Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e35382e302f32342d3234203d3e20323732373130.roa
File:                     3230312e32332e35382e302f32342d3234203d3e20323732373130.roa (raw, json)
Hash identifier:          nqxUEqB7sUk7eLD1xwtx53CGpmgxTXcOKZ265xJhFi0=
Subject key identifier:   4F:B7:BF:17:74:CD:9F:DE:75:EE:35:8F:33:CD:9A:E8:9B:BD:8D:B5
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       1BCF924DB7D9021DA4DC4C067F9A95DEFF2BD66B
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e35382e302f32342d3234203d3e20323732373130.roa
Signing time:             Fri 30 Aug 2024 17:47:01 +0000
ROA not before:           Fri 30 Aug 2024 17:42:01 +0000
ROA not after:            Fri 29 Aug 2025 17:47:01 +0000
asID:                     272710
IP address blocks:        201.23.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 10:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:cf:92:4d:b7:d9:02:1d:a4:dc:4c:06:7f:9a:95:de:ff:2b:d6:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Aug 30 17:42:01 2024 GMT
            Not After : Aug 29 17:47:01 2025 GMT
        Subject: CN=4FB7BF1774CD9FDE75EE358F33CD9AE89BBD8DB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:63:5a:26:d6:12:ff:f2:d3:75:5f:1e:a7:c7:
                    61:cd:c3:b1:29:8a:b9:8b:f7:75:52:1f:c0:b9:8e:
                    4e:4b:d1:de:64:a4:fd:c4:a7:90:90:5e:13:99:b2:
                    16:12:30:10:5f:fc:7a:54:48:78:b3:26:fd:d7:7d:
                    ad:76:ec:60:e8:93:61:11:31:60:e0:3a:a6:84:a5:
                    0d:46:16:3d:5c:fa:a4:00:36:1f:fb:0f:6b:83:02:
                    86:e4:45:09:ec:16:5a:05:5f:f9:c0:b5:27:1d:af:
                    b1:cd:30:f6:44:55:9d:c1:a0:68:11:44:94:00:e4:
                    1b:77:0a:3e:93:19:02:07:3d:26:85:e5:61:0d:ef:
                    d4:12:5f:3f:7d:97:f1:6c:90:f1:c4:b5:4c:9a:f7:
                    e0:34:70:28:7b:1a:3c:e8:a2:41:1e:7d:aa:f1:18:
                    bd:c2:4f:53:c9:d2:80:0a:f9:24:12:c7:24:2c:34:
                    d2:59:cf:c2:1a:bd:c3:a3:de:fd:6b:f0:99:82:50:
                    3c:53:eb:9f:a9:f8:47:f4:fc:94:2f:21:77:00:9d:
                    80:3e:cd:1a:28:eb:76:46:26:ed:8b:a2:82:f7:f8:
                    d4:43:65:5a:44:9c:79:04:b3:b6:f5:ee:ef:fd:00:
                    08:77:36:42:f5:f5:ec:9f:40:95:51:9d:0c:fb:c5:
                    cd:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:B7:BF:17:74:CD:9F:DE:75:EE:35:8F:33:CD:9A:E8:9B:BD:8D:B5
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e35382e302f32342d3234203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.23.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:5e:9d:c7:98:40:93:53:f3:23:69:70:d3:76:b4:8c:d4:0b:
         42:0d:da:39:22:82:ae:41:52:80:f6:32:e9:2a:86:47:56:e8:
         67:ce:cb:e4:e2:dd:0f:4d:2d:52:59:53:db:a3:46:11:63:99:
         f0:45:c9:58:d1:a3:2c:0e:43:a4:16:42:ba:e8:1c:f4:b1:78:
         db:3b:b8:f2:3b:7b:fb:31:3f:59:5d:c9:e5:f4:62:85:b9:8a:
         a5:a3:d5:ae:76:fd:c8:87:f7:ad:d6:94:7a:fb:11:ef:f0:34:
         f9:cf:20:34:46:5c:45:5d:90:ee:38:5f:b1:37:ee:5e:ea:be:
         7f:f7:4d:7b:73:de:cb:c4:b7:c8:78:e8:0d:ab:9d:a6:68:c4:
         da:78:45:60:a2:cd:21:dc:27:cb:fa:be:61:1b:68:b9:f0:16:
         69:b2:4c:b3:f8:9f:16:3c:2c:6d:0c:25:6c:5e:0e:7d:39:45:
         f1:3f:61:97:32:70:63:95:99:e2:15:f7:97:81:88:b3:0e:fb:
         a0:07:9d:5d:ec:18:aa:36:09:1f:8e:9e:fe:ce:36:5d:97:99:
         72:bb:6f:fe:0b:a8:15:cb:71:9d:a1:c2:d5:34:05:4b:bf:89:
         74:3d:38:8b:e6:47:3e:27:79:4f:d4:73:d8:8a:62:93:53:20:
         84:95:74:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 10:46:44 2024 by rpki-client on console-fra.rpki-client.org