Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BUbAVMC7eQyELqTSpvc9BQYShXywVQyEuVFFdB5AwYwb/1/3230312e34362e38322e302f32342d3234203d3e20323730323339.roa
File:                     3230312e34362e38322e302f32342d3234203d3e20323730323339.roa (raw, json)
Hash identifier:          J1vf+5q7z1No8hmVAG38kXlEb7sJkOotnmBZQ0un/Zc=
Subject key identifier:   03:5F:02:AA:51:43:AB:24:08:99:E5:E0:14:A9:DC:44:CA:01:10:40
Certificate issuer:       /CN=10B292084D7C28A59A2C5B196129450D72331CB5
Certificate serial:       6F5C9EA6296E4745A68C4AE0B423ADC563DEAD69
Authority key identifier: 10:B2:92:08:4D:7C:28:A5:9A:2C:5B:19:61:29:45:0D:72:33:1C:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10B292084D7C28A59A2C5B196129450D72331CB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BUbAVMC7eQyELqTSpvc9BQYShXywVQyEuVFFdB5AwYwb/1/3230312e34362e38322e302f32342d3234203d3e20323730323339.roa
Signing time:             Thu 04 Apr 2024 03:29:26 +0000
ROA not before:           Thu 04 Apr 2024 03:24:26 +0000
ROA not after:            Thu 03 Apr 2025 03:29:26 +0000
asID:                     270239
IP address blocks:        201.46.82.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BUbAVMC7eQyELqTSpvc9BQYShXywVQyEuVFFdB5AwYwb/1/10B292084D7C28A59A2C5B196129450D72331CB5.crl
                          rsync://rpki-repo.registro.br/repo/BUbAVMC7eQyELqTSpvc9BQYShXywVQyEuVFFdB5AwYwb/1/10B292084D7C28A59A2C5B196129450D72331CB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10B292084D7C28A59A2C5B196129450D72331CB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:11:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:5c:9e:a6:29:6e:47:45:a6:8c:4a:e0:b4:23:ad:c5:63:de:ad:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10B292084D7C28A59A2C5B196129450D72331CB5
        Validity
            Not Before: Apr  4 03:24:26 2024 GMT
            Not After : Apr  3 03:29:26 2025 GMT
        Subject: CN=035F02AA5143AB240899E5E014A9DC44CA011040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a4:df:fe:fa:d9:c6:77:f1:4f:63:3a:02:06:
                    49:a0:3c:ad:8d:9e:fa:2e:07:31:15:7d:5f:ef:01:
                    32:74:55:1d:5c:ec:7c:83:71:94:b9:03:4d:d7:e9:
                    3e:2d:d3:82:41:77:52:9a:f4:8d:b2:b7:79:7e:b5:
                    61:ce:9e:00:b1:83:bd:0c:bd:58:73:e8:3d:e6:86:
                    78:23:9a:f2:0e:a6:c2:a1:67:9d:ab:76:11:67:b9:
                    43:1b:11:79:46:ba:a2:af:c4:67:f5:c8:77:56:db:
                    95:29:f4:db:c9:1d:34:0b:1b:6f:40:06:43:ad:00:
                    d5:38:c7:dd:4e:02:86:02:80:96:8e:ed:ca:88:45:
                    36:c3:81:db:6f:b0:6a:bd:d2:ad:55:24:6d:c9:1e:
                    4e:52:4f:18:a6:fe:e3:00:31:d0:37:35:c8:61:06:
                    f6:0d:9f:ba:58:a2:5e:02:a3:2b:78:33:d9:d9:eb:
                    5a:d0:d5:4c:43:0c:a4:40:3b:d1:67:39:53:72:c5:
                    7d:9f:63:19:10:60:dd:25:00:d9:7e:40:b6:49:3e:
                    33:7e:1d:81:88:3e:66:a6:2a:9f:6a:9d:26:de:1e:
                    a4:7f:98:9b:7e:17:b0:40:78:11:66:01:26:78:26:
                    bb:b2:34:3c:34:72:21:dc:70:1b:4d:96:88:58:a7:
                    ce:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:5F:02:AA:51:43:AB:24:08:99:E5:E0:14:A9:DC:44:CA:01:10:40
            X509v3 Authority Key Identifier:
                keyid:10:B2:92:08:4D:7C:28:A5:9A:2C:5B:19:61:29:45:0D:72:33:1C:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BUbAVMC7eQyELqTSpvc9BQYShXywVQyEuVFFdB5AwYwb/1/10B292084D7C28A59A2C5B196129450D72331CB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10B292084D7C28A59A2C5B196129450D72331CB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BUbAVMC7eQyELqTSpvc9BQYShXywVQyEuVFFdB5AwYwb/1/3230312e34362e38322e302f32342d3234203d3e20323730323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.46.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:a4:fa:49:f2:50:91:8e:9e:fa:f2:d7:e1:f7:7a:4d:dd:13:
         f1:c7:e8:ca:22:77:f8:2e:d4:ce:43:b3:69:2a:b9:a7:0d:94:
         e7:49:bd:d6:15:ee:79:08:c1:fb:d4:b6:c1:57:5c:9d:be:de:
         33:cc:57:ee:97:93:c3:5b:31:11:01:8b:9d:aa:d4:0f:37:32:
         26:4b:fe:4e:7a:48:ea:34:8d:5f:bb:4b:a0:46:77:6f:d0:f4:
         c4:e5:99:20:26:2f:07:0e:ab:22:af:76:cb:81:77:fb:57:e3:
         01:d6:09:62:c7:08:cd:94:57:68:55:79:14:f8:de:fc:6b:4e:
         01:6d:be:af:89:cf:64:ce:00:15:3a:7c:18:91:94:29:ca:61:
         0b:07:b0:54:cb:98:e3:05:c6:fe:f1:da:40:22:44:3f:f5:2d:
         dd:a1:71:6f:ff:cd:18:62:a9:d6:de:1d:06:b3:43:b4:89:0b:
         99:43:9b:32:60:84:3b:f3:85:de:78:8f:7f:39:57:ac:24:0b:
         a6:7f:49:04:ea:7a:bb:92:a2:fe:8f:43:d2:02:17:d1:b5:26:
         21:1c:5b:42:bc:aa:95:02:19:b0:9e:60:ea:1b:e7:07:09:fd:
         84:6a:d7:79:5d:ea:c5:d3:13:cd:66:3c:b3:75:d6:17:2e:0b:
         99:23:80:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:02 2024 by rpki-client on console-ams.rpki-client.org