Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e34362e302f32342d3234203d3e20323732373130.roa
File:                     3230312e32332e34362e302f32342d3234203d3e20323732373130.roa (raw, json)
Hash identifier:          jIpkuQfVH1o7xDF3wxteNmDUKI2HzPu7JAlTgBp7yR0=
Subject key identifier:   4F:0C:53:CB:CF:D2:A4:74:53:5C:61:10:F3:E8:3E:22:C3:E2:2F:7A
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       4CE7F5D0D80E5C7726CE98B6908D3C1ECEC00884
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e34362e302f32342d3234203d3e20323732373130.roa
Signing time:             Fri 30 Aug 2024 17:47:01 +0000
ROA not before:           Fri 30 Aug 2024 17:42:01 +0000
ROA not after:            Fri 29 Aug 2025 17:47:01 +0000
asID:                     272710
IP address blocks:        201.23.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 15:35:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:e7:f5:d0:d8:0e:5c:77:26:ce:98:b6:90:8d:3c:1e:ce:c0:08:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Aug 30 17:42:01 2024 GMT
            Not After : Aug 29 17:47:01 2025 GMT
        Subject: CN=4F0C53CBCFD2A474535C6110F3E83E22C3E22F7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:20:53:a1:9b:6a:02:79:ae:3d:a6:3e:6b:89:
                    07:a3:a8:9b:5a:6e:88:de:26:8c:f1:5e:7b:ff:a5:
                    9a:e0:54:9f:91:db:60:a2:14:72:dc:80:0a:9b:f5:
                    39:23:1f:40:ba:e0:13:5e:97:7f:1a:c3:98:f9:49:
                    69:13:8e:ce:4f:9b:3a:cd:45:5d:f5:47:a2:53:cc:
                    f6:6b:ab:89:40:f7:f0:8a:45:d7:1a:78:e3:e1:35:
                    53:fe:91:96:f1:05:40:fc:44:bf:cc:cf:8c:8c:c6:
                    a9:f4:df:0b:46:6f:ab:33:21:2f:22:47:d1:46:d9:
                    19:70:73:25:98:4e:0a:6c:a4:8e:90:c4:39:16:a8:
                    e8:27:0d:c0:9c:e9:d2:ae:b5:cd:08:d5:c5:35:3c:
                    83:eb:95:27:82:b3:f1:31:f6:84:8d:f0:8c:10:40:
                    5c:fb:b1:69:b9:17:36:84:2e:60:9a:b8:4b:0d:cc:
                    c2:dc:72:30:b0:ec:a8:2b:e1:3c:10:90:03:17:13:
                    5c:90:e9:12:06:a7:e9:4c:47:6e:72:6e:b8:1a:d9:
                    76:d9:97:b6:60:5f:f9:f1:e9:5a:51:c1:e5:0e:fe:
                    db:e6:4f:13:f1:56:eb:78:20:92:9e:86:28:9d:22:
                    1c:06:d4:c5:18:46:8f:fc:f1:40:a7:3b:34:db:2d:
                    ea:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:0C:53:CB:CF:D2:A4:74:53:5C:61:10:F3:E8:3E:22:C3:E2:2F:7A
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e34362e302f32342d3234203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.23.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:c9:66:45:22:77:af:71:ac:0f:b4:50:f1:ba:28:24:70:e0:
         68:36:99:22:05:65:11:b7:d2:21:d1:2b:aa:35:aa:2c:1f:5c:
         a6:a5:28:99:98:37:c4:a3:b4:45:da:0e:2c:52:15:bb:af:10:
         14:d1:d0:60:5a:a1:45:13:52:ea:aa:cb:f2:aa:a2:a7:cb:c4:
         d6:bf:86:3f:36:c9:c0:54:b1:20:b9:98:2d:79:2b:a6:38:91:
         fb:3d:c4:bf:51:36:d5:50:ee:e5:2b:59:ef:cd:14:65:e1:e5:
         b0:3a:32:e6:f5:91:59:79:35:ae:9b:15:e4:20:5e:33:6f:ed:
         57:ed:62:d1:75:57:1d:01:e1:ce:59:06:41:a6:0f:52:fe:c4:
         7a:80:48:d8:75:ff:21:52:1f:33:f8:8f:70:77:6a:af:d2:49:
         32:e2:4b:3e:db:76:b2:a9:8b:d0:5d:cc:10:4c:48:af:4c:41:
         ac:05:9b:73:e8:96:f5:9c:e5:0e:ce:41:77:c3:cf:c7:57:04:
         03:24:38:5b:cc:ba:b0:5c:10:e5:36:48:7a:87:bc:63:d0:5a:
         da:43:2b:28:d8:9a:c6:1e:5b:63:0e:a5:56:03:c7:0b:52:82:
         cd:0c:ff:7e:d4:6a:73:cb:c9:2f:57:da:b9:28:d0:8a:0e:e4:
         92:93:a4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:13:49 2025 by rpki-client