Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/1/3230312e3134382e3235322e302f32322d3234203d3e203238313533.roa
File:                     3230312e3134382e3235322e302f32322d3234203d3e203238313533.roa (raw, json)
Hash identifier:          urI+r8CQ8GieZc+H9Ln7q1dVUsvRXBjyy/QUSVQ0X/s=
Subject key identifier:   C8:26:8D:8E:83:CF:8E:5A:8D:30:F6:13:A7:58:AE:16:8F:10:A7:DC
Certificate issuer:       /CN=73BA17300B8B336E7162A6CD35AB67ECBE2D0DC4
Certificate serial:       57487D1C616BC8ECD4388E71919E8BCE56C1C2FB
Authority key identifier: 73:BA:17:30:0B:8B:33:6E:71:62:A6:CD:35:AB:67:EC:BE:2D:0D:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73BA17300B8B336E7162A6CD35AB67ECBE2D0DC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/1/3230312e3134382e3235322e302f32322d3234203d3e203238313533.roa
Signing time:             Thu 04 Apr 2024 13:28:35 +0000
ROA not before:           Thu 04 Apr 2024 13:23:35 +0000
ROA not after:            Thu 03 Apr 2025 13:28:35 +0000
asID:                     28153
IP address blocks:        201.148.252.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/1/73BA17300B8B336E7162A6CD35AB67ECBE2D0DC4.crl
                          rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/1/73BA17300B8B336E7162A6CD35AB67ECBE2D0DC4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73BA17300B8B336E7162A6CD35AB67ECBE2D0DC4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:33:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:48:7d:1c:61:6b:c8:ec:d4:38:8e:71:91:9e:8b:ce:56:c1:c2:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73BA17300B8B336E7162A6CD35AB67ECBE2D0DC4
        Validity
            Not Before: Apr  4 13:23:35 2024 GMT
            Not After : Apr  3 13:28:35 2025 GMT
        Subject: CN=C8268D8E83CF8E5A8D30F613A758AE168F10A7DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f6:7c:08:b0:ca:d4:46:d3:11:af:67:61:08:
                    87:16:7f:9b:49:9d:d9:9f:c4:d6:63:7d:7b:19:21:
                    72:64:e9:26:6a:ad:6f:78:62:40:74:18:de:d8:31:
                    e3:41:38:d2:71:5e:cb:71:15:6d:95:80:2a:2c:3e:
                    e4:95:da:2d:70:1b:2c:d4:4f:86:66:ea:f9:bd:01:
                    d8:a2:2e:4a:e5:a1:71:0c:f9:29:aa:0d:26:dd:dc:
                    9e:5a:04:a7:e3:b3:87:b0:8a:62:60:e0:ff:5d:9e:
                    f9:fd:00:ad:58:a6:11:0e:be:34:1d:a5:0e:b6:99:
                    88:93:a6:4f:dc:49:f9:fb:27:87:6f:41:32:c9:4c:
                    81:d9:e3:41:d6:32:92:d8:97:b2:94:00:65:c3:32:
                    d5:fd:bb:7d:1b:a9:e3:fe:3c:88:cf:5a:f8:94:ef:
                    2c:54:ca:3e:50:5d:ac:c5:b4:1d:39:43:4d:8b:01:
                    ec:4b:6c:a4:2e:f8:4a:1e:22:3e:63:a7:5d:c3:a2:
                    f3:d5:09:f3:74:a0:13:2f:10:76:f5:3d:cd:87:0a:
                    5e:67:93:8e:c5:3c:50:83:29:dc:f0:b9:fa:b7:6c:
                    3e:9e:d0:11:31:28:0d:0f:d7:db:e6:42:68:9b:bf:
                    7d:57:85:59:0f:4e:e5:b7:8a:2c:60:98:b9:e4:95:
                    ff:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:26:8D:8E:83:CF:8E:5A:8D:30:F6:13:A7:58:AE:16:8F:10:A7:DC
            X509v3 Authority Key Identifier:
                keyid:73:BA:17:30:0B:8B:33:6E:71:62:A6:CD:35:AB:67:EC:BE:2D:0D:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/1/73BA17300B8B336E7162A6CD35AB67ECBE2D0DC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73BA17300B8B336E7162A6CD35AB67ECBE2D0DC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/1/3230312e3134382e3235322e302f32322d3234203d3e203238313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.148.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:e0:aa:55:62:88:4d:92:0f:ce:ca:c0:d0:b3:5f:84:b6:e6:
         0d:8c:72:f6:68:1e:0a:68:01:45:a1:77:4b:d6:c3:ec:6c:68:
         33:22:57:60:44:4d:35:1e:de:87:8d:6d:c4:37:af:68:5c:b8:
         ed:fb:1a:df:1e:98:d4:28:18:76:0f:75:2d:a7:87:29:d7:82:
         33:a2:6c:3b:46:c1:2d:eb:ed:6c:97:b3:49:6f:2d:04:8e:80:
         be:ed:3b:61:24:53:85:7f:cc:2c:be:40:89:8f:74:6e:b3:1c:
         85:02:71:f3:ef:51:31:6c:d9:98:16:a1:2a:4a:f9:fb:a6:c0:
         e9:11:50:c7:84:ab:f6:5e:20:4a:23:47:7d:75:1a:36:bc:b7:
         59:8e:8e:3f:41:8b:c1:3d:ba:36:95:c3:b3:6a:8d:a0:80:18:
         19:c3:72:17:11:5e:15:db:83:9d:ba:15:d0:49:e8:8b:b2:3f:
         1c:ef:5c:47:16:5d:07:d6:37:a7:b4:6d:9a:f2:9a:24:31:c9:
         fb:27:53:a0:47:78:bc:ce:80:e0:2a:31:66:8d:ad:7e:9c:d2:
         48:2e:56:d8:55:a0:86:74:bb:dd:9d:d7:9a:a3:a5:5c:06:de:
         af:e0:ef:a4:27:d4:14:69:09:bd:5d:e2:67:cf:13:da:a8:89:
         dd:dc:8d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:02 2024 by rpki-client on console-ams.rpki-client.org