC5CCC4DBE0CABC42A412
Authority key identifier: 33:EC:4B:2F:4C:D1:77:5D:DA:4E:4A:A6:31:83:A6:87:5E:D6:C6:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33EC4B2F4CD1775DDA4E4AA63183A6875ED6C6F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/1/3230302e33332e38382e302f32312d3234203d3e20323632353330.roa
Signing time:             Thu 04 Apr 2024 11:45:23 +0000
ROA not before:           Thu 04 Apr 2024 11:40:23 +0000
ROA not after:            Thu 03 Apr 2025 11:45:23 +0000
asID:                     262530
IP address blocks:        200.33.88.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/1/33EC4B2F4CD1775DDA4E4AA63183A6875ED6C6F7.crl
                          rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/1/33EC4B2F4CD1775DDA4E4AA63183A6875ED6C6F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33EC4B2F4CD1775DDA4E4AA63183A6875ED6C6F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 16:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:93:b2:61:cf:0e:94:7e:dd:ed:c5:cc:c4:db:e0:ca:bc:42:a4:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33EC4B2F4CD1775DDA4E4AA63183A6875ED6C6F7
        Validity
            Not Before: Apr  4 11:40:23 2024 GMT
            Not After : Apr  3 11:45:23 2025 GMT
        Subject: CN=239EA62881E313E0AE6EBC3D0441F69F6844CCA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ea:20:0e:48:34:7a:ab:70:7e:2f:86:75:e5:
                    26:c7:d9:05:82:8b:14:3d:a5:3a:1f:0d:2c:33:df:
                    5e:67:51:f3:3d:1e:f1:a4:75:5b:85:6f:27:30:3f:
                    3e:d5:29:02:f8:e8:e6:6b:45:63:17:2a:f6:79:4a:
                    48:38:35:58:09:10:ea:e6:23:e9:d8:cc:08:a6:7e:
                    2d:f5:b8:ab:99:f8:46:5a:d1:a8:62:0f:f8:bb:aa:
                    ec:c6:cc:bf:0e:8b:73:8f:f1:36:7a:87:dc:61:52:
                    1a:d8:d2:e0:3f:9c:db:11:14:6b:83:ef:69:0e:fb:
                    25:a4:01:e2:86:7a:ec:2a:c4:95:8b:1b:0b:15:db:
                    68:b1:ba:11:0b:69:5b:d1:bd:0b:05:fa:74:4a:4e:
                    69:df:a8:86:72:54:d1:74:90:5a:34:0d:25:da:49:
                    1f:49:48:12:0c:5e:ea:89:48:b5:0b:fd:03:0f:d0:
                    c6:35:e0:31:d3:8b:06:99:63:34:b8:54:22:49:29:
                    3f:3e:83:9c:7b:bc:eb:f8:7c:c7:0e:89:cb:05:5c:
                    83:42:38:be:ff:25:c4:5b:dd:b7:28:16:17:3f:7c:
                    7f:ea:af:50:47:bc:2f:1b:20:25:d8:c1:05:a7:ab:
                    66:10:7b:6c:2b:ef:9c:a7:51:11:92:3f:1c:95:57:
                    e8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:9E:A6:28:81:E3:13:E0:AE:6E:BC:3D:04:41:F6:9F:68:44:CC:A2
            X509v3 Authority Key Identifier:
                keyid:33:EC:4B:2F:4C:D1:77:5D:DA:4E:4A:A6:31:83:A6:87:5E:D6:C6:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/1/33EC4B2F4CD1775DDA4E4AA63183A6875ED6C6F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33EC4B2F4CD1775DDA4E4AA63183A6875ED6C6F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/1/3230302e33332e38382e302f32312d3234203d3e20323632353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6e:54:68:9f:70:a5:5a:f8:67:9d:ac:75:04:9d:60:49:14:83:
         af:ff:52:17:c6:76:f7:86:76:d0:2d:01:c1:61:4f:cc:ca:5a:
         77:20:61:77:75:aa:42:95:d3:cd:77:73:c7:5c:6f:d4:14:0a:
         67:26:e0:95:a6:3c:77:7f:aa:c8:4c:22:de:3c:e7:b1:e9:3b:
         ae:30:37:d8:b4:13:cb:da:4f:0e:ab:3e:46:07:b4:08:b0:07:
         bc:cd:ff:4d:ff:6d:c5:79:4e:76:b0:b5:a3:e5:ec:c6:45:63:
         d9:2f:16:d2:ee:1d:a6:89:f3:76:0e:fc:fb:ba:fa:21:50:31:
         20:f9:73:12:09:5a:02:bb:e6:90:e1:6c:c9:88:21:99:81:e3:
         69:dc:a5:f4:82:1c:e0:23:35:df:54:00:64:c5:8b:6b:db:fa:
         49:6c:de:80:8b:a7:08:ec:da:50:6d:af:da:d1:e5:4f:fa:c0:
         bc:da:07:c8:ff:cf:e2:6c:db:ac:31:85:f0:86:3e:17:58:07:
         ef:42:09:7b:19:08:67:e4:e8:b9:99:62:d2:cf:90:97:8f:ee:
         fd:4b:b8:5c:bf:22:e3:d4:15:b5:c0:00:21:23:32:89:32:9f:
         d7:68:a7:53:cb:8d:a9:8e:3b:a1:80:b4:06:76:51:3e:61:71:
         fa:2d:e9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 14:45:05 2024 by rpki-client on console-fra.rpki-client.org