Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXo6MTCVNArAXZrbArkDYu9aoExFvsNsovHajh6c9Lim/1/3230302e31302e34382e302f32312d3332203d3e20323633323539.roa
File:                     3230302e31302e34382e302f32312d3332203d3e20323633323539.roa (raw, json)
Hash identifier:          IhZ0DZ/hlnU/9yCWA3NYagwKu18mY+6ViIERX+PbJjw=
Subject key identifier:   C6:8A:3F:65:0A:E5:78:03:5E:2A:9B:29:BF:14:CE:41:7E:08:E4:AE
Certificate issuer:       /CN=CBEDD33A18D94E1A62EBFB24001CD544D5C59966
Certificate serial:       631B12210D38A63146BE420C17B160FA60C63370
Authority key identifier: CB:ED:D3:3A:18:D9:4E:1A:62:EB:FB:24:00:1C:D5:44:D5:C5:99:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBEDD33A18D94E1A62EBFB24001CD544D5C59966.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXo6MTCVNArAXZrbArkDYu9aoExFvsNsovHajh6c9Lim/1/3230302e31302e34382e302f32312d3332203d3e20323633323539.roa
Signing time:             Thu 04 Apr 2024 13:40:24 +0000
ROA not before:           Thu 04 Apr 2024 13:35:24 +0000
ROA not after:            Thu 03 Apr 2025 13:40:24 +0000
asID:                     263259
IP address blocks:        200.10.48.0/21 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HXo6MTCVNArAXZrbArkDYu9aoExFvsNsovHajh6c9Lim/1/CBEDD33A18D94E1A62EBFB24001CD544D5C59966.crl
                          rsync://rpki-repo.registro.br/repo/HXo6MTCVNArAXZrbArkDYu9aoExFvsNsovHajh6c9Lim/1/CBEDD33A18D94E1A62EBFB24001CD544D5C59966.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBEDD33A18D94E1A62EBFB24001CD544D5C59966.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:39:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:1b:12:21:0d:38:a6:31:46:be:42:0c:17:b1:60:fa:60:c6:33:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBEDD33A18D94E1A62EBFB24001CD544D5C59966
        Validity
            Not Before: Apr  4 13:35:24 2024 GMT
            Not After : Apr  3 13:40:24 2025 GMT
        Subject: CN=C68A3F650AE578035E2A9B29BF14CE417E08E4AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bd:e6:a7:b0:0a:44:9b:b4:c5:97:d6:9b:f5:
                    bb:28:cc:ca:65:e3:0b:3a:8b:3f:f5:9d:7d:21:81:
                    96:68:cd:9a:64:bd:de:ca:a5:0b:c6:13:ad:44:cb:
                    fc:76:d6:3e:e0:87:d4:b8:42:bd:d4:9d:e9:17:60:
                    3b:8d:31:b8:f6:80:dd:2f:94:d7:e7:e7:b6:2e:2e:
                    a4:13:4d:8b:1c:f3:92:14:0b:3e:c4:63:39:52:ab:
                    fc:8d:66:b2:ad:b6:1d:0a:37:f6:f5:b5:a2:ee:88:
                    2f:88:7d:2f:09:59:e2:d4:28:f7:bb:b0:a7:91:70:
                    09:22:10:7a:af:a4:04:62:d6:70:99:ae:2c:9b:62:
                    82:4a:88:6c:7d:05:0f:72:a7:73:3e:68:1a:1a:92:
                    8f:22:0b:a8:42:22:fb:10:e7:9b:21:cb:27:97:68:
                    f0:71:ba:46:8a:58:85:21:ba:05:88:18:4f:b0:33:
                    b7:9a:46:1a:75:f2:54:90:e0:6b:ae:bd:72:54:8f:
                    15:39:c3:e2:f7:4f:e1:b0:b0:fd:f5:1c:e1:17:fc:
                    00:d6:7c:6e:23:a6:14:37:81:c2:54:06:9a:f4:6d:
                    c9:5d:c6:a1:19:7b:c5:78:b0:29:fb:2f:1c:93:95:
                    30:7d:bd:dd:55:da:ed:60:ad:59:22:04:12:cd:35:
                    82:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:8A:3F:65:0A:E5:78:03:5E:2A:9B:29:BF:14:CE:41:7E:08:E4:AE
            X509v3 Authority Key Identifier:
                keyid:CB:ED:D3:3A:18:D9:4E:1A:62:EB:FB:24:00:1C:D5:44:D5:C5:99:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXo6MTCVNArAXZrbArkDYu9aoExFvsNsovHajh6c9Lim/1/CBEDD33A18D94E1A62EBFB24001CD544D5C59966.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBEDD33A18D94E1A62EBFB24001CD544D5C59966.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXo6MTCVNArAXZrbArkDYu9aoExFvsNsovHajh6c9Lim/1/3230302e31302e34382e302f32312d3332203d3e20323633323539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8b:be:d0:4c:b0:f7:1b:41:39:0e:4e:e3:18:21:c2:1d:f3:66:
         ee:e8:66:cb:9c:d9:64:44:a2:89:52:b9:83:fb:66:19:f7:e2:
         86:f4:1b:fe:45:53:97:97:6e:2b:97:9d:78:d2:a6:ba:65:88:
         fa:44:de:ff:d8:17:fc:8f:a1:76:ee:6a:0b:ca:58:6e:ec:4c:
         2f:d5:0c:fb:01:09:76:09:ca:1e:cc:e9:0e:7b:17:cd:a7:1b:
         da:9d:61:f9:7d:16:a1:58:3f:10:95:e9:e7:1d:19:c4:27:a2:
         d2:7f:f7:d5:ce:06:cb:a8:0d:10:8d:e5:ad:72:0d:b8:5f:d4:
         dd:c5:65:04:85:2f:97:53:ed:31:d4:a5:2a:de:dd:6a:43:2d:
         3d:46:bb:67:79:80:28:15:be:b8:0b:20:36:54:a8:76:eb:67:
         48:88:00:52:44:4f:01:10:7d:d3:6c:d2:ae:64:d5:2c:9f:55:
         c5:52:3f:1a:78:28:1b:ec:57:54:8b:44:5f:3e:bf:e2:35:a1:
         79:62:43:75:e9:ca:e2:e2:a8:3f:c2:a0:6d:00:4c:74:59:ea:
         85:59:93:5d:2a:3e:da:d0:a7:83:87:e2:cd:08:ab:b0:d9:49:
         18:bd:ec:1b:6a:58:fa:2a:5d:d2:88:a0:94:43:69:b1:2f:06:
         50:78:45:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:24 2024 by rpki-client on console-fra.rpki-client.org