Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3136302e302f32342d3234203d3e20323632353835.roa
File:                     3230312e35352e3136302e302f32342d3234203d3e20323632353835.roa (raw, json)
Hash identifier:          Qz0J8XF938Ji6NaQqJCaIl0paWNIjSHQi4H6rkWKNY0=
Subject key identifier:   2C:DC:DA:E8:B6:5D:30:49:6F:5A:D6:6D:FB:BD:81:83:FF:7D:1F:56
Certificate issuer:       /CN=5AC853AE3F9CB62CC01BAF4379BF8072926B07A7
Certificate serial:       5F62F9D9BE899530D87B038510DB3DC7AEA14D9B
Authority key identifier: 5A:C8:53:AE:3F:9C:B6:2C:C0:1B:AF:43:79:BF:80:72:92:6B:07:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3136302e302f32342d3234203d3e20323632353835.roa
Signing time:             Thu 14 Nov 2024 15:10:17 +0000
ROA not before:           Thu 14 Nov 2024 15:05:17 +0000
ROA not after:            Thu 13 Nov 2025 15:10:17 +0000
asID:                     262585
IP address blocks:        201.55.160.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.crl
                          rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 21:59:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:62:f9:d9:be:89:95:30:d8:7b:03:85:10:db:3d:c7:ae:a1:4d:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AC853AE3F9CB62CC01BAF4379BF8072926B07A7
        Validity
            Not Before: Nov 14 15:05:17 2024 GMT
            Not After : Nov 13 15:10:17 2025 GMT
        Subject: CN=2CDCDAE8B65D30496F5AD66DFBBD8183FF7D1F56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6e:8d:35:3e:96:e5:1d:1a:74:ce:f6:08:5a:
                    2f:5a:5c:1d:be:0e:69:6f:ab:7c:62:bc:ab:61:4c:
                    75:fa:22:4e:bc:05:8b:f4:77:0d:0f:33:47:5b:92:
                    c4:97:bd:c8:a3:24:56:a1:4f:36:3e:96:65:8e:fc:
                    e7:05:91:da:b1:e7:52:b4:ec:df:bc:e1:21:23:c2:
                    2a:2f:64:21:9e:01:5c:94:d7:82:91:90:9d:0b:8c:
                    5b:90:55:1e:41:67:5a:ec:58:31:72:89:4c:43:f6:
                    79:28:8c:57:bf:88:b1:51:d4:2d:63:9c:46:f8:03:
                    c5:47:67:c1:9f:7d:7b:a5:10:ff:65:2a:d3:24:0c:
                    6e:7b:50:cd:13:60:3a:3c:2a:88:02:3c:56:41:94:
                    65:10:41:14:36:4a:86:5e:2a:38:1a:a2:8f:ba:09:
                    e7:54:79:ca:3f:97:47:a8:9e:07:6b:00:b7:d6:b0:
                    e5:10:3e:b5:d2:0c:5a:48:e4:46:3a:71:25:21:1b:
                    42:f1:f3:50:d4:be:f0:4c:16:80:19:e0:1d:9b:49:
                    db:0b:06:3d:a8:8f:10:ce:90:45:20:fc:12:78:52:
                    37:0b:51:5b:62:07:e8:68:64:4e:e7:b7:dc:d7:32:
                    e9:78:b4:b4:9a:06:5a:bc:c1:04:6d:c7:50:5d:90:
                    99:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:DC:DA:E8:B6:5D:30:49:6F:5A:D6:6D:FB:BD:81:83:FF:7D:1F:56
            X509v3 Authority Key Identifier:
                keyid:5A:C8:53:AE:3F:9C:B6:2C:C0:1B:AF:43:79:BF:80:72:92:6B:07:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3136302e302f32342d3234203d3e20323632353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.55.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:22:a8:59:81:9a:37:0d:67:9c:62:88:b5:06:f9:64:ce:0e:
         fd:76:87:4e:6a:c6:55:35:53:03:60:37:ce:f1:4f:d3:f0:eb:
         f1:6e:52:d4:90:b1:60:a2:f2:6f:d6:b8:ff:a3:f7:fd:26:80:
         a1:81:7f:41:a2:9b:db:d1:c2:73:c2:8d:d9:2c:a6:19:30:2f:
         63:a3:05:39:58:e2:af:85:16:55:5d:32:6e:6c:99:43:23:57:
         4f:56:66:9b:65:fa:9f:03:18:28:60:88:80:3d:14:da:ff:57:
         12:3c:b8:d7:d4:48:5a:f8:e3:ff:49:11:e4:ef:eb:5f:cb:1a:
         ed:35:4e:57:6b:80:2c:0b:cb:9d:6f:51:c0:88:e7:d7:32:24:
         68:f4:ea:f2:d2:c0:d4:4b:24:32:a6:27:9a:63:2e:f0:81:ae:
         59:6f:18:e0:c7:5a:b4:81:e7:5e:7f:3e:7c:9c:32:5d:9f:1b:
         33:26:36:fb:29:23:d2:62:41:da:7d:7a:2d:98:c7:c3:bf:7b:
         b2:9f:cd:e8:5f:ff:47:ec:e3:7b:2d:8e:4e:0c:2a:0d:58:97:
         12:40:4a:d6:5b:7c:7c:f8:50:65:bf:09:68:ae:da:13:a8:16:
         04:0b:d4:9c:f1:58:44:c5:6a:21:18:c3:2f:d2:b4:8e:93:79:
         67:b0:4e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 22:36:29 2024 by rpki-client on console-ams.rpki-client.org