Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/3230302e35322e3233332e302f32342d3234203d3e20323731303139.roa
File:                     3230302e35322e3233332e302f32342d3234203d3e20323731303139.roa (raw, json)
Hash identifier:          5kcFmwxfR4f2cUIpJIX82uoKZVgh2JwUSNEcxOPSaGg=
Subject key identifier:   9F:2D:87:3B:A4:61:F3:4F:83:30:A7:B1:D1:2A:42:81:9D:D4:31:6D
Certificate issuer:       /CN=6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5
Certificate serial:       1887E2AD3E5E5D0F45BA9382E304FD4C6C3E0303
Authority key identifier: 6E:0E:6A:39:72:47:D4:96:E3:9C:0A:78:DF:B1:E5:1A:71:DB:AA:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/3230302e35322e3233332e302f32342d3234203d3e20323731303139.roa
Signing time:             Tue 23 Apr 2024 19:24:46 +0000
ROA not before:           Tue 23 Apr 2024 19:19:46 +0000
ROA not after:            Tue 22 Apr 2025 19:24:46 +0000
asID:                     271019
IP address blocks:        200.52.233.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.crl
                          rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:13:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:87:e2:ad:3e:5e:5d:0f:45:ba:93:82:e3:04:fd:4c:6c:3e:03:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5
        Validity
            Not Before: Apr 23 19:19:46 2024 GMT
            Not After : Apr 22 19:24:46 2025 GMT
        Subject: CN=9F2D873BA461F34F8330A7B1D12A42819DD4316D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:54:9c:8a:fb:91:04:04:a0:ee:0e:21:90:a9:
                    d5:4d:2f:d2:0a:0e:c8:34:2c:ed:ee:45:57:5a:dc:
                    4e:39:16:41:e0:50:6b:db:2f:6d:84:fd:4e:d6:76:
                    b1:36:8e:ca:8a:79:7f:81:1d:bc:fb:dd:00:14:49:
                    1b:d2:b9:53:70:e6:b3:ca:bd:fb:a7:65:71:f1:0e:
                    ee:0c:fd:bb:5f:ae:a7:d7:78:1f:58:49:84:2d:2d:
                    30:0f:9f:e8:3b:cf:34:3e:f3:7c:2c:20:fc:b1:94:
                    0a:1a:5f:97:92:cc:7e:a7:25:1c:b6:85:ac:01:95:
                    92:cd:bf:42:9d:a1:16:fa:2e:98:5d:5a:ff:40:fe:
                    5d:b6:13:46:c4:15:bb:d1:81:3d:26:75:43:4c:47:
                    a7:4b:97:3f:73:63:da:d0:6e:b3:67:6c:f9:13:86:
                    1f:6e:f9:63:bf:14:54:69:d8:91:e6:60:20:f9:9a:
                    08:cd:d4:e4:68:0c:fe:7a:ab:ae:8d:82:aa:a4:67:
                    8a:34:2d:e2:fd:7d:c7:c2:9b:87:ab:69:a1:86:60:
                    ed:4b:ab:2a:9a:32:79:48:9c:3e:21:c2:dc:5b:03:
                    e1:a0:10:0e:e8:13:7e:9c:f7:a3:97:fe:17:65:74:
                    e1:49:e7:cc:aa:eb:b5:d6:b9:cb:d6:0d:b2:3c:08:
                    f4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:2D:87:3B:A4:61:F3:4F:83:30:A7:B1:D1:2A:42:81:9D:D4:31:6D
            X509v3 Authority Key Identifier:
                keyid:6E:0E:6A:39:72:47:D4:96:E3:9C:0A:78:DF:B1:E5:1A:71:DB:AA:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/3230302e35322e3233332e302f32342d3234203d3e20323731303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.52.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:76:4c:ab:96:d1:ca:c9:6a:31:e3:b1:46:5d:f1:da:bd:a2:
         1b:a8:2b:e0:ba:bc:02:f8:1b:28:e1:8c:b5:c9:af:cf:b0:fd:
         50:de:9a:3e:c6:63:b4:8b:42:00:f3:8c:26:54:21:35:35:b8:
         92:4b:f5:4e:3a:96:bc:8e:69:3e:0d:2f:ee:71:a4:90:48:3b:
         5a:ea:53:ae:5d:a0:0f:d6:f5:c2:75:db:ae:52:77:f4:49:38:
         28:66:13:51:dd:57:22:d2:91:ec:54:c2:80:73:71:25:d5:29:
         5c:b0:6b:84:f4:8e:cd:e7:fd:8f:93:2c:6e:74:9a:1b:a4:a1:
         36:ef:08:32:bc:b6:be:6b:93:e3:b5:39:ed:74:59:19:4b:dc:
         75:cf:f3:fd:18:d0:a8:54:2b:27:9c:63:5a:06:57:6e:cc:9f:
         88:13:62:ff:9b:98:22:e0:7e:ef:66:93:40:d2:66:3c:2e:8f:
         b4:94:77:f5:c2:90:a1:e9:0a:0b:66:6d:fd:34:11:df:da:6f:
         22:fb:c8:29:f8:4a:d5:05:74:08:7e:94:a8:e3:17:43:85:22:
         1e:fd:7e:16:3d:17:55:d0:04:09:f5:ff:82:41:80:4b:d0:a2:
         a5:85:89:1f:ae:f9:cf:2a:d8:09:f5:ee:f5:43:e5:2e:d2:5b:
         76:85:7d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:56:34 2024 by rpki-client on console-fra.rpki-client.org