Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPUDDij6NEPYDDoGhUMiosZdXqTayX5MBFcnZDQDiqn8/0/3230312e37312e33322e302f32302d3234203d3e20323632373835.roa
File:                     3230312e37312e33322e302f32302d3234203d3e20323632373835.roa (raw, json)
Hash identifier:          4IjsvHGIp7PPRAPzr3eRR6+PU6/hHwUxj7O4SaNtQX4=
Subject key identifier:   06:A0:DD:6E:40:F3:CF:22:46:C0:6C:62:C5:AE:CA:CA:97:98:6F:40
Certificate issuer:       /CN=461D92A9E8A42D313AC69764D8DC730E87AAEC4F
Certificate serial:       0DC68F44CD18437C47657E042558FDBB41B7E987
Authority key identifier: 46:1D:92:A9:E8:A4:2D:31:3A:C6:97:64:D8:DC:73:0E:87:AA:EC:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461D92A9E8A42D313AC69764D8DC730E87AAEC4F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPUDDij6NEPYDDoGhUMiosZdXqTayX5MBFcnZDQDiqn8/0/3230312e37312e33322e302f32302d3234203d3e20323632373835.roa
Signing time:             Mon 16 Sep 2024 00:03:22 +0000
ROA not before:           Sun 15 Sep 2024 23:58:22 +0000
ROA not after:            Mon 15 Sep 2025 00:03:22 +0000
asID:                     262785
IP address blocks:        201.71.32.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EPUDDij6NEPYDDoGhUMiosZdXqTayX5MBFcnZDQDiqn8/0/461D92A9E8A42D313AC69764D8DC730E87AAEC4F.crl
                          rsync://rpki-repo.registro.br/repo/EPUDDij6NEPYDDoGhUMiosZdXqTayX5MBFcnZDQDiqn8/0/461D92A9E8A42D313AC69764D8DC730E87AAEC4F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461D92A9E8A42D313AC69764D8DC730E87AAEC4F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 07:38:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:c6:8f:44:cd:18:43:7c:47:65:7e:04:25:58:fd:bb:41:b7:e9:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=461D92A9E8A42D313AC69764D8DC730E87AAEC4F
        Validity
            Not Before: Sep 15 23:58:22 2024 GMT
            Not After : Sep 15 00:03:22 2025 GMT
        Subject: CN=06A0DD6E40F3CF2246C06C62C5AECACA97986F40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2b:78:3f:15:20:89:03:ef:8d:46:32:44:91:
                    a8:76:5f:fa:2d:11:94:75:56:7c:3b:d2:9d:93:56:
                    fe:f4:7c:a1:c9:5f:35:2e:aa:fc:e4:5c:e2:9d:5d:
                    67:41:59:df:62:fd:9e:ec:e3:ea:d9:64:af:49:af:
                    b9:1b:ca:c4:9b:cb:ce:29:1a:11:9a:b4:ba:86:6b:
                    51:6e:a1:74:72:2b:8a:cf:f2:19:48:23:e8:e6:64:
                    eb:81:21:06:c8:be:1f:89:b5:df:9d:86:c4:75:36:
                    8a:45:9e:bb:39:3f:80:b3:89:9f:b2:f9:ed:c4:27:
                    36:18:de:1b:9e:58:f0:a6:19:50:a5:1c:7c:62:ad:
                    a4:d3:a5:1e:fc:57:9e:eb:fa:15:d4:29:cf:1a:e9:
                    6b:79:2b:fd:d6:d7:e3:be:16:14:08:0c:47:5f:38:
                    16:25:71:40:d4:2c:ce:c3:bb:3f:92:c4:78:c6:9c:
                    33:18:96:14:0a:9b:cc:ef:74:35:30:25:2d:3f:6a:
                    05:cc:b3:fb:24:34:30:41:22:66:8a:b8:85:45:53:
                    76:fb:08:18:a3:fd:66:2b:00:7e:8e:7f:7f:cb:c7:
                    47:c1:83:e9:d5:a2:1c:9e:9a:28:1f:ca:80:1b:5f:
                    20:46:02:25:6c:6d:40:68:b3:e1:07:55:ba:9f:fc:
                    34:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A0:DD:6E:40:F3:CF:22:46:C0:6C:62:C5:AE:CA:CA:97:98:6F:40
            X509v3 Authority Key Identifier:
                keyid:46:1D:92:A9:E8:A4:2D:31:3A:C6:97:64:D8:DC:73:0E:87:AA:EC:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPUDDij6NEPYDDoGhUMiosZdXqTayX5MBFcnZDQDiqn8/0/461D92A9E8A42D313AC69764D8DC730E87AAEC4F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461D92A9E8A42D313AC69764D8DC730E87AAEC4F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPUDDij6NEPYDDoGhUMiosZdXqTayX5MBFcnZDQDiqn8/0/3230312e37312e33322e302f32302d3234203d3e20323632373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.71.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         78:99:a7:e3:3b:9a:7b:fc:bf:d2:9d:bd:00:e4:b2:82:0e:59:
         90:1b:7d:ec:31:a4:aa:bf:3f:f5:d6:b4:8e:b3:1a:2e:c2:35:
         e9:e4:a4:c1:16:f5:63:2c:c3:39:b0:37:f5:b7:6f:4f:14:b0:
         58:23:b5:ec:28:c6:29:3c:53:16:f0:44:ff:0b:ee:04:d3:84:
         47:13:fe:77:7a:a5:a1:cf:e9:8f:91:58:35:db:6c:0a:39:f6:
         02:7e:39:5b:e2:33:cb:44:85:48:1c:f2:d2:fd:ea:56:9c:da:
         9f:95:4a:92:f5:35:84:24:1e:b1:fc:3b:f7:50:63:7e:1d:78:
         15:52:6c:b6:72:a2:d4:9f:43:bb:3c:2d:63:4a:61:29:fb:55:
         07:d6:cf:c1:b0:5a:78:12:4b:44:5f:a5:4a:fb:b6:67:93:fe:
         b5:7f:9b:91:8d:00:36:23:ff:d3:e7:81:e1:18:fd:ca:06:d8:
         13:98:49:a6:5b:84:3e:21:51:78:b3:f0:95:1b:e6:7c:6a:cc:
         20:b0:75:35:94:4a:96:18:d5:36:e8:4b:62:47:e3:50:b8:22:
         26:97:18:41:c4:80:7d:43:c4:c2:a4:ee:9f:7a:b2:c3:27:7a:
         18:e7:50:bf:20:22:a9:00:7f:a7:88:52:3f:03:6e:04:5b:53:
         3c:fc:43:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:34:10 2024 by rpki-client on console-ams.rpki-client.org