Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/3230302e3231382e3234382e302f32342d3234203d3e203238353934.roa
File:                     3230302e3231382e3234382e302f32342d3234203d3e203238353934.roa (raw, json)
Hash identifier:          cDgZ5T1DJnYPK47BurZgV6eGTudixfk0sXcmf270HAM=
Subject key identifier:   89:05:E0:43:43:26:00:87:5F:15:B6:75:47:2B:D8:91:16:D5:15:BF
Certificate issuer:       /CN=9C0B0F9C917C39C4E0A392991B6A86E0D4917406
Certificate serial:       7187268AC200E8DCB0285935C64EFF234ABD89F1
Authority key identifier: 9C:0B:0F:9C:91:7C:39:C4:E0:A3:92:99:1B:6A:86:E0:D4:91:74:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/3230302e3231382e3234382e302f32342d3234203d3e203238353934.roa
Signing time:             Thu 04 Apr 2024 00:53:38 +0000
ROA not before:           Thu 04 Apr 2024 00:48:38 +0000
ROA not after:            Thu 03 Apr 2025 00:53:38 +0000
asID:                     28594
IP address blocks:        200.218.248.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.crl
                          rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:87:26:8a:c2:00:e8:dc:b0:28:59:35:c6:4e:ff:23:4a:bd:89:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C0B0F9C917C39C4E0A392991B6A86E0D4917406
        Validity
            Not Before: Apr  4 00:48:38 2024 GMT
            Not After : Apr  3 00:53:38 2025 GMT
        Subject: CN=8905E043432600875F15B675472BD89116D515BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:03:f0:f8:e6:68:59:f0:f8:34:da:0c:00:c3:
                    8a:25:1d:45:b5:4a:1e:e5:7d:17:6d:f5:e4:ab:14:
                    81:32:da:e8:83:72:bb:5d:6b:18:7f:12:9f:76:7a:
                    ea:b5:15:86:68:c0:23:79:64:22:26:e5:87:96:19:
                    75:3b:e8:d9:a4:31:42:f3:79:9c:a8:5f:7c:cd:6b:
                    14:ba:b6:80:1f:e1:cb:47:c8:62:f9:2e:d4:3f:78:
                    59:01:9a:54:41:c5:9c:93:74:ec:95:c7:3b:b2:61:
                    f1:ac:c9:77:76:a2:4f:0b:3e:b4:d7:69:a2:0e:27:
                    22:07:2d:d1:08:ed:f7:ed:42:f9:79:2a:ed:bf:e9:
                    b5:f7:d0:14:3a:a9:ee:36:23:39:ed:06:f4:37:d7:
                    a4:2b:78:8e:8b:2e:04:d5:00:5c:ec:ac:4e:72:ba:
                    5f:40:3a:0a:a3:82:c9:79:6a:c3:82:51:0e:96:1e:
                    f0:bf:62:25:57:89:64:20:92:f3:20:f5:89:e3:64:
                    54:32:a5:b7:20:89:d8:61:30:31:95:fe:cd:b9:ad:
                    12:9f:4c:7b:b3:68:88:d6:6a:e1:fc:15:5f:d1:63:
                    79:b4:b5:c8:38:81:b8:58:5b:4b:9f:7b:9a:bc:1b:
                    84:ae:06:3a:dd:b0:bd:18:9d:df:f1:5a:3d:48:bf:
                    84:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:05:E0:43:43:26:00:87:5F:15:B6:75:47:2B:D8:91:16:D5:15:BF
            X509v3 Authority Key Identifier:
                keyid:9C:0B:0F:9C:91:7C:39:C4:E0:A3:92:99:1B:6A:86:E0:D4:91:74:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/3230302e3231382e3234382e302f32342d3234203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:e3:4c:e0:6b:8e:62:01:fa:bc:5d:19:f2:b1:76:8f:61:3f:
         4a:b0:74:12:eb:15:0d:a4:20:cd:80:3b:0b:fb:cc:de:ca:00:
         41:01:a6:a0:3b:f7:0f:88:23:b0:cc:91:89:8f:73:3c:88:37:
         fd:a3:fd:40:e1:48:4e:5c:ee:eb:57:07:ee:0c:eb:4e:25:d1:
         ac:d3:cf:57:10:56:e0:55:26:fb:29:1f:d3:ad:c8:ea:4b:65:
         e1:72:da:00:82:4e:6e:5f:06:10:bb:7a:ba:62:a4:46:85:86:
         31:c5:02:b6:9d:8f:b5:47:6d:d6:bb:98:f0:88:30:2a:06:af:
         7b:5c:0d:31:20:2c:9d:61:b6:ab:03:7b:a3:f2:1f:d8:ab:3d:
         6b:52:15:d7:6f:72:57:2b:70:80:62:95:51:bb:fc:5f:47:61:
         26:9f:7a:9a:e4:31:2b:49:96:12:b8:6f:00:89:7e:61:47:cd:
         cb:87:27:53:aa:3c:f8:9c:0f:05:c3:bc:6a:e5:3e:54:0c:cf:
         1a:4a:dd:96:1f:8d:62:54:b0:4c:b5:0b:33:40:7a:26:60:7f:
         2a:3b:4e:1f:f1:08:0b:4c:39:df:63:14:2a:2c:32:56:95:5e:
         2d:19:9c:3b:9d:9a:54:33:53:66:db:4e:c9:b0:ca:84:f0:ee:
         d9:70:5f:b2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUcYcmisIA6NywKFk1xk7/I0q9ifEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUMwQjBGOUM5MTdDMzlDNEUwQTM5Mjk5MUI2QTg2RTBE
NDkxNzQwNjAeFw0yNDA0MDQwMDQ4MzhaFw0yNTA0MDMwMDUzMzhaMDMxMTAvBgNV
BAMTKDg5MDVFMDQzNDMyNjAwODc1RjE1QjY3NTQ3MkJEODkxMTZENTE1QkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2A/D45mhZ8Pg02gwAw4olHUW1
Sh7lfRdt9eSrFIEy2uiDcrtdaxh/Ep92euq1FYZowCN5ZCIm5YeWGXU76NmkMULz
eZyoX3zNaxS6toAf4ctHyGL5LtQ/eFkBmlRBxZyTdOyVxzuyYfGsyXd2ok8LPrTX
aaIOJyIHLdEI7fftQvl5Ku2/6bX30BQ6qe42IzntBvQ316QreI6LLgTVAFzsrE5y
ul9AOgqjgsl5asOCUQ6WHvC/YiVXiWQgkvMg9YnjZFQypbcgidhhMDGV/s25rRKf
THuzaIjWauH8FV/RY3m0tcg4gbhYW0ufe5q8G4SuBjrdsL0Ynd/xWj1Iv4QJAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUiQXgQ0MmAIdfFbZ1RyvYkRbVFb8wHwYDVR0j
BBgwFoAUnAsPnJF8OcTgo5KZG2qG4NSRdAYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTNqampURGZVQWVSQ3FSd1lKNkZNcjlCb3l5dWNVOGNpd25QSzRNaEx5
d3ovMi85QzBCMEY5QzkxN0MzOUM0RTBBMzkyOTkxQjZBODZFMEQ0OTE3NDA2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDMEIwRjlDOTE3QzM5QzRF
MEEzOTI5OTFCNkE4NkUwRDQ5MTc0MDYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzUzampqVERmVUFlUkNxUndZSjZGTXI5Qm95eXVjVThjaXduUEs0TWhMeXd6LzIv
MzIzMDMwMmUzMjMxMzgyZTMyMzQzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzNTM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADI2vgwDQYJKoZIhvcNAQELBQADggEBAGHjTOBr
jmIB+rxdGfKxdo9hP0qwdBLrFQ2kIM2AOwv7zN7KAEEBpqA79w+II7DMkYmPczyI
N/2j/UDhSE5c7utXB+4M604l0azTz1cQVuBVJvspH9OtyOpLZeFy2gCCTm5fBhC7
erpipEaFhjHFAradj7VHbda7mPCIMCoGr3tcDTEgLJ1htqsDe6PyH9irPWtSFddv
clcrcIBilVG7/F9HYSafeprkMStJlhK4bwCJfmFHzcuHJ1OqPPicDwXDvGrlPlQM
zxpK3ZYfjWJUsEy1CzNAeiZgfyo7Th/xCAtMOd9jFCosMlaVXi0ZnDudmlQzU2bb
TsmwyoTw7tlwX7I=
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:15 2024 by rpki-client on console-ams.rpki-client.org