Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/3230312e3134382e3231362e302f32322d3332203d3e20323632393532.roa
File:                     3230312e3134382e3231362e302f32322d3332203d3e20323632393532.roa (raw, json)
Hash identifier:          YYY5LHvNiOIXLbX8zsHtfkroVpvH3VRV3a53S1TPPwQ=
Subject key identifier:   81:24:37:A9:EC:EB:6D:CA:5F:89:52:77:F7:92:5F:91:51:D3:F5:9A
Certificate issuer:       /CN=4F91864780E3C640327E24B527D2248C0C5CAD25
Certificate serial:       5301AE4585430E709B2CC9AD31E02742FDE81972
Authority key identifier: 4F:91:86:47:80:E3:C6:40:32:7E:24:B5:27:D2:24:8C:0C:5C:AD:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F91864780E3C640327E24B527D2248C0C5CAD25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/3230312e3134382e3231362e302f32322d3332203d3e20323632393532.roa
Signing time:             Tue 10 Sep 2024 12:10:34 +0000
ROA not before:           Tue 10 Sep 2024 12:05:34 +0000
ROA not after:            Tue 09 Sep 2025 12:10:34 +0000
asID:                     262952
IP address blocks:        201.148.216.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/4F91864780E3C640327E24B527D2248C0C5CAD25.crl
                          rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/4F91864780E3C640327E24B527D2248C0C5CAD25.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F91864780E3C640327E24B527D2248C0C5CAD25.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 00:51:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:01:ae:45:85:43:0e:70:9b:2c:c9:ad:31:e0:27:42:fd:e8:19:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F91864780E3C640327E24B527D2248C0C5CAD25
        Validity
            Not Before: Sep 10 12:05:34 2024 GMT
            Not After : Sep  9 12:10:34 2025 GMT
        Subject: CN=812437A9ECEB6DCA5F895277F7925F9151D3F59A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e6:af:dd:cc:60:51:5d:46:3f:89:cf:ce:01:
                    a4:d1:44:1f:0b:c8:94:8f:50:10:23:0e:ac:29:56:
                    5c:93:b3:08:0f:59:bc:06:3c:1a:d9:0d:6d:aa:ee:
                    28:c6:37:cd:6c:3c:12:39:f2:57:9a:62:20:90:59:
                    b8:a7:c1:6d:c0:fa:72:2a:c6:ce:38:57:a6:e6:37:
                    42:f1:68:d1:75:d0:85:9e:32:54:e5:27:bf:b0:35:
                    a1:3e:8d:23:9d:2f:a2:3b:c1:46:df:16:13:42:e3:
                    60:c8:bd:26:8a:43:dd:67:c4:a0:20:7a:7f:34:e6:
                    38:40:a3:88:05:71:b5:53:82:09:ce:0b:4b:63:ea:
                    7c:2f:a9:0a:f7:0a:15:38:b6:51:61:42:92:78:67:
                    15:1d:16:97:2c:fa:d2:f7:4c:15:7c:5e:8e:7b:12:
                    da:f0:61:9e:a1:d9:95:e3:d9:56:23:ce:66:88:c4:
                    02:bc:a3:07:76:bf:7b:b7:e8:e7:c4:54:84:8f:2b:
                    17:a1:32:1e:c1:92:7a:e9:08:b2:9b:49:82:da:fa:
                    82:1a:c1:d3:21:72:8d:71:f8:60:e9:dc:5d:62:9e:
                    1e:f7:c8:40:09:67:04:f7:5d:08:88:c2:c3:fa:de:
                    91:f5:00:8d:26:1d:33:9e:53:25:08:2d:f9:53:85:
                    69:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:24:37:A9:EC:EB:6D:CA:5F:89:52:77:F7:92:5F:91:51:D3:F5:9A
            X509v3 Authority Key Identifier:
                keyid:4F:91:86:47:80:E3:C6:40:32:7E:24:B5:27:D2:24:8C:0C:5C:AD:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/4F91864780E3C640327E24B527D2248C0C5CAD25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F91864780E3C640327E24B527D2248C0C5CAD25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/3230312e3134382e3231362e302f32322d3332203d3e20323632393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.148.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:e6:98:31:d8:12:31:9b:32:5a:d4:dc:b8:bf:23:f7:4b:ed:
         af:a3:3e:99:49:b2:44:67:24:56:f0:c8:b7:b3:7a:6e:e9:0f:
         20:3a:96:b1:41:81:bd:c4:77:11:cb:5d:45:61:9b:85:64:8d:
         ba:f9:e9:15:87:a2:d7:69:1b:9d:17:39:69:a8:f4:a8:3d:b0:
         31:9b:3a:4c:4e:13:ea:66:0f:bb:d2:cc:32:98:79:0e:25:15:
         a4:69:d5:e7:83:d1:9e:16:92:ec:e1:a7:d3:20:5b:5c:e2:b2:
         bb:63:21:26:66:4e:52:d2:3e:1d:6a:59:2e:32:3f:f6:3f:b1:
         9a:9b:b2:1f:3f:62:69:4a:b1:21:b2:59:cf:f0:eb:cd:65:06:
         8c:7d:ae:43:3e:74:e7:d8:a2:df:ff:4e:67:e5:7c:6c:7d:d4:
         13:2f:2a:f7:d4:bb:9b:5c:fc:6b:21:95:37:09:2d:6e:40:cf:
         2f:5c:d7:a2:c1:2d:55:d7:60:8a:a9:ba:2c:16:f6:09:74:ec:
         b7:32:86:dd:46:1c:43:1a:bb:67:53:25:88:4d:0b:be:1c:d5:
         3c:92:63:4e:a5:9f:99:61:24:0d:07:24:17:8e:f4:78:bc:0f:
         f5:a9:ab:50:61:ef:79:44:62:21:8b:3b:87:91:7f:56:f0:6e:
         9d:5c:62:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:25:37 2024 by rpki-client on console-ams.rpki-client.org