Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/1/3230312e34392e3133362e302f32332d3233203d3e20323730353730.roa
File:                     3230312e34392e3133362e302f32332d3233203d3e20323730353730.roa (raw, json)
Hash identifier:          11/7ilMN0Ah4UUp2kuySYBp1SKw7AlyeBLnWUNIvWPo=
Subject key identifier:   8C:2F:C6:6F:B9:9D:9C:D8:B3:3D:A7:1E:A9:43:BE:37:E4:C1:4E:6B
Certificate issuer:       /CN=09FD8C705CB193341D9B117D7146D563E0766012
Certificate serial:       1261F7C942BF8ADE74A03C1E1DCC692308C5528D
Authority key identifier: 09:FD:8C:70:5C:B1:93:34:1D:9B:11:7D:71:46:D5:63:E0:76:60:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09FD8C705CB193341D9B117D7146D563E0766012.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/1/3230312e34392e3133362e302f32332d3233203d3e20323730353730.roa
Signing time:             Thu 11 Apr 2024 11:06:49 +0000
ROA not before:           Thu 11 Apr 2024 11:01:49 +0000
ROA not after:            Thu 10 Apr 2025 11:06:49 +0000
asID:                     270570
IP address blocks:        201.49.136.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/1/09FD8C705CB193341D9B117D7146D563E0766012.crl
                          rsync://rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/1/09FD8C705CB193341D9B117D7146D563E0766012.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09FD8C705CB193341D9B117D7146D563E0766012.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:61:f7:c9:42:bf:8a:de:74:a0:3c:1e:1d:cc:69:23:08:c5:52:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09FD8C705CB193341D9B117D7146D563E0766012
        Validity
            Not Before: Apr 11 11:01:49 2024 GMT
            Not After : Apr 10 11:06:49 2025 GMT
        Subject: CN=8C2FC66FB99D9CD8B33DA71EA943BE37E4C14E6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:50:c8:54:7a:5f:54:78:c5:8b:24:01:79:4d:
                    7a:46:25:0e:b6:d9:ac:25:6e:d0:c6:42:4d:4f:a6:
                    98:14:6a:58:8b:09:2c:86:a9:31:be:e9:ef:b5:a7:
                    b7:44:13:91:1f:a1:4e:4f:c5:0a:94:7c:69:0d:ef:
                    be:ba:d3:45:7b:3c:64:7f:fb:5c:b8:43:49:65:04:
                    19:d4:57:ab:30:01:ce:d0:06:45:eb:2e:1d:f9:d0:
                    60:b1:48:25:6c:01:94:0c:5c:84:9b:dc:7c:bf:41:
                    07:68:12:ae:a3:0a:7e:c8:91:30:f5:66:5f:52:02:
                    3f:72:f9:3e:84:69:c3:fe:07:09:9e:f5:4e:6c:47:
                    08:c4:97:8d:1f:a6:33:a0:80:0d:95:c6:e4:42:dd:
                    0d:5f:69:7a:9d:48:03:57:74:70:14:2e:98:c9:0a:
                    7a:a2:9f:1e:b6:16:96:f4:34:e7:e7:c6:02:d8:74:
                    b7:16:b0:43:f2:44:3d:c1:b1:cd:0b:7d:bd:8c:5f:
                    65:50:d7:a3:f3:7d:30:15:c8:f8:e2:69:39:6d:21:
                    c4:95:f9:af:36:e8:8b:80:c8:a1:12:fb:81:9e:85:
                    8e:17:dc:9c:15:a2:5e:fc:11:d8:3e:79:63:21:90:
                    f2:7b:5e:79:67:fc:30:40:85:2e:b6:51:98:41:4a:
                    26:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:2F:C6:6F:B9:9D:9C:D8:B3:3D:A7:1E:A9:43:BE:37:E4:C1:4E:6B
            X509v3 Authority Key Identifier:
                keyid:09:FD:8C:70:5C:B1:93:34:1D:9B:11:7D:71:46:D5:63:E0:76:60:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/1/09FD8C705CB193341D9B117D7146D563E0766012.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09FD8C705CB193341D9B117D7146D563E0766012.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/1/3230312e34392e3133362e302f32332d3233203d3e20323730353730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:24:fe:b6:ff:41:aa:08:ba:00:ba:fe:7a:b3:5b:f0:c5:70:
         73:a3:8a:a6:0d:4b:82:44:0b:6c:3a:79:da:ee:7a:c9:73:fe:
         59:7a:0e:e7:d9:8c:8d:47:6f:08:5b:1b:eb:7d:c6:0b:41:79:
         45:f6:27:26:d5:cf:8e:14:a2:06:d8:f9:31:27:0a:dc:7c:d1:
         fe:8f:96:51:45:53:7a:a9:ce:28:b2:99:ac:e1:8c:ec:8b:7f:
         c8:bf:6f:1f:6b:43:f8:ae:f5:db:41:9e:f2:a5:2a:13:ce:c8:
         9e:f8:c9:85:66:43:2d:ae:8d:77:7b:3c:2a:c8:24:0f:2f:ab:
         24:07:83:59:84:70:9d:90:c4:dd:01:6e:4b:4a:3f:dd:d7:7b:
         f5:6f:16:e7:0d:7c:2f:dd:d9:90:94:a2:fb:8c:2a:9e:ae:25:
         ea:a5:37:48:e8:63:80:d0:11:6c:b1:f2:ab:bf:9a:21:21:03:
         e1:b7:d1:46:f2:06:c1:b4:d7:db:74:f2:fc:f9:a5:73:c1:dc:
         95:04:a9:f0:fe:a5:23:db:28:56:52:65:d6:bf:e0:36:19:51:
         a6:48:e3:ae:2d:6d:6e:f1:4e:ab:dc:0c:9a:2d:79:d8:a1:1e:
         ae:76:4c:32:d1:38:71:5a:7c:2a:97:9f:c6:60:f8:d9:13:20:
         bc:57:7e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 06:48:50 2024 by rpki-client on console-fra.rpki-client.org