Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/0/3230302e3134322e3232342e302f32322d3234203d3e20323730393331.roa
File:                     3230302e3134322e3232342e302f32322d3234203d3e20323730393331.roa (raw, json)
Hash identifier:          LrIzhVcLxXMQmvIXsgfQSVHV62DOX8Q8hQl7ltqbMFc=
Subject key identifier:   AE:23:51:3D:32:C7:BB:67:22:2E:10:34:F3:A0:10:4F:5D:20:32:4C
Certificate issuer:       /CN=542883AF217B55CA895036F0F5CDBCE406386E83
Certificate serial:       5729961DAC545EC8220C3B8C5866B620E75F3309
Authority key identifier: 54:28:83:AF:21:7B:55:CA:89:50:36:F0:F5:CD:BC:E4:06:38:6E:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/542883AF217B55CA895036F0F5CDBCE406386E83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/0/3230302e3134322e3232342e302f32322d3234203d3e20323730393331.roa
Signing time:             Tue 05 Nov 2024 18:13:33 +0000
ROA not before:           Tue 05 Nov 2024 18:08:33 +0000
ROA not after:            Tue 04 Nov 2025 18:13:33 +0000
asID:                     270931
IP address blocks:        200.142.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/0/542883AF217B55CA895036F0F5CDBCE406386E83.crl
                          rsync://rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/0/542883AF217B55CA895036F0F5CDBCE406386E83.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/542883AF217B55CA895036F0F5CDBCE406386E83.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 10:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:29:96:1d:ac:54:5e:c8:22:0c:3b:8c:58:66:b6:20:e7:5f:33:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=542883AF217B55CA895036F0F5CDBCE406386E83
        Validity
            Not Before: Nov  5 18:08:33 2024 GMT
            Not After : Nov  4 18:13:33 2025 GMT
        Subject: CN=AE23513D32C7BB67222E1034F3A0104F5D20324C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2e:cf:7f:73:45:2f:80:2b:8f:7f:8c:6e:6e:
                    f4:94:f1:4c:bd:c9:ce:8b:36:34:74:0c:9e:dc:59:
                    71:21:26:a6:2a:e5:b8:f8:6c:86:54:26:4f:1b:61:
                    5c:09:d9:0b:60:61:2b:35:55:6a:c0:34:92:32:99:
                    71:9b:5b:f3:da:f9:23:35:d3:5f:87:e7:99:e5:aa:
                    d2:f8:04:05:45:0f:17:23:22:cf:d3:37:2e:6b:2b:
                    0d:2a:e5:35:95:8c:ef:b0:18:10:8e:ba:9e:3b:c0:
                    31:35:fd:9c:9a:65:88:30:a8:c9:70:de:1c:10:8a:
                    7b:81:8e:be:a3:d1:69:ed:d5:b0:46:ed:61:96:8f:
                    0d:84:9e:f3:a3:af:3a:85:d6:b4:a5:09:e8:97:6f:
                    6a:59:c1:03:d5:dd:6c:4f:9c:a9:35:49:b6:38:01:
                    3e:86:8c:0e:4a:54:fd:07:1e:8f:4d:4d:3e:78:f1:
                    dd:4b:88:99:f8:0e:62:7e:f7:d4:c6:04:e7:e5:6f:
                    85:4f:f1:28:d4:fb:ab:54:09:a9:2b:95:54:5f:6c:
                    05:b0:8a:28:97:44:ec:81:a7:68:d0:a7:28:e0:2c:
                    f5:63:8f:7f:a1:ac:76:e6:0d:11:fa:5c:d6:a1:31:
                    f6:8c:a2:f4:fe:ca:a4:80:b1:2b:fe:a7:fe:17:9a:
                    2a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:23:51:3D:32:C7:BB:67:22:2E:10:34:F3:A0:10:4F:5D:20:32:4C
            X509v3 Authority Key Identifier:
                keyid:54:28:83:AF:21:7B:55:CA:89:50:36:F0:F5:CD:BC:E4:06:38:6E:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/0/542883AF217B55CA895036F0F5CDBCE406386E83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/542883AF217B55CA895036F0F5CDBCE406386E83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/0/3230302e3134322e3232342e302f32322d3234203d3e20323730393331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.142.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:aa:52:c7:60:0d:6c:5c:34:83:07:ae:2f:2e:71:3c:43:2e:
         58:be:98:4f:09:f3:ea:be:87:24:fd:e8:01:53:e4:40:cb:ff:
         14:4b:6d:f9:54:ab:ad:c6:29:df:76:58:49:79:a5:29:3c:21:
         56:c1:de:63:a4:48:63:f4:2a:39:36:8e:ab:7f:64:47:74:e5:
         01:ba:41:12:fa:4a:d7:5b:7a:26:ff:16:93:45:58:74:8d:ec:
         84:46:fe:99:94:10:b3:9a:0e:f1:ee:6a:79:aa:04:35:f6:21:
         81:3d:0f:0c:06:83:a6:13:4d:db:c3:63:c0:d2:0b:fc:90:6f:
         51:41:11:51:7a:db:89:9f:30:65:81:28:df:84:62:8b:9e:2e:
         4a:f9:bb:26:16:a6:53:1f:1b:1b:d5:ea:a1:ec:f9:1c:f7:b1:
         c8:a6:c9:11:a3:04:34:93:75:22:e2:19:ad:11:30:5d:a7:9a:
         da:ca:29:19:d3:56:f3:75:03:f8:7b:55:4b:ad:57:fc:5c:c5:
         f5:72:d2:57:ec:30:28:57:d9:82:ee:28:20:bf:21:40:d8:b6:
         9e:72:68:43:04:62:ec:fb:5b:bb:6c:7e:6e:35:5f:2f:84:0f:
         1b:67:a9:e8:74:ff:03:94:c9:9f:24:5f:56:67:f7:a5:d0:c5:
         eb:19:35:9d
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUVymWHaxUXsgiDDuMWGa2IOdfMwkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTQyODgzQUYyMTdCNTVDQTg5NTAzNkYwRjVDREJDRTQw
NjM4NkU4MzAeFw0yNDExMDUxODA4MzNaFw0yNTExMDQxODEzMzNaMDMxMTAvBgNV
BAMTKEFFMjM1MTNEMzJDN0JCNjcyMjJFMTAzNEYzQTAxMDRGNUQyMDMyNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsLs9/c0UvgCuPf4xubvSU8Uy9
yc6LNjR0DJ7cWXEhJqYq5bj4bIZUJk8bYVwJ2QtgYSs1VWrANJIymXGbW/Pa+SM1
01+H55nlqtL4BAVFDxcjIs/TNy5rKw0q5TWVjO+wGBCOup47wDE1/ZyaZYgwqMlw
3hwQinuBjr6j0Wnt1bBG7WGWjw2EnvOjrzqF1rSlCeiXb2pZwQPV3WxPnKk1SbY4
AT6GjA5KVP0HHo9NTT548d1LiJn4DmJ+99TGBOflb4VP8SjU+6tUCakrlVRfbAWw
iiiXROyBp2jQpyjgLPVjj3+hrHbmDRH6XNahMfaMovT+yqSAsSv+p/4XmiozAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUriNRPTLHu2ciLhA086AQT10gMkwwHwYDVR0j
BBgwFoAUVCiDryF7VcqJUDbw9c285AY4boMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUpENXJUYUpBNDlqUVNmTGE4ZlhDZzZ2cm4yUmljTkdWdUNwOXRGenZl
WG4vMC81NDI4ODNBRjIxN0I1NUNBODk1MDM2RjBGNUNEQkNFNDA2Mzg2RTgzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU0Mjg4M0FGMjE3QjU1Q0E4
OTUwMzZGMEY1Q0RCQ0U0MDYzODZFODMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVKRDVyVGFKQTQ5alFTZkxhOGZYQ2c2dnJuMlJpY05HVnVDcDl0Rnp2ZVhuLzAv
MzIzMDMwMmUzMTM0MzIyZTMyMzIzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzczMDM5MzMzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAsiO4DANBgkqhkiG9w0BAQsFAAOCAQEAkapS
x2ANbFw0gweuLy5xPEMuWL6YTwnz6r6HJP3oAVPkQMv/FEtt+VSrrcYp33ZYSXml
KTwhVsHeY6RIY/QqOTaOq39kR3TlAbpBEvpK11t6Jv8Wk0VYdI3shEb+mZQQs5oO
8e5qeaoENfYhgT0PDAaDphNN28NjwNIL/JBvUUERUXrbiZ8wZYEo34Rii54uSvm7
JhamUx8bG9Xqoez5HPexyKbJEaMENJN1IuIZrREwXaea2sopGdNW83UD+HtVS61X
/FzF9XLSV+wwKFfZgu4oIL8hQNi2nnJoQwRi7Ptbu2x+bjVfL4QPG2ep6HT/A5TJ
nyRfVmf3pdDF6xk1nQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:48 2025 by rpki-client