Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GvXKLiSKQmc3iyEcgoaETWw7kpFTUYgHfp7YVuBRRC4F/0/3230312e3138322e38392e302f32342d3234203d3e20323637353136.roa
File:                     3230312e3138322e38392e302f32342d3234203d3e20323637353136.roa (raw, json)
Hash identifier:          dN698yn/CcTiGc61hFdeZZwW+x1Lh8qz/xIA7kDxRz8=
Subject key identifier:   6F:F9:4C:91:97:E2:B3:D9:CC:AB:A2:DF:18:70:A5:35:B4:98:5C:07
Certificate issuer:       /CN=E9BA3D42C7746EAC93FFBAA6FDEF0883C4CBB264
Certificate serial:       0B586A46716A4AB6FB8D8D66DCBAD5E3B222EE45
Authority key identifier: E9:BA:3D:42:C7:74:6E:AC:93:FF:BA:A6:FD:EF:08:83:C4:CB:B2:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9BA3D42C7746EAC93FFBAA6FDEF0883C4CBB264.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvXKLiSKQmc3iyEcgoaETWw7kpFTUYgHfp7YVuBRRC4F/0/3230312e3138322e38392e302f32342d3234203d3e20323637353136.roa
Signing time:             Thu 08 Aug 2024 00:38:15 +0000
ROA not before:           Thu 08 Aug 2024 00:33:15 +0000
ROA not after:            Thu 07 Aug 2025 00:38:15 +0000
asID:                     267516
IP address blocks:        201.182.89.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GvXKLiSKQmc3iyEcgoaETWw7kpFTUYgHfp7YVuBRRC4F/0/E9BA3D42C7746EAC93FFBAA6FDEF0883C4CBB264.crl
                          rsync://rpki-repo.registro.br/repo/GvXKLiSKQmc3iyEcgoaETWw7kpFTUYgHfp7YVuBRRC4F/0/E9BA3D42C7746EAC93FFBAA6FDEF0883C4CBB264.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9BA3D42C7746EAC93FFBAA6FDEF0883C4CBB264.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:58:6a:46:71:6a:4a:b6:fb:8d:8d:66:dc:ba:d5:e3:b2:22:ee:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9BA3D42C7746EAC93FFBAA6FDEF0883C4CBB264
        Validity
            Not Before: Aug  8 00:33:15 2024 GMT
            Not After : Aug  7 00:38:15 2025 GMT
        Subject: CN=6FF94C9197E2B3D9CCABA2DF1870A535B4985C07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a9:38:55:b4:e1:68:f7:d9:5e:10:2d:e4:64:
                    63:5e:76:84:bd:80:99:cb:40:e4:fb:ae:07:d9:e5:
                    74:c7:26:a2:a6:c9:06:3b:4c:7e:9e:d7:71:b3:97:
                    71:21:67:21:97:cc:ad:a4:92:be:4b:d4:96:4d:97:
                    61:c4:b7:37:a6:33:c1:54:3d:37:84:a8:a6:b8:c1:
                    7f:f2:80:a7:4e:9b:e9:44:bf:3f:ec:7d:d3:17:66:
                    36:e9:fb:fb:64:49:77:93:04:89:61:52:9f:37:a8:
                    82:80:2c:88:ba:14:1e:3a:a0:42:1d:f7:68:50:be:
                    9d:31:cb:6b:74:a9:30:a6:22:78:60:15:ad:0e:a6:
                    ee:72:4c:c6:df:d1:39:72:d8:48:73:e2:e6:a2:13:
                    35:a4:4f:87:86:7b:89:d4:ab:29:a1:7e:a9:34:4b:
                    54:ea:4c:b9:51:68:b4:63:e7:85:ad:95:1e:2d:15:
                    2c:ab:c6:a4:32:aa:4b:24:33:56:d0:e2:4d:7d:fe:
                    58:4a:5a:f8:18:e8:4b:49:c5:76:2d:3b:1f:f1:6a:
                    cd:95:7b:78:d1:83:fd:49:77:bd:c9:a5:cc:fa:4f:
                    52:9c:c5:2f:cb:7c:c7:b7:75:64:0f:a1:90:e9:f2:
                    7e:9a:48:99:36:52:dc:fd:57:33:bb:0b:6a:06:ff:
                    11:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:F9:4C:91:97:E2:B3:D9:CC:AB:A2:DF:18:70:A5:35:B4:98:5C:07
            X509v3 Authority Key Identifier:
                keyid:E9:BA:3D:42:C7:74:6E:AC:93:FF:BA:A6:FD:EF:08:83:C4:CB:B2:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvXKLiSKQmc3iyEcgoaETWw7kpFTUYgHfp7YVuBRRC4F/0/E9BA3D42C7746EAC93FFBAA6FDEF0883C4CBB264.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9BA3D42C7746EAC93FFBAA6FDEF0883C4CBB264.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvXKLiSKQmc3iyEcgoaETWw7kpFTUYgHfp7YVuBRRC4F/0/3230312e3138322e38392e302f32342d3234203d3e20323637353136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:b5:78:10:1f:b5:8b:e9:6d:cf:16:d6:9b:53:9b:51:ef:25:
         8a:10:82:4e:e1:1b:48:92:6b:8e:16:27:1b:c0:63:15:2b:5b:
         58:02:e1:44:c7:66:9b:46:fa:9b:ee:ab:01:9e:e2:5d:d5:fd:
         dd:2b:f9:0f:54:db:6b:5e:ea:df:42:46:0e:68:4c:f9:48:d2:
         d5:25:5a:99:67:9d:59:d5:81:1d:7a:80:5b:04:90:94:38:12:
         4c:2a:2d:b1:67:1b:03:21:9e:8f:ad:9d:0d:88:a2:ea:59:ee:
         96:9d:be:02:11:fc:6d:47:32:46:c1:85:39:16:4b:6f:fd:bc:
         3c:41:e3:13:82:ca:75:49:9e:a8:74:51:fa:66:f0:92:72:4e:
         2d:da:e0:30:b3:f0:27:4f:dd:f6:d5:4f:a2:57:6a:5d:c6:2d:
         4a:30:9d:82:b6:de:03:ee:2c:99:ce:93:92:04:8b:d2:b8:38:
         2f:cf:b6:12:2d:30:18:50:4a:a7:e4:ad:de:fc:8a:fe:1d:22:
         a5:e1:85:0d:f2:bc:62:cf:7a:1f:a6:05:9e:63:5d:6d:54:16:
         50:0f:ef:75:63:27:1b:49:89:8f:dd:e7:53:7d:bf:fd:da:4b:
         29:b1:3e:0f:52:37:72:88:40:5f:88:c1:9d:58:4d:8a:16:e0:
         a6:9b:6f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:22:40 2024 by rpki-client on console-fra.rpki-client.org