Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3137302e302f32332d3233203d3e20323632353835.roa
File:                     3230312e35352e3137302e302f32332d3233203d3e20323632353835.roa (raw, json)
Hash identifier:          FfaWIeiRVeVia3JNPlptXvp6MueAwcEvHelP3yKtIgw=
Subject key identifier:   E8:82:30:A6:04:79:72:6A:3D:8B:7A:32:82:80:ED:80:24:9D:23:2F
Certificate issuer:       /CN=5AC853AE3F9CB62CC01BAF4379BF8072926B07A7
Certificate serial:       6EBEA39F1BA30F477F29AEA8B12058E35FFB0145
Authority key identifier: 5A:C8:53:AE:3F:9C:B6:2C:C0:1B:AF:43:79:BF:80:72:92:6B:07:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3137302e302f32332d3233203d3e20323632353835.roa
Signing time:             Thu 14 Nov 2024 15:10:26 +0000
ROA not before:           Thu 14 Nov 2024 15:05:26 +0000
ROA not after:            Thu 13 Nov 2025 15:10:26 +0000
asID:                     262585
IP address blocks:        201.55.170.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.crl
                          rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 02:44:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:be:a3:9f:1b:a3:0f:47:7f:29:ae:a8:b1:20:58:e3:5f:fb:01:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AC853AE3F9CB62CC01BAF4379BF8072926B07A7
        Validity
            Not Before: Nov 14 15:05:26 2024 GMT
            Not After : Nov 13 15:10:26 2025 GMT
        Subject: CN=E88230A60479726A3D8B7A328280ED80249D232F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:21:26:40:48:06:d1:f7:c0:59:f6:b8:74:94:
                    a0:a5:05:d2:ba:7a:2a:dd:9a:42:74:22:79:5d:c5:
                    5e:0e:f1:5b:e6:7b:d0:19:89:c0:48:f4:9b:c7:7b:
                    b6:7b:ba:76:c4:d7:6b:86:d7:40:07:08:7f:3f:47:
                    a1:6e:ae:0b:a8:61:0b:11:60:c8:9c:55:7e:35:ae:
                    58:f8:71:f5:f9:9a:1a:e6:bd:1a:fb:06:0d:e3:06:
                    16:81:b3:40:39:e0:60:df:b4:9e:c5:96:c1:38:7e:
                    c2:7d:1f:ef:ea:71:16:b4:ea:90:83:b2:8b:bb:35:
                    f4:75:fe:7d:63:9f:23:4d:e9:92:b8:e8:f1:1f:2c:
                    ff:48:d9:d0:51:f8:af:8a:cf:fb:97:e4:ac:67:df:
                    a1:6f:e1:89:d8:8a:84:1e:65:ad:0c:1b:bd:57:47:
                    f6:7c:c7:42:f7:56:0c:80:f5:73:bb:e0:02:88:6f:
                    46:16:36:16:40:29:d6:94:81:36:42:3d:d6:c2:e2:
                    fe:4b:c6:a3:42:69:42:5d:b8:83:09:bc:8d:cc:57:
                    77:5f:6e:f0:07:c9:f9:f5:a4:c3:44:c8:99:36:ab:
                    8a:97:60:fc:df:49:2e:ca:ca:d3:61:dd:9f:46:74:
                    9d:5e:1d:cf:6e:7f:9d:d4:02:9b:05:52:1d:88:75:
                    96:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:82:30:A6:04:79:72:6A:3D:8B:7A:32:82:80:ED:80:24:9D:23:2F
            X509v3 Authority Key Identifier:
                keyid:5A:C8:53:AE:3F:9C:B6:2C:C0:1B:AF:43:79:BF:80:72:92:6B:07:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3137302e302f32332d3233203d3e20323632353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.55.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:98:53:55:0c:d8:3d:c8:a8:4e:f9:3e:94:57:c9:10:45:9b:
         83:ff:f9:5b:b4:bb:ac:61:8d:de:de:9b:18:f5:83:96:d9:7c:
         db:c9:bc:6f:d6:cf:3e:9d:53:bb:52:2b:20:e1:15:d9:fe:92:
         c9:5f:34:86:76:cd:2b:6a:74:c2:58:4f:28:96:8a:95:9b:05:
         f7:58:70:48:c6:8d:74:a1:58:81:3a:8a:30:56:b8:31:9f:bc:
         d0:77:e7:af:94:4d:1f:10:1b:1c:d8:31:4c:aa:23:aa:f9:dd:
         a1:57:d3:e9:22:a3:6f:7b:5f:4d:45:f4:89:a5:59:5c:00:3f:
         49:5a:76:61:6b:2a:f2:16:41:f5:2e:d0:09:a0:5d:67:4a:79:
         b5:45:6d:a0:c2:58:f9:f4:19:68:f6:93:0a:95:2d:75:73:ee:
         9f:54:30:45:d9:b1:51:c8:cd:86:7e:3d:fd:88:8f:5e:12:0a:
         a2:81:05:6a:d2:9f:91:cc:ff:14:c1:a9:8d:36:d1:f4:6b:40:
         5b:7f:62:01:0f:82:ff:5e:d3:c4:55:a7:bc:4c:a4:4e:8d:93:
         e0:20:12:be:b1:16:2c:0e:39:6d:88:1a:6a:1f:89:15:54:1b:
         f8:fe:1a:ab:a7:2b:e9:36:71:27:a1:87:a3:7f:36:6b:f8:db:
         ef:c2:63:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:25:41 2024 by rpki-client on console-ams.rpki-client.org