Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234362e302f32342d3234203d3e20323730383135.roa
File:                     3230302e3232392e3234362e302f32342d3234203d3e20323730383135.roa (raw, json)
Hash identifier:          dQDLtTp9lb2w+UKjwTEUlnAlAiX6PJQRA98i7B89sYg=
Subject key identifier:   D5:E9:AD:CD:0D:FA:6E:11:85:62:C6:55:0B:3C:F6:E8:D4:0A:C1:CC
Certificate issuer:       /CN=6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A
Certificate serial:       01C5D7A7DB396AC668E62F9334F90428246FF957
Authority key identifier: 6A:41:E5:59:8C:15:DD:30:85:A3:2C:5C:38:EB:D8:C2:FA:47:F2:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234362e302f32342d3234203d3e20323730383135.roa
Signing time:             Thu 07 Nov 2024 17:45:01 +0000
ROA not before:           Thu 07 Nov 2024 17:40:01 +0000
ROA not after:            Thu 06 Nov 2025 17:45:01 +0000
asID:                     270815
IP address blocks:        200.229.246.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A.crl
                          rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 06:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:c5:d7:a7:db:39:6a:c6:68:e6:2f:93:34:f9:04:28:24:6f:f9:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A
        Validity
            Not Before: Nov  7 17:40:01 2024 GMT
            Not After : Nov  6 17:45:01 2025 GMT
        Subject: CN=D5E9ADCD0DFA6E118562C6550B3CF6E8D40AC1CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b0:28:95:83:8c:5a:5e:5b:9f:b9:19:9b:ce:
                    d0:2c:2d:89:4b:24:85:47:7e:5f:18:49:c2:4a:b7:
                    e5:63:d3:31:11:d0:94:77:a6:39:d9:d0:ce:79:fc:
                    95:af:85:ba:fd:d2:06:a8:20:2f:9d:87:49:16:d2:
                    88:b1:76:46:47:65:c5:6c:02:e8:d7:d6:a1:29:3c:
                    e8:85:2b:79:0d:24:9b:8b:1d:2a:d0:49:24:d6:de:
                    e9:fe:44:71:35:88:99:35:09:34:12:ce:5c:84:d2:
                    79:57:e1:91:87:e6:10:81:80:93:0e:f2:39:10:b8:
                    14:54:ce:2a:c5:38:c2:e4:a3:64:71:95:bc:17:ac:
                    3e:89:17:51:ba:e8:3a:4b:01:42:28:45:cc:9d:39:
                    db:cf:aa:08:38:92:2e:35:d2:4f:79:7a:00:95:6a:
                    1f:29:d5:09:b4:62:db:e5:d5:88:20:33:1e:41:19:
                    a3:9d:bf:8e:09:00:6d:fb:09:05:d8:58:e9:92:88:
                    e8:c9:4b:f9:10:32:e8:53:7f:8e:ca:6c:27:f4:63:
                    fe:54:67:f8:b0:fe:7f:64:dd:6d:96:56:1c:90:42:
                    a6:61:02:9a:8c:b2:c6:0c:28:3d:a9:2f:d2:34:fa:
                    71:ff:25:4f:21:0f:f5:02:0d:ca:11:50:0c:2d:3b:
                    2a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:E9:AD:CD:0D:FA:6E:11:85:62:C6:55:0B:3C:F6:E8:D4:0A:C1:CC
            X509v3 Authority Key Identifier:
                keyid:6A:41:E5:59:8C:15:DD:30:85:A3:2C:5C:38:EB:D8:C2:FA:47:F2:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A41E5598C15DD3085A32C5C38EBD8C2FA47F21A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234362e302f32342d3234203d3e20323730383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:70:d3:41:78:18:72:2f:51:55:9f:83:a6:e4:b3:22:f0:a4:
         aa:43:b4:ee:28:cb:24:ac:48:a0:6b:2d:14:2c:bf:50:7b:fe:
         80:01:5c:58:cf:ce:c0:0c:7d:01:75:1a:65:c5:2f:22:bd:99:
         fa:19:96:d8:b3:90:cd:43:62:95:5e:f0:33:cb:7f:4f:89:30:
         10:1a:7e:1c:95:c9:6b:fc:7a:45:de:10:37:8e:a8:2f:2b:49:
         7a:12:77:ff:b8:33:89:a7:88:10:f7:85:56:15:54:81:2f:f5:
         e2:3b:50:5e:7a:36:d0:ee:e4:77:41:95:7b:3e:53:f9:9a:6e:
         00:73:0c:9c:8d:32:4d:db:d1:1c:a7:81:4e:08:5c:21:45:94:
         38:f7:c8:89:20:5c:8b:84:07:9e:6d:a8:de:2e:ac:22:4b:d5:
         b7:b5:4a:50:dd:6b:d9:68:4e:48:93:a2:3e:9b:73:f2:b3:97:
         9c:3c:0c:6c:55:43:69:df:b3:41:d0:42:4a:3b:63:17:51:fe:
         75:ca:ad:e2:12:f0:12:1a:84:43:5c:8d:d1:b8:96:ae:e0:79:
         57:a1:ff:c9:a9:c9:a8:cb:6e:5e:08:f9:18:70:40:aa:1e:2b:
         49:71:6d:33:61:b1:9b:e5:49:48:4f:7b:e5:96:98:78:94:e5:
         b0:e1:23:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 07:01:43 2024 by rpki-client on console-ams.rpki-client.org