Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3233362e302f32342d3234203d3e203532353332.roa
File:                     3230312e34392e3233362e302f32342d3234203d3e203532353332.roa (raw, json)
Hash identifier:          CieiybvshnLYiPXEKunR7c7xEPNVERDL82bZEfRMkmA=
Subject key identifier:   7F:E1:6C:8B:44:5B:E1:31:C0:85:E5:8C:5C:D2:8C:55:95:70:E3:4F
Certificate issuer:       /CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
Certificate serial:       706F04E84913C33489F1452ACCE680A51737C5E5
Authority key identifier: 2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3233362e302f32342d3234203d3e203532353332.roa
Signing time:             Wed 10 Jul 2024 20:42:27 +0000
ROA not before:           Wed 10 Jul 2024 20:37:27 +0000
ROA not after:            Wed 09 Jul 2025 20:42:27 +0000
asID:                     52532
IP address blocks:        201.49.236.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl
                          rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:43:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:6f:04:e8:49:13:c3:34:89:f1:45:2a:cc:e6:80:a5:17:37:c5:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
        Validity
            Not Before: Jul 10 20:37:27 2024 GMT
            Not After : Jul  9 20:42:27 2025 GMT
        Subject: CN=7FE16C8B445BE131C085E58C5CD28C559570E34F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:37:1a:4c:49:b9:c2:55:b2:87:80:71:1d:16:
                    f1:57:30:9d:31:58:b3:23:dd:81:fd:73:e0:cf:73:
                    f8:d8:27:21:14:03:6f:05:d7:e1:07:1b:21:2a:e2:
                    f7:33:09:ba:be:59:0a:d1:73:49:4f:17:78:f5:7b:
                    a8:82:bc:24:e6:8e:7b:52:86:26:62:43:0d:33:6c:
                    52:9d:66:1f:45:18:15:fa:8c:d0:17:bd:ef:a5:83:
                    25:00:d4:6c:8f:b8:00:b0:c9:00:59:69:40:70:57:
                    ae:7b:94:9a:83:d5:c6:3f:d0:e2:b7:34:81:1b:e1:
                    58:83:a0:05:f1:19:e9:39:ab:5d:08:04:98:5e:68:
                    83:3a:1a:fa:30:2d:d8:54:d5:f0:13:f2:b3:17:2b:
                    f9:ba:09:ca:a4:d6:9f:06:29:4b:a8:8d:ff:15:be:
                    05:9d:41:e3:30:68:19:2c:bf:26:c1:06:2b:8b:f7:
                    ef:b9:6b:82:85:e4:be:c4:74:1c:cb:3d:46:d2:70:
                    92:61:63:92:cc:22:16:45:89:fc:14:60:d2:b3:e6:
                    29:c8:0d:38:7c:05:8b:34:00:a0:e5:54:77:3a:a1:
                    77:90:82:5b:51:3a:e7:d2:0e:c9:e5:16:f1:b3:87:
                    00:db:c7:49:45:62:a0:a2:b7:c9:2c:07:ce:6c:6c:
                    00:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:E1:6C:8B:44:5B:E1:31:C0:85:E5:8C:5C:D2:8C:55:95:70:E3:4F
            X509v3 Authority Key Identifier:
                keyid:2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3233362e302f32342d3234203d3e203532353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:d1:79:14:0b:31:4f:99:44:44:47:da:27:d6:e6:80:4e:a1:
         50:33:43:83:03:e7:62:98:85:32:a8:6f:74:55:8e:1d:f0:06:
         d8:21:06:82:62:86:18:81:a1:ac:71:d7:93:07:29:f2:20:63:
         fe:24:28:06:70:bf:44:3d:64:78:5a:3d:19:c0:9e:ef:53:72:
         cf:eb:20:75:82:e5:bc:c4:df:0e:fb:21:a4:4f:1a:4f:b1:06:
         e0:19:ac:38:7f:5b:e7:a1:5e:86:07:36:34:bc:9f:65:cf:26:
         ea:44:9a:bb:b6:57:9c:f8:d2:f9:d8:0c:5e:c5:8e:9b:fd:2f:
         b6:a1:f5:70:2e:f4:08:6f:93:f8:fc:5c:86:23:0c:a3:5c:da:
         de:53:f6:bf:c8:6e:0e:66:53:fe:66:43:91:a6:fb:61:5b:b6:
         76:91:82:76:52:dc:24:0f:25:3e:d8:0c:aa:56:c3:3a:e8:ce:
         d3:d7:3c:8c:f2:36:ef:6a:a2:30:6e:f4:90:45:50:9d:4b:06:
         9e:3c:af:a0:42:3c:76:67:b2:ed:ab:ed:50:9f:c7:80:4f:00:
         f9:f6:7a:eb:57:33:a1:3b:09:0c:d2:a8:8b:70:8f:10:90:c1:
         eb:18:99:54:1a:d2:8f:7b:a0:b6:0f:68:84:9d:ab:3b:70:04:
         b9:be:d6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:32 2024 by rpki-client on console-ams.rpki-client.org