Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e35312e302f32342d3234203d3e20323732373130.roa
File:                     3230312e32332e35312e302f32342d3234203d3e20323732373130.roa (raw, json)
Hash identifier:          n2/zhY/Yz855XpFOjSwCLzRIQb36Ho1H8X3SrKMzpG0=
Subject key identifier:   DC:20:CE:9B:D0:95:23:F1:A5:1D:4C:35:41:EE:75:54:DC:03:F1:02
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       4E8B7A34AE6DFCEA232ABC3C04211D99B2265A05
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e35312e302f32342d3234203d3e20323732373130.roa
Signing time:             Fri 30 Aug 2024 17:47:01 +0000
ROA not before:           Fri 30 Aug 2024 17:42:01 +0000
ROA not after:            Fri 29 Aug 2025 17:47:01 +0000
asID:                     272710
IP address blocks:        201.23.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 10:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:8b:7a:34:ae:6d:fc:ea:23:2a:bc:3c:04:21:1d:99:b2:26:5a:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Aug 30 17:42:01 2024 GMT
            Not After : Aug 29 17:47:01 2025 GMT
        Subject: CN=DC20CE9BD09523F1A51D4C3541EE7554DC03F102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:28:4c:fd:ef:2e:9f:8a:ee:b7:78:09:b8:06:
                    72:10:4e:6a:14:13:11:d3:ef:c4:a2:7c:aa:53:7a:
                    79:79:cf:6d:23:3e:d6:ea:18:e2:62:54:67:74:ca:
                    72:a1:fb:f3:64:10:36:70:6e:63:69:a1:26:15:09:
                    d6:15:24:05:0f:e8:d3:c6:5a:7c:5a:76:d4:24:5c:
                    45:2b:a9:43:e2:00:ad:b1:c7:03:80:a1:bd:36:a9:
                    7c:32:84:da:1b:f4:af:cf:ca:f1:6f:f8:45:2d:b6:
                    74:7c:cc:58:3c:05:58:03:96:a2:86:d1:63:a3:cc:
                    7a:60:b3:aa:d6:52:33:d4:50:29:aa:bf:42:a4:62:
                    20:9e:f5:f0:d0:e2:d8:47:61:27:17:1f:d0:b4:a7:
                    d9:ee:cb:2a:bc:cf:6c:2a:81:34:f6:c3:d8:e2:09:
                    81:b6:d1:bf:9a:7c:3f:1b:43:ce:b3:bc:c5:70:71:
                    eb:22:92:23:ad:37:71:c9:7b:e8:f0:20:20:45:61:
                    a6:c3:fb:ba:e8:73:54:04:5c:2b:cf:99:6c:08:24:
                    ed:63:8b:af:c2:43:1d:1b:34:c7:9a:d3:e4:6e:83:
                    a9:40:13:75:38:1f:27:a0:ba:2e:a5:9c:9a:8d:ef:
                    1e:bf:6f:0f:4b:c2:0c:a9:55:07:de:3b:e3:66:51:
                    21:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:20:CE:9B:D0:95:23:F1:A5:1D:4C:35:41:EE:75:54:DC:03:F1:02
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e35312e302f32342d3234203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.23.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:13:10:9a:92:a3:69:b9:aa:f9:de:ea:ba:28:e5:d4:67:9a:
         54:e3:ed:4c:e7:89:a8:c2:f6:ce:62:3d:e5:31:de:20:1c:d4:
         81:9c:6f:64:71:9b:6e:66:23:f3:cc:cb:ec:14:d4:3e:ae:a0:
         1a:f1:24:dc:b0:f3:b5:fc:21:c8:29:27:07:c8:54:4f:f0:18:
         15:42:86:15:ad:84:e1:19:c2:79:1d:03:07:51:bc:a9:bf:9b:
         2e:35:9c:d7:ca:04:1f:2c:55:62:6c:82:73:ae:22:89:af:d4:
         14:8f:e4:8e:d1:b8:42:f5:89:a8:c5:01:20:85:ef:f3:29:d5:
         f8:0f:ae:77:6c:b4:f8:3d:ea:e1:5b:69:64:6c:ec:b8:55:ce:
         46:5f:4e:f2:c3:28:a1:5f:f3:b0:bd:59:83:e2:d3:80:4a:a4:
         b2:56:78:ca:92:24:26:4c:cf:13:a8:e2:21:7e:20:3f:98:9c:
         01:cb:6b:17:99:37:df:09:80:d1:3e:26:e6:9e:4d:a0:51:01:
         65:50:89:04:09:ca:e7:82:62:4f:7e:dc:f6:8b:62:32:3b:1e:
         ef:f4:45:d1:e2:5d:e0:29:51:b0:67:d3:7c:74:61:c8:09:e6:
         83:26:7d:54:28:2c:92:78:bc:6b:54:73:2f:95:73:44:9f:a2:
         4f:4b:58:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 10:46:44 2024 by rpki-client on console-fra.rpki-client.org