Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3233372e302f32342d3234203d3e203532353332.roa
File:                     3230312e34392e3233372e302f32342d3234203d3e203532353332.roa (raw, json)
Hash identifier:          eGPFDjIYmOo2KP8Obc0HtC+eKQxIEYSg2kpu636q/FM=
Subject key identifier:   61:AE:17:24:27:00:EE:B6:6A:13:6A:00:7D:39:5C:CF:78:AC:9C:6C
Certificate issuer:       /CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
Certificate serial:       71B4E0ED43BE2E07AB096473FD2D2EE3213E6C7D
Authority key identifier: 2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3233372e302f32342d3234203d3e203532353332.roa
Signing time:             Wed 10 Jul 2024 20:42:27 +0000
ROA not before:           Wed 10 Jul 2024 20:37:27 +0000
ROA not after:            Wed 09 Jul 2025 20:42:27 +0000
asID:                     52532
IP address blocks:        201.49.237.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl
                          rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:43:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:b4:e0:ed:43:be:2e:07:ab:09:64:73:fd:2d:2e:e3:21:3e:6c:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
        Validity
            Not Before: Jul 10 20:37:27 2024 GMT
            Not After : Jul  9 20:42:27 2025 GMT
        Subject: CN=61AE17242700EEB66A136A007D395CCF78AC9C6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:22:c0:c0:02:4f:76:b3:02:66:04:a8:ae:67:
                    e1:e0:b6:17:12:87:95:03:12:d6:d6:ca:1a:ee:02:
                    e7:65:25:d2:84:77:b1:5e:91:24:1b:1d:ad:44:08:
                    7d:87:50:9b:ec:90:5c:6c:b6:67:18:97:46:76:71:
                    ee:7b:c2:81:5e:8a:e6:c9:52:22:cf:3b:c0:30:29:
                    bc:38:c9:4f:90:08:ba:7e:0a:c0:e2:fd:eb:be:6a:
                    7e:63:ad:ac:f8:5f:65:a0:bd:1c:63:d9:b9:a6:c6:
                    84:a3:1c:c4:8c:38:ca:f9:7b:90:65:5c:86:d3:9b:
                    b9:20:cf:81:80:e3:ae:e6:89:47:e5:9e:ce:56:8e:
                    58:db:aa:01:bd:2c:5a:96:30:16:a0:a0:99:5c:ab:
                    98:b7:19:78:3d:82:32:ac:4c:3c:24:41:05:8a:34:
                    3b:02:be:1a:34:43:5e:07:1a:94:90:bd:f5:d7:97:
                    da:f4:a3:3f:92:3f:42:c3:dd:55:be:1d:ed:20:8e:
                    76:1c:9d:be:1f:81:24:a3:bd:22:43:ef:55:4d:3f:
                    ec:61:83:c3:e7:e6:fa:49:f8:b7:d1:eb:ea:95:08:
                    23:5f:45:59:4b:16:8f:5e:1d:40:78:86:5f:92:ce:
                    4b:05:3b:e6:44:8f:be:b8:62:15:64:20:7d:e1:1e:
                    3f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:AE:17:24:27:00:EE:B6:6A:13:6A:00:7D:39:5C:CF:78:AC:9C:6C
            X509v3 Authority Key Identifier:
                keyid:2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3233372e302f32342d3234203d3e203532353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:b1:5f:c4:5d:ff:6b:45:b0:5d:44:e3:66:5d:93:37:e9:ca:
         25:cd:3f:c9:ed:66:37:55:af:87:28:e8:7d:1d:e3:b6:f4:82:
         cb:28:39:37:c0:49:10:4b:ac:cf:32:a1:35:1f:25:ee:56:b1:
         fc:63:e5:96:ed:2c:63:a6:78:bc:05:42:19:c9:ef:5b:a3:c3:
         07:41:64:fd:fb:a2:00:9f:13:3c:47:e9:38:a3:cf:3e:36:a8:
         e7:be:e6:3e:69:4a:75:de:ef:57:b4:cf:ad:b1:81:91:2b:8f:
         10:11:9d:57:04:12:cf:a6:b6:75:15:ab:ee:45:91:bd:38:28:
         ee:48:05:ed:ba:e4:cc:27:c3:18:28:19:bb:8b:2e:cc:2b:af:
         ad:74:66:b7:34:9e:77:f7:31:57:3f:09:8a:0d:88:dd:92:0e:
         dd:03:53:b5:b9:0c:bb:46:5c:3b:58:d3:73:a9:5e:78:29:ef:
         1f:57:18:34:87:bb:84:40:6e:78:75:0f:53:01:7f:4b:70:19:
         21:a6:a8:c5:1d:d0:02:3a:d5:8c:fb:31:92:2a:4b:af:ab:10:
         e8:05:77:9f:8c:a1:dd:91:fb:bd:99:e6:5c:e3:1d:cc:5d:45:
         85:f9:45:96:4d:43:b2:f0:22:2c:d5:a3:9d:03:ca:59:76:1e:
         23:b9:24:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:32 2024 by rpki-client on console-ams.rpki-client.org