Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e34352e302f32342d3234203d3e20323732373130.roa
File:                     3230312e32332e34352e302f32342d3234203d3e20323732373130.roa (raw, json)
Hash identifier:          R3bZ2aYFIgjsJen9UI8r1RVJM+Rjpp0FeBwlZC3G05w=
Subject key identifier:   0F:B8:82:E4:4F:5E:EC:B8:0C:E7:78:9B:93:4F:29:10:30:5F:2A:6E
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       51E581976E91EC7BA5900B3973D31307E4EC0595
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e34352e302f32342d3234203d3e20323732373130.roa
Signing time:             Fri 30 Aug 2024 17:47:01 +0000
ROA not before:           Fri 30 Aug 2024 17:42:01 +0000
ROA not after:            Fri 29 Aug 2025 17:47:01 +0000
asID:                     272710
IP address blocks:        201.23.45.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 10:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:e5:81:97:6e:91:ec:7b:a5:90:0b:39:73:d3:13:07:e4:ec:05:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Aug 30 17:42:01 2024 GMT
            Not After : Aug 29 17:47:01 2025 GMT
        Subject: CN=0FB882E44F5EECB80CE7789B934F2910305F2A6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:93:20:c7:57:fc:5d:f5:28:ab:bd:81:95:d7:
                    c6:a9:32:f0:07:ac:b6:b0:95:72:2e:96:72:3b:aa:
                    f9:55:f1:ae:20:08:70:15:e3:29:55:1d:2e:87:f3:
                    2b:06:25:da:c9:89:ae:ba:4e:32:f8:4a:00:af:a9:
                    63:fe:09:e2:b8:4a:d9:75:f3:43:cd:43:75:97:6f:
                    31:62:01:21:d1:3f:3c:97:90:5e:ae:28:d3:ff:69:
                    b4:2f:d3:e7:a8:ab:d5:34:83:1d:73:9f:5e:c7:16:
                    3c:2f:ac:4a:db:14:40:82:08:1b:cd:99:1a:78:3e:
                    68:b5:eb:74:4c:27:dd:ec:d8:77:df:27:a6:80:0f:
                    3c:b9:56:70:1e:15:c0:85:49:c5:d2:c7:a0:93:e9:
                    a8:a5:ff:a4:fb:cc:7b:05:74:2d:82:51:b9:79:c9:
                    c8:6b:6b:43:40:75:95:7b:80:4b:03:d4:9d:c6:8e:
                    85:c7:44:e3:e5:d0:2e:76:6c:8f:27:cc:30:6c:65:
                    1a:30:5d:66:db:b0:5e:ed:e0:b2:33:fc:05:75:db:
                    3e:cd:10:89:14:8d:74:d7:a1:90:73:fe:e5:c2:6c:
                    91:7e:fb:3a:cf:a4:23:f7:13:80:35:33:51:7c:a3:
                    62:b1:e3:39:27:ca:a4:f1:6b:ec:28:26:ae:dd:3f:
                    aa:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:B8:82:E4:4F:5E:EC:B8:0C:E7:78:9B:93:4F:29:10:30:5F:2A:6E
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e34352e302f32342d3234203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.23.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:ce:1a:b4:be:54:94:2d:9c:b7:43:de:e4:ce:92:de:4e:71:
         a7:46:20:11:2f:01:f7:f6:1b:92:f8:d4:98:94:8c:56:77:88:
         4f:ec:5e:06:90:41:c5:cc:47:e4:3b:63:ae:00:29:1d:9c:eb:
         fb:0d:fe:76:a9:f6:1d:98:34:a1:e6:7f:74:97:89:ce:17:42:
         c9:48:00:42:00:86:0e:72:cc:08:a3:2d:ca:02:d1:aa:75:04:
         97:84:ae:ab:1a:88:0c:ed:60:72:07:f2:40:52:6e:e0:d4:25:
         09:f1:46:8e:67:37:b2:36:00:50:a7:cb:fb:08:0b:d1:78:4d:
         a7:3a:36:5b:97:41:f8:8d:d6:79:ea:ad:fd:50:7b:ed:6d:ac:
         af:1a:0a:ae:0a:16:f1:48:19:0b:4f:78:37:b0:cc:b7:4a:61:
         61:b9:98:2f:df:17:94:80:0e:f3:c9:8e:9a:c5:9f:fd:67:c2:
         7e:27:fe:df:80:6f:b3:7c:67:ee:b7:02:cf:94:7f:cd:b9:9e:
         08:bc:d5:57:22:fa:16:2a:cc:46:10:75:48:38:f0:8a:b0:93:
         cf:3e:55:ac:2d:30:ad:05:11:dd:71:b8:8f:f0:db:f0:66:04:
         e8:7f:68:2c:85:c3:e8:72:ff:e9:41:ee:fe:37:61:6c:02:75:
         bf:59:7a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 10:46:44 2024 by rpki-client on console-fra.rpki-client.org