Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/1/3230312e34392e3133392e302f32342d3234203d3e20323730353730.roa
File:                     3230312e34392e3133392e302f32342d3234203d3e20323730353730.roa (raw, json)
Hash identifier:          AJJYN+UWFgQ6CYme2v/d79vXzH6o6LuiyCTOMTiYsug=
Subject key identifier:   33:5E:CD:B5:64:4B:B7:C8:C1:27:63:99:3A:62:5E:B1:3B:F5:BC:F5
Certificate issuer:       /CN=09FD8C705CB193341D9B117D7146D563E0766012
Certificate serial:       43A36EC274CEE23E650101B7587A30198DCBB5A4
Authority key identifier: 09:FD:8C:70:5C:B1:93:34:1D:9B:11:7D:71:46:D5:63:E0:76:60:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09FD8C705CB193341D9B117D7146D563E0766012.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/1/3230312e34392e3133392e302f32342d3234203d3e20323730353730.roa
Signing time:             Thu 11 Apr 2024 11:06:48 +0000
ROA not before:           Thu 11 Apr 2024 11:01:48 +0000
ROA not after:            Thu 10 Apr 2025 11:06:48 +0000
asID:                     270570
IP address blocks:        201.49.139.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/1/09FD8C705CB193341D9B117D7146D563E0766012.crl
                          rsync://rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/1/09FD8C705CB193341D9B117D7146D563E0766012.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09FD8C705CB193341D9B117D7146D563E0766012.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 21:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:a3:6e:c2:74:ce:e2:3e:65:01:01:b7:58:7a:30:19:8d:cb:b5:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09FD8C705CB193341D9B117D7146D563E0766012
        Validity
            Not Before: Apr 11 11:01:48 2024 GMT
            Not After : Apr 10 11:06:48 2025 GMT
        Subject: CN=335ECDB5644BB7C8C12763993A625EB13BF5BCF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:26:b8:ee:82:9a:98:1e:fc:ac:94:8f:1a:32:
                    71:1f:30:76:98:5c:86:24:fb:7f:ca:d6:51:c5:2e:
                    f6:f8:8d:ca:59:c0:a6:19:d8:c1:29:d3:06:74:f1:
                    30:b5:8e:12:f5:a9:3d:71:e8:ba:3c:64:e1:a1:c5:
                    5b:20:69:e2:d6:43:cf:c0:c5:ad:9a:8a:a8:3c:c9:
                    b2:17:2d:5e:d4:ac:d8:7e:fa:a7:24:6c:c1:0b:c8:
                    7a:d0:22:77:58:c2:cd:80:b7:9f:e4:b6:24:ad:4c:
                    10:da:0e:37:18:83:66:12:4b:90:5e:7a:dd:01:96:
                    ac:f8:9c:44:1e:c4:17:3f:01:ea:e0:18:96:9d:77:
                    01:8b:4d:4a:a1:cf:f3:c4:60:54:06:ea:2d:f7:43:
                    bf:e5:73:b7:91:3e:3d:08:11:dd:79:15:dc:bf:09:
                    a5:13:e3:52:bf:bb:e0:08:36:58:f2:74:25:07:7f:
                    8c:31:94:cf:b8:8d:c6:b8:e0:f9:51:b1:c6:ca:a7:
                    23:84:6f:85:d7:8b:2a:9b:18:9b:a5:37:11:a6:82:
                    c7:b5:be:0c:d1:da:6a:fa:e2:17:1c:6f:fb:c8:5f:
                    4b:79:6c:c4:c0:8a:4f:9a:05:2a:98:58:b7:45:19:
                    25:db:17:1b:5f:2e:ff:9b:0e:0f:d3:f4:01:89:57:
                    49:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:5E:CD:B5:64:4B:B7:C8:C1:27:63:99:3A:62:5E:B1:3B:F5:BC:F5
            X509v3 Authority Key Identifier:
                keyid:09:FD:8C:70:5C:B1:93:34:1D:9B:11:7D:71:46:D5:63:E0:76:60:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/1/09FD8C705CB193341D9B117D7146D563E0766012.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09FD8C705CB193341D9B117D7146D563E0766012.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/1/3230312e34392e3133392e302f32342d3234203d3e20323730353730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:0a:40:a5:2d:22:e1:a1:05:4e:49:9a:6d:65:ab:16:0f:2f:
         93:14:a1:d6:dd:52:86:5b:44:30:1c:ed:2c:17:58:1d:47:ef:
         aa:78:0e:95:3e:2b:39:51:5c:e8:b1:2f:56:95:ad:f1:0e:91:
         f3:25:e3:d5:73:9f:48:f4:0d:66:b9:dd:e3:70:29:fd:2c:2c:
         ff:61:49:78:fb:1d:79:b6:38:af:cb:6a:9d:f6:ab:00:0d:d7:
         b2:c5:46:4d:99:e6:a1:8d:f2:f6:46:b5:91:c4:f3:d0:a9:08:
         29:7a:73:01:bb:3e:4f:2c:4c:12:82:5f:be:03:a7:a8:64:cf:
         bf:a1:0e:43:50:17:dc:76:3e:a5:bc:3a:9e:3b:8d:27:22:4e:
         17:0f:a7:66:b6:10:d8:e7:11:fc:ed:82:f6:3e:3c:4b:06:d5:
         e3:55:4b:2e:97:bc:82:25:ce:bd:ce:2c:e1:7e:58:9c:25:5a:
         15:d9:0d:c8:d6:4d:78:db:6a:41:92:65:f5:60:45:71:3f:e3:
         97:e0:e6:1d:c6:6d:c5:98:3f:80:ce:a4:af:e8:4b:ab:b8:5a:
         b4:00:5a:97:c3:85:93:2c:df:f2:4c:51:fa:a5:63:12:e4:8e:
         59:92:9a:1a:6f:03:e5:d4:d8:8f:04:0b:ad:f5:91:a2:18:55:
         a6:97:90:07
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQ6NuwnTO4j5lAQG3WHowGY3LtaQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDlGRDhDNzA1Q0IxOTMzNDFEOUIxMTdENzE0NkQ1NjNF
MDc2NjAxMjAeFw0yNDA0MTExMTAxNDhaFw0yNTA0MTAxMTA2NDhaMDMxMTAvBgNV
BAMTKDMzNUVDREI1NjQ0QkI3QzhDMTI3NjM5OTNBNjI1RUIxM0JGNUJDRjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDJrjugpqYHvyslI8aMnEfMHaY
XIYk+3/K1lHFLvb4jcpZwKYZ2MEp0wZ08TC1jhL1qT1x6Lo8ZOGhxVsgaeLWQ8/A
xa2aiqg8ybIXLV7UrNh++qckbMELyHrQIndYws2At5/ktiStTBDaDjcYg2YSS5Be
et0Blqz4nEQexBc/AergGJaddwGLTUqhz/PEYFQG6i33Q7/lc7eRPj0IEd15Fdy/
CaUT41K/u+AINljydCUHf4wxlM+4jca44PlRscbKpyOEb4XXiyqbGJulNxGmgse1
vgzR2mr64hccb/vIX0t5bMTAik+aBSqYWLdFGSXbFxtfLv+bDg/T9AGJV0nrAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUM17NtWRLt8jBJ2OZOmJesTv1vPUwHwYDVR0j
BBgwFoAUCf2McFyxkzQdmxF9cUbVY+B2YBIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTRqV2ZTVVg0cnMyQ3hmNTNHbTk1WExQVlNwUmNaQXNQVjFwMndRUWh4
d24vMS8wOUZEOEM3MDVDQjE5MzM0MUQ5QjExN0Q3MTQ2RDU2M0UwNzY2MDEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA5RkQ4QzcwNUNCMTkzMzQx
RDlCMTE3RDcxNDZENTYzRTA3NjYwMTIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzU0aldmU1VYNHJzMkN4ZjUzR205NVhMUFZTcFJjWkFzUFYxcDJ3UVFoeHduLzEv
MzIzMDMxMmUzNDM5MmUzMTMzMzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzAzNTM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADJMYswDQYJKoZIhvcNAQELBQADggEBAHEKQKUt
IuGhBU5Jmm1lqxYPL5MUodbdUoZbRDAc7SwXWB1H76p4DpU+KzlRXOixL1aVrfEO
kfMl49Vzn0j0DWa53eNwKf0sLP9hSXj7HXm2OK/Lap32qwAN17LFRk2Z5qGN8vZG
tZHE89CpCCl6cwG7Pk8sTBKCX74Dp6hkz7+hDkNQF9x2PqW8Op47jSciThcPp2a2
ENjnEfztgvY+PEsG1eNVSy6XvIIlzr3OLOF+WJwlWhXZDcjWTXjbakGSZfVgRXE/
45fg5h3GbcWYP4DOpK/oS6u4WrQAWpfDhZMs3/JMUfqlYxLkjlmSmhpvA+XU2I8E
C631kaIYVaaXkAc=
-----END CERTIFICATE-----
Generated at Sat Sep 28 20:51:15 2024 by rpki-client on console-fra.rpki-client.org