Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/3230302e33392e34382e302f32322d3232203d3e20323731353234.roa
File:                     3230302e33392e34382e302f32322d3232203d3e20323731353234.roa (raw, json)
Hash identifier:          9EY7apw8vm0HkmsbpiQUW6dmLnGVjoF4qsDb8nu5zhk=
Subject key identifier:   0F:02:C5:89:F0:91:9C:14:E7:6E:00:20:5A:30:F5:F0:73:70:2F:7C
Certificate issuer:       /CN=2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647
Certificate serial:       56D8C16E6E208E586FA569875C2D209E570E83BB
Authority key identifier: 2D:D9:7F:5E:85:D5:A9:57:8E:78:94:0C:FD:5B:AE:DF:B8:2E:06:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/3230302e33392e34382e302f32322d3232203d3e20323731353234.roa
Signing time:             Wed 05 Jun 2024 03:45:51 +0000
ROA not before:           Wed 05 Jun 2024 03:40:51 +0000
ROA not after:            Wed 04 Jun 2025 03:45:51 +0000
asID:                     271524
IP address blocks:        200.39.48.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.crl
                          rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 03:20:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:d8:c1:6e:6e:20:8e:58:6f:a5:69:87:5c:2d:20:9e:57:0e:83:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647
        Validity
            Not Before: Jun  5 03:40:51 2024 GMT
            Not After : Jun  4 03:45:51 2025 GMT
        Subject: CN=0F02C589F0919C14E76E00205A30F5F073702F7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cb:c1:58:0a:bc:4b:45:96:ba:2c:89:66:c2:
                    82:5d:63:21:7d:a2:61:75:62:49:7a:2c:ab:75:e4:
                    06:ce:f5:fd:db:8e:a5:48:e5:ef:aa:25:45:0a:69:
                    34:7c:f4:6f:20:29:87:2e:bb:28:f7:07:c2:3c:97:
                    cd:04:f6:d6:c3:09:f3:7d:13:22:9c:39:1a:3e:eb:
                    54:a5:2d:64:0e:51:5f:e9:78:88:82:93:5e:04:1c:
                    0d:f5:3b:60:6b:c2:b2:50:5c:40:f2:eb:69:09:67:
                    69:74:9e:9e:9e:9f:6b:18:11:40:f9:69:5c:47:0f:
                    06:6f:2d:50:e1:3a:36:9b:db:64:7a:d1:77:25:a9:
                    74:5d:d5:93:bb:c2:0f:3a:8f:a2:11:37:4b:04:4a:
                    f6:49:ca:87:9c:37:5f:af:01:fd:c5:df:61:df:27:
                    69:46:af:9b:fe:17:f5:89:65:0c:cb:dd:6f:34:da:
                    6a:3f:d7:90:01:4a:9d:15:ac:0a:86:91:18:f0:83:
                    33:f9:01:ac:aa:94:6c:50:c8:8f:77:d6:0c:17:c3:
                    76:a7:ee:3b:08:85:5f:d8:7e:cc:74:44:8c:54:56:
                    e2:78:92:32:8d:0d:44:f0:3d:a3:58:e5:7c:1e:ee:
                    9b:d2:4c:2e:87:f3:46:b5:38:68:20:be:73:b5:c8:
                    15:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:02:C5:89:F0:91:9C:14:E7:6E:00:20:5A:30:F5:F0:73:70:2F:7C
            X509v3 Authority Key Identifier:
                keyid:2D:D9:7F:5E:85:D5:A9:57:8E:78:94:0C:FD:5B:AE:DF:B8:2E:06:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/3230302e33392e34382e302f32322d3232203d3e20323731353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:5f:65:06:0b:50:4c:95:cb:25:4f:d2:ca:01:55:0d:45:6b:
         af:84:12:10:99:43:dc:88:df:a0:b4:98:9c:73:d1:c0:6f:bb:
         a2:90:73:9a:90:b0:51:c0:26:49:51:a9:66:e4:3b:79:55:ec:
         7e:d4:20:d6:3d:3b:c8:e5:5b:6a:43:78:f0:d4:8b:d8:62:a7:
         8d:f5:26:e4:38:7c:c2:10:f6:cf:b8:cc:4e:43:3c:2d:4a:28:
         15:84:22:4b:92:a3:4f:43:03:f2:d8:cf:e6:a7:b4:ca:92:ae:
         18:f8:b8:77:93:34:d7:40:8e:ec:3f:a6:71:4a:6c:a1:06:e3:
         e6:eb:c8:16:84:f5:d8:44:cc:4f:81:91:43:2b:c7:a8:aa:dc:
         d1:91:e7:98:cf:08:77:7a:d0:e2:d1:13:d3:72:66:4c:29:8a:
         dd:03:d8:ec:1c:76:75:e3:00:57:d3:d2:3f:24:7c:fb:b4:18:
         70:4f:43:da:4e:c9:9f:82:df:fb:b2:6b:9c:13:1e:72:cf:52:
         17:4c:f4:63:6f:30:ab:9d:2a:55:9e:dd:e3:1d:59:37:95:bc:
         ec:f3:24:f3:d7:99:25:23:89:56:11:5d:a3:43:ef:b9:36:45:
         41:ce:5c:ea:72:3c:c7:3f:60:d1:dc:00:4d:b5:d8:71:ca:04:
         3c:79:e8:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 04:45:44 2024 by rpki-client on console-fra.rpki-client.org