Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/1/3230312e34392e3133362e302f32342d3234203d3e20323730353730.roa
File:                     3230312e34392e3133362e302f32342d3234203d3e20323730353730.roa (raw, json)
Hash identifier:          QvYRoTnfMxGBtTdbtvd85e7fbTOElfrnsTy3kTq+PrE=
Subject key identifier:   FD:DC:22:0A:F4:B4:8A:8E:95:B1:C4:DF:4B:41:4B:3E:47:42:15:B7
Certificate issuer:       /CN=09FD8C705CB193341D9B117D7146D563E0766012
Certificate serial:       5E1168872C9CA0F43AAF8451F4650074651DB0E2
Authority key identifier: 09:FD:8C:70:5C:B1:93:34:1D:9B:11:7D:71:46:D5:63:E0:76:60:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09FD8C705CB193341D9B117D7146D563E0766012.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/1/3230312e34392e3133362e302f32342d3234203d3e20323730353730.roa
Signing time:             Thu 11 Apr 2024 11:06:48 +0000
ROA not before:           Thu 11 Apr 2024 11:01:48 +0000
ROA not after:            Thu 10 Apr 2025 11:06:48 +0000
asID:                     270570
IP address blocks:        201.49.136.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/1/09FD8C705CB193341D9B117D7146D563E0766012.crl
                          rsync://rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/1/09FD8C705CB193341D9B117D7146D563E0766012.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09FD8C705CB193341D9B117D7146D563E0766012.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:11:68:87:2c:9c:a0:f4:3a:af:84:51:f4:65:00:74:65:1d:b0:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09FD8C705CB193341D9B117D7146D563E0766012
        Validity
            Not Before: Apr 11 11:01:48 2024 GMT
            Not After : Apr 10 11:06:48 2025 GMT
        Subject: CN=FDDC220AF4B48A8E95B1C4DF4B414B3E474215B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4c:97:02:7f:00:a6:b1:08:24:36:9d:27:1b:
                    23:5a:6c:d9:a9:3a:61:95:22:0b:c7:93:3d:71:f7:
                    ae:31:06:10:03:7e:a5:f1:1f:d3:a1:3e:5f:b4:de:
                    de:a9:1c:77:b4:96:0a:d1:27:43:29:a5:8d:a4:b7:
                    c2:b9:09:d1:91:4b:16:8e:9d:50:aa:df:0b:85:66:
                    e5:cb:aa:12:03:7e:81:97:25:b1:55:9f:a6:59:90:
                    b2:8c:1f:69:f4:27:55:ab:e7:19:f9:14:50:65:75:
                    94:74:bc:81:2d:c0:8e:fd:d2:d3:e0:bb:93:d6:c4:
                    37:e4:d2:0a:04:be:b2:3d:63:1f:c4:30:4e:ac:60:
                    04:e0:3d:75:61:0f:75:57:9c:ac:e0:b9:69:d4:5a:
                    7c:ff:fd:97:a3:52:2f:aa:49:da:5d:31:db:5e:41:
                    6f:7f:6d:4d:18:7b:28:19:3b:7b:05:7b:92:03:b0:
                    b8:6c:98:d1:76:87:73:29:07:91:9e:c6:35:87:a8:
                    fd:b8:d3:ee:78:f4:c4:ab:c5:14:5b:5f:3e:33:79:
                    0f:83:bb:13:ec:36:48:b4:e9:04:d2:3c:bb:a9:35:
                    8e:cd:88:55:3e:88:05:38:bb:8d:bf:3d:07:d7:28:
                    c5:39:52:92:77:cd:ae:76:5b:b4:d4:25:ad:cf:78:
                    0d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:DC:22:0A:F4:B4:8A:8E:95:B1:C4:DF:4B:41:4B:3E:47:42:15:B7
            X509v3 Authority Key Identifier:
                keyid:09:FD:8C:70:5C:B1:93:34:1D:9B:11:7D:71:46:D5:63:E0:76:60:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/1/09FD8C705CB193341D9B117D7146D563E0766012.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09FD8C705CB193341D9B117D7146D563E0766012.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/1/3230312e34392e3133362e302f32342d3234203d3e20323730353730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:89:c5:bd:da:7c:11:19:25:51:07:63:c3:44:a9:ad:3a:7e:
         47:67:5a:7d:94:10:35:d1:41:92:11:4f:b5:32:0e:55:42:71:
         c5:7c:d8:a7:a8:e8:02:27:5e:71:27:27:c3:4d:96:70:b8:3f:
         de:c3:34:88:48:f5:12:35:74:d7:e0:0c:b3:be:b8:ca:32:9a:
         3b:b9:fc:48:53:69:e4:3b:fa:c0:17:70:59:2d:52:82:59:b2:
         9b:4a:1e:1c:43:a3:8f:2a:0d:ce:6b:71:f8:66:2a:e0:88:c9:
         97:8e:a3:3a:cf:1b:15:96:c1:cd:40:41:36:d5:42:b7:ff:22:
         85:c8:0f:ae:71:5e:01:ad:41:cd:7a:d6:6f:a1:2d:99:f8:ea:
         fa:66:a7:4a:1d:9b:68:53:0e:2d:8b:db:9c:ac:47:2d:ed:a7:
         21:6e:73:24:c4:09:98:76:70:d1:f5:36:d7:19:ab:b0:83:d2:
         ff:8d:f8:c2:27:24:93:eb:d2:8e:1b:bf:fb:ca:87:fb:97:d3:
         8d:2b:5c:f5:15:bb:9f:89:48:1c:74:c5:f8:de:2c:26:7a:a5:
         35:f9:15:bc:bb:a7:0d:d4:e7:0a:70:04:fa:54:19:b9:23:fc:
         68:78:50:7d:88:07:41:27:e1:91:ac:3d:e0:88:b6:41:d4:09:
         a4:7c:7b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 07:19:14 2024 by rpki-client on console-ams.rpki-client.org