Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/3230302e35322e3233342e302f32342d3234203d3e20323731303139.roa
File:                     3230302e35322e3233342e302f32342d3234203d3e20323731303139.roa (raw, json)
Hash identifier:          hZF37PwxLWVeFaP0Voh9Fk7VJ5xfpH5MpW7Y9DGBf1o=
Subject key identifier:   CD:68:2D:0F:99:93:3C:7D:3C:ED:97:B9:DF:69:22:C9:32:76:C9:47
Certificate issuer:       /CN=6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5
Certificate serial:       0652F415B79470B370828D3B70DD6204C6622F48
Authority key identifier: 6E:0E:6A:39:72:47:D4:96:E3:9C:0A:78:DF:B1:E5:1A:71:DB:AA:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/3230302e35322e3233342e302f32342d3234203d3e20323731303139.roa
Signing time:             Tue 23 Apr 2024 19:24:46 +0000
ROA not before:           Tue 23 Apr 2024 19:19:46 +0000
ROA not after:            Tue 22 Apr 2025 19:24:46 +0000
asID:                     271019
IP address blocks:        200.52.234.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.crl
                          rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:13:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:52:f4:15:b7:94:70:b3:70:82:8d:3b:70:dd:62:04:c6:62:2f:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5
        Validity
            Not Before: Apr 23 19:19:46 2024 GMT
            Not After : Apr 22 19:24:46 2025 GMT
        Subject: CN=CD682D0F99933C7D3CED97B9DF6922C93276C947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:29:57:12:92:7a:ed:7b:31:84:04:c8:7b:60:
                    54:74:f2:47:5f:c0:a1:ed:91:da:47:e2:06:27:8a:
                    3a:a6:ed:ae:4e:27:07:37:59:d6:7d:c0:00:62:de:
                    e8:fc:11:e6:b9:a2:9b:c8:58:97:36:35:7a:c7:8b:
                    a0:b3:c1:23:1e:39:cd:ca:66:ae:a5:93:2b:c2:3b:
                    f2:aa:6f:03:67:a0:28:cb:c9:26:24:f5:c5:31:94:
                    db:4a:8d:cc:44:db:79:97:48:6f:53:ba:1f:ab:1b:
                    d0:7f:26:4c:31:41:86:3e:a8:c6:05:10:a1:96:8c:
                    1c:84:e4:e9:aa:7e:79:4c:96:54:dd:7c:8d:db:39:
                    68:2a:1b:d1:c4:c3:9a:dd:c4:f7:1f:d7:06:3d:85:
                    65:89:ab:a0:b4:a5:b3:d3:a3:be:90:cc:86:c9:37:
                    05:03:87:fc:85:55:14:bc:5c:d8:72:fe:df:d1:11:
                    54:f9:cc:f2:10:59:55:2b:99:d5:5c:ae:1c:00:6a:
                    37:0d:9c:c7:5a:03:04:3c:1e:7b:51:a3:2f:47:e7:
                    2f:64:02:3c:a0:37:a3:54:c6:87:66:88:10:71:8b:
                    26:12:cd:54:a7:e4:46:54:0b:da:92:95:9e:b4:18:
                    a8:da:c8:bd:85:76:ff:81:88:c8:b0:b1:3f:24:c4:
                    ed:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:68:2D:0F:99:93:3C:7D:3C:ED:97:B9:DF:69:22:C9:32:76:C9:47
            X509v3 Authority Key Identifier:
                keyid:6E:0E:6A:39:72:47:D4:96:E3:9C:0A:78:DF:B1:E5:1A:71:DB:AA:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/3230302e35322e3233342e302f32342d3234203d3e20323731303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.52.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:e6:40:d4:2a:4a:be:eb:45:d7:95:f8:0b:d8:71:96:28:c9:
         2b:37:77:5b:10:d1:66:3e:31:f3:f2:f5:d3:57:46:95:b1:34:
         7e:ca:dd:53:7e:2d:10:3f:6d:cc:5b:03:75:b1:e6:a1:e8:02:
         1b:cd:78:cc:65:68:bd:17:ee:d9:6d:65:fd:3f:76:b4:37:0f:
         45:ea:ae:88:42:40:f1:d4:8f:c9:72:80:7f:20:43:5e:c6:de:
         eb:6f:ca:ca:d7:16:e0:2f:0b:6c:7c:a9:48:5f:29:9b:49:03:
         e0:c4:c3:ff:fc:4d:62:e8:ea:04:3f:7b:58:28:b1:be:08:89:
         89:c2:18:dc:d7:af:5c:ea:f1:6e:76:a1:7b:e6:34:7c:26:80:
         8f:6f:3f:57:32:0a:a1:31:49:27:f4:a2:2c:d2:b5:68:f0:37:
         d9:a8:fa:6c:b8:7c:21:29:51:31:1d:79:ec:3b:4c:0b:ec:9f:
         d4:bb:b9:1b:b8:7b:e2:d9:15:1f:21:3a:73:db:86:a7:36:f4:
         dd:ec:4d:91:a6:32:b5:3f:e2:15:b7:79:7f:dc:6f:c5:e3:fc:
         8f:f9:e3:af:0a:8a:89:be:4f:90:20:41:b1:40:f8:17:6d:f6:
         bb:59:0c:e8:36:aa:8e:8c:3b:73:f7:be:18:7b:51:66:12:d1:
         18:3f:eb:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:56:34 2024 by rpki-client on console-fra.rpki-client.org