Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/3230302e37312e38332e302f32342d3332203d3e20323731323030.roa
File:                     3230302e37312e38332e302f32342d3332203d3e20323731323030.roa (raw, json)
Hash identifier:          X2SBd5FvPEQxxfHMj7GKIq0ZGjkZJb+vF8jjGr2pPlQ=
Subject key identifier:   88:F1:64:E8:C8:64:EF:EB:DB:C3:B8:0B:D5:4B:3C:E4:A1:6E:40:50
Certificate issuer:       /CN=052E1FD3B34D2D94C83980528B60B11DFB854B57
Certificate serial:       798FA60C79E6211FC68F39BA20F9A87C522B185E
Authority key identifier: 05:2E:1F:D3:B3:4D:2D:94:C8:39:80:52:8B:60:B1:1D:FB:85:4B:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/052E1FD3B34D2D94C83980528B60B11DFB854B57.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/3230302e37312e38332e302f32342d3332203d3e20323731323030.roa
Signing time:             Mon 21 Oct 2024 06:33:48 +0000
ROA not before:           Mon 21 Oct 2024 06:28:48 +0000
ROA not after:            Mon 20 Oct 2025 06:33:48 +0000
asID:                     271200
IP address blocks:        200.71.83.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/052E1FD3B34D2D94C83980528B60B11DFB854B57.crl
                          rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/052E1FD3B34D2D94C83980528B60B11DFB854B57.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/052E1FD3B34D2D94C83980528B60B11DFB854B57.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:8f:a6:0c:79:e6:21:1f:c6:8f:39:ba:20:f9:a8:7c:52:2b:18:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=052E1FD3B34D2D94C83980528B60B11DFB854B57
        Validity
            Not Before: Oct 21 06:28:48 2024 GMT
            Not After : Oct 20 06:33:48 2025 GMT
        Subject: CN=88F164E8C864EFEBDBC3B80BD54B3CE4A16E4050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7b:b8:2e:82:88:37:d8:c5:e2:59:9a:af:4e:
                    58:ba:27:d3:da:df:b0:d0:30:d8:37:e1:50:93:74:
                    81:d3:37:a8:25:25:f9:35:21:4d:dd:d7:d4:ef:9b:
                    b2:46:c6:6c:c1:07:73:df:55:9f:96:88:75:87:9a:
                    cc:04:8d:e8:7b:da:be:1e:0b:51:25:64:8f:c2:d6:
                    c4:7a:ff:d2:ea:af:29:64:51:51:db:97:34:c0:be:
                    56:44:ed:3d:00:55:b2:8c:7f:62:c4:0c:a5:04:53:
                    dd:d9:f8:8a:7a:ba:34:20:20:b3:21:31:93:26:c5:
                    41:0f:fa:f4:32:3d:5c:9a:d6:e0:c3:f2:e2:ac:f7:
                    ea:ce:13:f6:e7:08:bd:fe:8b:7a:3c:09:99:c4:2e:
                    ee:74:b0:ed:69:fa:56:b7:85:29:dc:ff:7d:dc:d7:
                    b9:8e:79:ab:ec:97:f4:fc:4e:51:fd:f6:0b:cd:d8:
                    c7:d7:a7:1f:2f:18:82:53:0f:e1:4d:26:c5:b6:66:
                    18:b9:eb:2f:8f:30:57:42:a0:25:d6:37:c3:cc:ba:
                    33:ee:0c:8e:77:3f:b3:1f:ec:cd:6e:99:9f:7e:cf:
                    b1:b5:ac:fd:7f:5b:9f:3d:d9:59:02:2b:c9:79:a5:
                    10:77:b2:18:ff:28:cc:b0:11:5d:b3:e5:ec:28:4a:
                    93:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F1:64:E8:C8:64:EF:EB:DB:C3:B8:0B:D5:4B:3C:E4:A1:6E:40:50
            X509v3 Authority Key Identifier:
                keyid:05:2E:1F:D3:B3:4D:2D:94:C8:39:80:52:8B:60:B1:1D:FB:85:4B:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/052E1FD3B34D2D94C83980528B60B11DFB854B57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/052E1FD3B34D2D94C83980528B60B11DFB854B57.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/3230302e37312e38332e302f32342d3332203d3e20323731323030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:c6:8c:05:23:f6:37:43:77:da:59:56:d7:ed:1a:56:f6:cb:
         29:f6:10:de:ea:91:05:c9:c5:e6:5f:a4:7a:bd:b1:45:04:0c:
         e2:df:14:5d:c9:f0:fb:e7:a9:da:a6:97:3c:ff:15:bb:63:de:
         d9:a2:6b:14:56:8d:2d:33:0d:fc:c5:d9:7c:d4:f1:a3:3a:96:
         66:a1:f5:b0:d4:8d:5f:72:08:90:2b:dc:67:e8:d0:d2:1b:c4:
         61:02:d6:51:83:44:86:a2:7a:88:ed:2f:41:51:e4:3f:a0:35:
         28:18:64:81:13:12:c9:d9:ac:fb:59:e9:7e:44:d7:61:08:80:
         75:3b:e1:a5:ec:67:5b:00:f3:ec:c8:89:93:ad:82:b8:f0:cd:
         86:38:22:c7:9e:33:3e:84:e5:ee:ed:6b:e6:5c:6d:26:c9:c3:
         a0:33:f9:25:ea:39:03:39:58:5c:87:65:9a:cd:61:8a:cf:7b:
         5e:c3:77:78:f9:48:f2:ac:c8:bf:18:11:71:ef:03:15:d9:de:
         3a:81:83:d9:bf:07:ad:3b:f9:df:29:21:f4:fa:a7:53:ff:0b:
         54:e0:19:0a:6c:b1:8b:b2:a6:12:63:f0:8e:a7:91:37:15:0e:
         81:7a:80:87:ea:c1:69:ce:23:30:ad:58:8a:a9:19:04:c9:08:
         1e:8c:1e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 09:06:15 2024 by rpki-client on console-fra.rpki-client.org