Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3233392e302f32342d3234203d3e203532353332.roa
File:                     3230312e34392e3233392e302f32342d3234203d3e203532353332.roa (raw, json)
Hash identifier:          KJQ1JwBum9NTl3xzJgF6CeArThudOJLd9C0jDzHW+sM=
Subject key identifier:   19:F6:8F:80:45:67:14:5F:14:97:36:90:7C:17:F0:3B:8A:4D:64:03
Certificate issuer:       /CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
Certificate serial:       731116ABD329E993C6D1A9D1034D0D6034AB02FA
Authority key identifier: 2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3233392e302f32342d3234203d3e203532353332.roa
Signing time:             Wed 10 Jul 2024 20:42:28 +0000
ROA not before:           Wed 10 Jul 2024 20:37:28 +0000
ROA not after:            Wed 09 Jul 2025 20:42:28 +0000
asID:                     52532
IP address blocks:        201.49.239.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl
                          rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:43:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:11:16:ab:d3:29:e9:93:c6:d1:a9:d1:03:4d:0d:60:34:ab:02:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
        Validity
            Not Before: Jul 10 20:37:28 2024 GMT
            Not After : Jul  9 20:42:28 2025 GMT
        Subject: CN=19F68F804567145F149736907C17F03B8A4D6403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:50:f6:98:18:21:af:7e:b9:8d:a1:27:04:00:
                    53:bf:8b:c9:30:c1:23:77:8e:a0:aa:4d:dc:c8:0a:
                    f9:5e:34:dc:52:ea:a6:74:a9:da:53:1d:84:ff:0c:
                    6e:08:a3:13:67:0a:e5:2f:4a:b4:70:61:a3:1e:29:
                    cb:e5:b7:7f:b5:71:a1:5e:37:8d:76:89:a8:d7:47:
                    53:9e:ce:c7:13:e7:c3:75:8b:ee:8a:f3:ad:17:0e:
                    69:6d:2d:d5:9e:6b:ed:7e:f0:77:f7:24:8f:09:34:
                    69:f2:8b:4c:ff:9c:f6:22:fd:86:c9:20:61:ba:9c:
                    90:99:b1:42:00:0a:36:5c:a8:32:dc:6c:de:bd:44:
                    a0:e2:b2:b1:15:ae:ff:2e:04:a2:7c:76:c7:8e:22:
                    3b:ed:f7:cb:1c:13:d0:81:f4:4e:7a:e7:51:5f:55:
                    0d:a2:a9:b2:c2:4f:9d:0f:03:e6:bc:a5:fa:95:32:
                    49:c4:19:39:f9:a4:cd:68:c8:f6:c6:8d:3f:46:6f:
                    04:06:c7:64:48:ca:b3:87:95:99:24:13:de:7d:dc:
                    85:1f:ad:69:66:b7:cc:5a:e3:fc:9c:38:de:dc:03:
                    2f:20:23:12:27:8d:c5:71:02:04:45:89:2b:23:72:
                    cf:1c:6d:7a:63:0d:bb:1b:d4:9a:2a:06:86:eb:13:
                    d2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F6:8F:80:45:67:14:5F:14:97:36:90:7C:17:F0:3B:8A:4D:64:03
            X509v3 Authority Key Identifier:
                keyid:2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3233392e302f32342d3234203d3e203532353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:39:eb:4c:91:3d:2b:db:22:7f:aa:33:80:be:ad:d8:da:3a:
         c4:28:f0:15:34:8c:43:70:4b:c9:84:cb:f5:44:ba:c8:97:8f:
         04:ec:32:f8:55:13:ce:df:86:d7:26:7d:73:d7:0f:72:e4:42:
         51:c0:77:b3:89:41:cd:f2:d5:cd:53:bb:c5:8f:8b:40:71:f2:
         2c:47:40:aa:22:ab:09:ce:eb:e0:b2:0a:17:c1:61:d9:e5:25:
         3e:79:72:c8:02:de:60:76:38:38:69:eb:c9:d7:45:e4:97:9b:
         e6:bc:15:9f:e8:51:d0:27:09:a8:4d:45:61:ed:1d:60:2d:72:
         d8:0f:fb:2c:79:61:21:23:a8:c4:38:da:98:d6:15:93:46:6e:
         b4:68:95:00:c5:62:2e:8a:78:00:af:ee:6a:5d:08:47:0b:a6:
         4f:b1:d3:f7:f9:29:ef:24:fe:1e:c6:58:b9:3d:ea:16:26:b0:
         0b:c1:c9:dc:36:a9:5b:d5:02:c9:70:01:d8:ac:f4:c7:07:d4:
         70:0c:7b:c9:71:d6:8a:e1:d2:89:ec:52:c3:c4:2a:fe:c7:cd:
         75:e9:99:03:90:6e:52:f5:1a:cd:de:38:51:6a:6c:83:de:4b:
         23:7e:f2:e9:e5:0c:cc:a7:8d:29:a3:90:ac:76:76:4e:46:19:
         c7:b2:79:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:25 2024 by rpki-client on console-fra.rpki-client.org