Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7uf5smC91d3vaox2z1Lw7v2TUSDf5K7bkggvEzF4NePA/1/3132382e3230312e35342e302f32342d3234203d3e20323636363238.roa
File:                     3132382e3230312e35342e302f32342d3234203d3e20323636363238.roa (raw, json)
Hash identifier:          zGPvOZ8S7c/VuuAmYA1UT2kofxTNTGZKL+L9okR88Ik=
Subject key identifier:   99:02:3D:F3:5A:0E:05:67:7C:4F:1C:4B:14:88:A1:D4:9F:38:3F:25
Certificate issuer:       /CN=9CFB76D20D558F08024B5656A94D7209D3BD1F09
Certificate serial:       2A40336BC028D295140F6EE26E4E33DC0DF49BF2
Authority key identifier: 9C:FB:76:D2:0D:55:8F:08:02:4B:56:56:A9:4D:72:09:D3:BD:1F:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CFB76D20D558F08024B5656A94D7209D3BD1F09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7uf5smC91d3vaox2z1Lw7v2TUSDf5K7bkggvEzF4NePA/1/3132382e3230312e35342e302f32342d3234203d3e20323636363238.roa
Signing time:             Tue 27 Aug 2024 22:40:39 +0000
ROA not before:           Tue 27 Aug 2024 22:35:39 +0000
ROA not after:            Tue 26 Aug 2025 22:40:39 +0000
asID:                     266628
IP address blocks:        128.201.54.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7uf5smC91d3vaox2z1Lw7v2TUSDf5K7bkggvEzF4NePA/1/9CFB76D20D558F08024B5656A94D7209D3BD1F09.crl
                          rsync://rpki-repo.registro.br/repo/7uf5smC91d3vaox2z1Lw7v2TUSDf5K7bkggvEzF4NePA/1/9CFB76D20D558F08024B5656A94D7209D3BD1F09.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CFB76D20D558F08024B5656A94D7209D3BD1F09.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:39:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:40:33:6b:c0:28:d2:95:14:0f:6e:e2:6e:4e:33:dc:0d:f4:9b:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CFB76D20D558F08024B5656A94D7209D3BD1F09
        Validity
            Not Before: Aug 27 22:35:39 2024 GMT
            Not After : Aug 26 22:40:39 2025 GMT
        Subject: CN=99023DF35A0E05677C4F1C4B1488A1D49F383F25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:71:e4:ff:7c:0b:1e:34:03:e3:df:d3:5e:60:
                    e6:89:fc:d3:29:7e:a1:78:df:0a:7e:e0:2a:8e:c9:
                    ff:eb:9c:64:30:eb:59:0e:c1:00:d3:90:71:6c:01:
                    a5:fd:6b:08:9f:16:e7:d4:c9:4e:c6:dd:91:53:0e:
                    51:7c:37:20:d1:0b:cb:b8:54:78:8b:c4:3c:56:a6:
                    f7:04:25:a6:00:4d:71:6c:a3:68:2d:6d:1f:21:c6:
                    83:ff:1f:d3:0b:ef:9c:67:79:e8:da:4c:71:ab:7f:
                    22:ff:1b:b7:79:ef:7d:0a:61:ab:ff:8d:01:78:a5:
                    62:68:43:92:4e:77:31:a6:a6:1d:5f:c4:61:eb:54:
                    11:67:71:9a:cd:ba:ea:be:6e:9e:49:de:1a:10:b1:
                    49:ab:9d:ac:ae:cb:b3:25:a5:bc:0a:9d:7b:d4:3f:
                    47:75:15:87:13:31:b3:f5:88:a6:eb:c1:23:48:f4:
                    bd:fe:8d:ce:6d:46:9d:cd:3d:7f:c3:c9:7f:3a:d9:
                    3c:65:a5:68:cb:68:51:3c:25:ad:36:a5:f1:b5:ef:
                    6e:fd:e0:a2:8e:2e:9a:8f:5e:68:02:4a:8b:d0:17:
                    6a:e6:da:7e:d9:54:fd:44:21:6f:49:ca:15:db:11:
                    58:ef:0a:51:12:2f:b8:8a:eb:03:3a:d0:87:09:be:
                    ce:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:02:3D:F3:5A:0E:05:67:7C:4F:1C:4B:14:88:A1:D4:9F:38:3F:25
            X509v3 Authority Key Identifier:
                keyid:9C:FB:76:D2:0D:55:8F:08:02:4B:56:56:A9:4D:72:09:D3:BD:1F:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7uf5smC91d3vaox2z1Lw7v2TUSDf5K7bkggvEzF4NePA/1/9CFB76D20D558F08024B5656A94D7209D3BD1F09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CFB76D20D558F08024B5656A94D7209D3BD1F09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7uf5smC91d3vaox2z1Lw7v2TUSDf5K7bkggvEzF4NePA/1/3132382e3230312e35342e302f32342d3234203d3e20323636363238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:39:84:60:7b:f9:77:bd:6a:5e:50:16:ad:92:0e:dd:29:7a:
         ee:e9:ff:8d:f9:0f:b5:3a:57:37:c9:c5:ee:9a:cd:25:f9:8e:
         0f:38:6c:3b:10:df:89:3a:09:80:89:c5:49:1f:88:51:7d:41:
         32:9d:14:e3:fe:fc:20:8d:42:61:55:05:ad:7f:f7:cc:b2:52:
         5b:2d:a1:7c:73:c0:bc:75:35:b5:ff:7f:01:3f:f1:1a:b3:8a:
         68:6b:a2:49:5d:a5:1e:aa:e3:7e:42:34:71:6b:a6:46:5e:7e:
         55:34:f0:ad:9f:5e:79:bc:50:32:d3:4f:13:98:5c:45:b0:76:
         7c:28:32:8d:af:c5:37:2f:24:5a:8e:70:3f:f2:9c:03:59:84:
         a4:58:aa:1c:2a:86:bc:a2:a8:64:49:30:3e:f5:d5:91:72:97:
         99:6b:a3:a4:d8:b3:a7:99:35:b2:52:6c:91:cd:23:8b:d7:2a:
         46:fe:6e:1a:ae:28:18:4e:13:39:5c:36:de:1c:db:28:0b:4c:
         12:42:3d:e2:fa:ae:95:c2:14:d5:65:3c:ab:ac:52:a8:b1:cb:
         74:24:db:1e:f3:58:dd:0b:71:8e:ba:00:f8:b5:aa:da:91:a7:
         f2:a7:06:83:7d:0e:df:68:55:c3:20:bc:a2:d1:4c:d4:cc:98:
         77:fd:71:be
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUKkAza8Ao0pUUD27ibk4z3A30m/IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUNGQjc2RDIwRDU1OEYwODAyNEI1NjU2QTk0RDcyMDlE
M0JEMUYwOTAeFw0yNDA4MjcyMjM1MzlaFw0yNTA4MjYyMjQwMzlaMDMxMTAvBgNV
BAMTKDk5MDIzREYzNUEwRTA1Njc3QzRGMUM0QjE0ODhBMUQ0OUYzODNGMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSceT/fAseNAPj39NeYOaJ/NMp
fqF43wp+4CqOyf/rnGQw61kOwQDTkHFsAaX9awifFufUyU7G3ZFTDlF8NyDRC8u4
VHiLxDxWpvcEJaYATXFso2gtbR8hxoP/H9ML75xneejaTHGrfyL/G7d5730KYav/
jQF4pWJoQ5JOdzGmph1fxGHrVBFncZrNuuq+bp5J3hoQsUmrnayuy7MlpbwKnXvU
P0d1FYcTMbP1iKbrwSNI9L3+jc5tRp3NPX/DyX862TxlpWjLaFE8Ja02pfG17279
4KKOLpqPXmgCSovQF2rm2n7ZVP1EIW9JyhXbEVjvClESL7iK6wM60IcJvs6pAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUmQI981oOBWd8TxxLFIih1J84PyUwHwYDVR0j
BBgwFoAUnPt20g1VjwgCS1ZWqU1yCdO9HwkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3VmNXNtQzkxZDN2YW94MnoxTHc3djJUVVNEZjVLN2JrZ2d2RXpGNE5l
UEEvMS85Q0ZCNzZEMjBENTU4RjA4MDI0QjU2NTZBOTRENzIwOUQzQkQxRjA5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDRkI3NkQyMEQ1NThGMDgw
MjRCNTY1NkE5NEQ3MjA5RDNCRDFGMDkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzd1ZjVzbUM5MWQzdmFveDJ6MUx3N3YyVFVTRGY1Szdia2dndkV6RjROZVBBLzEv
MzEzMjM4MmUzMjMwMzEyZTM1MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzYzNjMyMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACAyTYwDQYJKoZIhvcNAQELBQADggEBAH45hGB7
+Xe9al5QFq2SDt0peu7p/435D7U6VzfJxe6azSX5jg84bDsQ34k6CYCJxUkfiFF9
QTKdFOP+/CCNQmFVBa1/98yyUlstoXxzwLx1NbX/fwE/8RqzimhrokldpR6q435C
NHFrpkZeflU08K2fXnm8UDLTTxOYXEWwdnwoMo2vxTcvJFqOcD/ynANZhKRYqhwq
hryiqGRJMD711ZFyl5lro6TYs6eZNbJSbJHNI4vXKkb+bhquKBhOEzlcNt4c2ygL
TBJCPeL6rpXCFNVlPKusUqixy3Qk2x7zWN0LcY66APi1qtqRp/KnBoN9Dt9oVcMg
vKLRTNTMmHf9cb4=
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:59 2024 by rpki-client on console-ams.rpki-client.org