Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/33CtBvsse9zowJrQoVpUUDJgwvz4X11PrUvfo613fP8V/0/3230312e37312e3231362e302f32322d3332203d3e20323731313435.roa
File:                     3230312e37312e3231362e302f32322d3332203d3e20323731313435.roa (raw, json)
Hash identifier:          nQl72TF5s0ejYKsWVml923LbBUli74Cl7Z5POPfYUJk=
Subject key identifier:   ED:86:80:C6:11:18:2E:46:4D:7E:5C:44:2B:70:12:45:7E:93:AB:EF
Certificate issuer:       /CN=5429164DC72EDAA8E89044A7962EFBA59A4A8421
Certificate serial:       55402ABCACB898F156DBD5F0DB1C4DB9B3C12A67
Authority key identifier: 54:29:16:4D:C7:2E:DA:A8:E8:90:44:A7:96:2E:FB:A5:9A:4A:84:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5429164DC72EDAA8E89044A7962EFBA59A4A8421.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/33CtBvsse9zowJrQoVpUUDJgwvz4X11PrUvfo613fP8V/0/3230312e37312e3231362e302f32322d3332203d3e20323731313435.roa
Signing time:             Fri 22 Nov 2024 18:39:29 +0000
ROA not before:           Fri 22 Nov 2024 18:34:29 +0000
ROA not after:            Fri 21 Nov 2025 18:39:29 +0000
asID:                     271145
IP address blocks:        201.71.216.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/33CtBvsse9zowJrQoVpUUDJgwvz4X11PrUvfo613fP8V/0/5429164DC72EDAA8E89044A7962EFBA59A4A8421.crl
                          rsync://rpki-repo.registro.br/repo/33CtBvsse9zowJrQoVpUUDJgwvz4X11PrUvfo613fP8V/0/5429164DC72EDAA8E89044A7962EFBA59A4A8421.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5429164DC72EDAA8E89044A7962EFBA59A4A8421.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:40:2a:bc:ac:b8:98:f1:56:db:d5:f0:db:1c:4d:b9:b3:c1:2a:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5429164DC72EDAA8E89044A7962EFBA59A4A8421
        Validity
            Not Before: Nov 22 18:34:29 2024 GMT
            Not After : Nov 21 18:39:29 2025 GMT
        Subject: CN=ED8680C611182E464D7E5C442B7012457E93ABEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b2:9d:fa:1c:c5:9b:9f:56:a7:01:4b:da:70:
                    0f:6f:d0:8f:78:4c:46:2d:1b:46:39:0d:ff:4b:e2:
                    cd:b3:95:f6:87:6c:55:d8:3f:8e:42:b0:e8:37:9a:
                    4c:79:f6:71:ac:f4:9d:c3:b9:0f:41:5d:06:f0:12:
                    12:1c:9c:8b:87:fc:cb:f9:07:0d:f3:e8:76:68:29:
                    20:8d:1f:e3:8c:e1:3e:30:5c:de:67:d8:bd:66:ce:
                    11:f9:5c:31:bb:62:ea:70:72:2f:7f:f3:48:bb:d1:
                    cb:05:07:1a:bf:2d:16:c7:53:8d:3a:15:94:55:51:
                    ca:2d:04:03:53:cd:7f:c3:bb:af:d0:e1:77:fa:74:
                    45:f9:04:a3:82:df:8c:a2:18:29:1a:66:ce:4e:6b:
                    46:fe:7a:ed:2b:cf:63:cd:01:3f:8a:cf:ad:2e:07:
                    64:9b:1e:49:96:fd:d5:10:f0:a7:e2:17:44:29:a1:
                    7e:8b:6e:b6:12:68:1e:ab:74:cd:57:50:1c:79:18:
                    e8:02:73:26:11:90:9b:aa:5f:d7:e2:03:53:3c:1b:
                    2a:57:3e:0e:b7:26:ec:66:8a:0c:51:5c:14:96:25:
                    88:c2:a3:d5:ae:be:22:f5:d2:fd:d9:f0:d0:57:b8:
                    fa:c3:c7:60:c9:44:fc:43:08:62:ed:d9:07:80:49:
                    2e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:86:80:C6:11:18:2E:46:4D:7E:5C:44:2B:70:12:45:7E:93:AB:EF
            X509v3 Authority Key Identifier:
                keyid:54:29:16:4D:C7:2E:DA:A8:E8:90:44:A7:96:2E:FB:A5:9A:4A:84:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/33CtBvsse9zowJrQoVpUUDJgwvz4X11PrUvfo613fP8V/0/5429164DC72EDAA8E89044A7962EFBA59A4A8421.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5429164DC72EDAA8E89044A7962EFBA59A4A8421.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/33CtBvsse9zowJrQoVpUUDJgwvz4X11PrUvfo613fP8V/0/3230312e37312e3231362e302f32322d3332203d3e20323731313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.71.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:5e:fd:46:6b:3c:df:6c:c0:7e:cb:e8:6f:c6:ed:32:50:1b:
         82:58:d9:0d:8e:c2:6e:8c:3a:3f:a5:b5:64:c5:04:7d:b0:1b:
         80:10:d8:f3:14:0c:3b:a9:79:04:26:42:9d:60:c6:af:1b:51:
         54:12:80:5b:65:4b:9f:3f:46:6b:f0:a9:46:a8:40:c4:ab:a3:
         d5:9d:8b:ea:a3:8e:e3:48:78:7c:7b:e4:f8:45:cd:f4:71:bc:
         ac:ab:59:d1:30:04:ff:d3:21:28:5b:30:99:a5:fa:35:ab:da:
         29:c0:97:79:d5:0c:89:81:fb:7b:90:86:e1:ce:82:db:ad:f9:
         67:e5:46:72:a1:e1:9d:75:f6:0e:4e:88:27:ed:94:bd:4f:44:
         54:8e:2b:20:9a:17:e0:4a:fd:71:d2:1f:fc:23:1c:7d:2b:55:
         2a:41:8b:cd:a6:47:48:3f:d7:51:e6:ff:67:3e:f5:4b:60:03:
         d6:ad:30:55:08:db:b1:45:13:79:d8:e4:40:a4:78:ae:73:be:
         21:02:f0:f2:f6:98:9b:fd:d3:30:d7:23:a6:aa:9c:f3:71:99:
         13:08:7b:4d:1f:ab:db:67:2e:0f:3b:14:46:05:a1:f8:f5:6c:
         ac:e6:79:bc:d0:b4:e0:1c:d4:1e:11:e0:4a:f5:f5:8a:d5:34:
         67:15:c5:96
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUVUAqvKy4mPFW29Xw2xxNubPBKmcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTQyOTE2NERDNzJFREFBOEU4OTA0NEE3OTYyRUZCQTU5
QTRBODQyMTAeFw0yNDExMjIxODM0MjlaFw0yNTExMjExODM5MjlaMDMxMTAvBgNV
BAMTKEVEODY4MEM2MTExODJFNDY0RDdFNUM0NDJCNzAxMjQ1N0U5M0FCRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBsp36HMWbn1anAUvacA9v0I94
TEYtG0Y5Df9L4s2zlfaHbFXYP45CsOg3mkx59nGs9J3DuQ9BXQbwEhIcnIuH/Mv5
Bw3z6HZoKSCNH+OM4T4wXN5n2L1mzhH5XDG7Yupwci9/80i70csFBxq/LRbHU406
FZRVUcotBANTzX/Du6/Q4Xf6dEX5BKOC34yiGCkaZs5Oa0b+eu0rz2PNAT+Kz60u
B2SbHkmW/dUQ8KfiF0QpoX6LbrYSaB6rdM1XUBx5GOgCcyYRkJuqX9fiA1M8GypX
Pg63JuxmigxRXBSWJYjCo9WuviL10v3Z8NBXuPrDx2DJRPxDCGLt2QeASS55AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU7YaAxhEYLkZNflxEK3ASRX6Tq+8wHwYDVR0j
BBgwFoAUVCkWTccu2qjokESnli77pZpKhCEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzNDdEJ2c3NlOXpvd0pyUW9WcFVVREpnd3Z6NFgxMVByVXZmbzYxM2ZQ
OFYvMC81NDI5MTY0REM3MkVEQUE4RTg5MDQ0QTc5NjJFRkJBNTlBNEE4NDIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU0MjkxNjREQzcyRURBQThF
ODkwNDRBNzk2MkVGQkE1OUE0QTg0MjEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzMzQ3RCdnNzZTl6b3dKclFvVnBVVURKZ3d2ejRYMTFQclV2Zm82MTNmUDhWLzAv
MzIzMDMxMmUzNzMxMmUzMjMxMzYyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM3
MzEzMTM0MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALJR9gwDQYJKoZIhvcNAQELBQADggEBAHJe/UZr
PN9swH7L6G/G7TJQG4JY2Q2Owm6MOj+ltWTFBH2wG4AQ2PMUDDupeQQmQp1gxq8b
UVQSgFtlS58/RmvwqUaoQMSro9Wdi+qjjuNIeHx75PhFzfRxvKyrWdEwBP/TIShb
MJml+jWr2inAl3nVDImB+3uQhuHOgtut+WflRnKh4Z119g5OiCftlL1PRFSOKyCa
F+BK/XHSH/wjHH0rVSpBi82mR0g/11Hm/2c+9UtgA9atMFUI27FFE3nY5ECkeK5z
viEC8PL2mJv90zDXI6aqnPNxmRMIe00fq9tnLg87FEYFofj1bKzmebzQtOAc1B4R
4Er19YrVNGcVxZY=
-----END CERTIFICATE-----
Generated at Sat Nov 23 14:22:33 2024 by rpki-client on console-fra.rpki-client.org