Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e31302e302f32332d3233203d3e203532393737.roa
File:                     3230302e35332e31302e302f32332d3233203d3e203532393737.roa (raw, json)
Hash identifier:          R8kc43n2SEmG/fmUl8lgbgabhwhNdI2J8JR/El88kxI=
Subject key identifier:   A0:2A:BA:AA:22:34:9F:57:FB:10:71:14:7B:8E:FF:91:E5:9A:BC:F5
Certificate issuer:       /CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Certificate serial:       4F3E6B6AF2C5BFD1DC1B1D9601BD6587029CFB3D
Authority key identifier: 9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e31302e302f32332d3233203d3e203532393737.roa
Signing time:             Wed 03 Apr 2024 18:30:52 +0000
ROA not before:           Wed 03 Apr 2024 18:25:52 +0000
ROA not after:            Wed 02 Apr 2025 18:30:52 +0000
asID:                     52977
IP address blocks:        200.53.10.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl
                          rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:3e:6b:6a:f2:c5:bf:d1:dc:1b:1d:96:01:bd:65:87:02:9c:fb:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
        Validity
            Not Before: Apr  3 18:25:52 2024 GMT
            Not After : Apr  2 18:30:52 2025 GMT
        Subject: CN=A02ABAAA22349F57FB1071147B8EFF91E59ABCF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:93:d9:75:3f:3a:dd:0e:5d:f8:96:7b:e4:75:
                    4b:1e:96:5f:71:34:c5:1a:5c:bf:fd:38:de:0d:da:
                    d4:a9:4f:58:0b:0a:24:ec:58:e4:16:b0:ba:48:64:
                    11:6f:88:fa:12:ac:0b:50:f3:a4:0c:c9:44:c8:09:
                    22:70:b1:b5:c1:7e:c1:e9:28:52:38:32:15:01:20:
                    84:a8:c8:e1:b0:6b:27:eb:bf:09:1a:ed:3e:c4:43:
                    e9:67:f1:33:e7:8b:e2:56:0d:e0:4f:73:93:68:15:
                    7e:47:63:c4:1c:01:0a:7a:d0:53:e0:11:3f:48:9a:
                    92:b3:4c:0c:ee:e2:5d:69:ee:b2:38:3b:19:d6:72:
                    06:22:82:fa:d1:a9:83:9f:10:92:27:da:65:73:6f:
                    a8:4b:e9:47:b3:ca:52:46:8f:7f:b5:75:7d:e8:2c:
                    a8:02:13:5b:d5:9f:06:a5:50:59:35:5b:06:6c:57:
                    dc:d5:5b:76:87:2e:96:f2:eb:f3:0c:e8:6a:2c:9a:
                    99:70:50:12:ae:1a:85:eb:62:41:ab:c9:8f:67:38:
                    de:12:21:2a:2d:50:f3:c1:f1:f7:cf:29:f2:34:b7:
                    7d:f8:21:85:2e:a7:84:bd:08:f5:ee:56:e3:ac:42:
                    20:e9:d7:f1:f6:6e:d1:61:75:7b:4e:78:44:45:b6:
                    b8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:2A:BA:AA:22:34:9F:57:FB:10:71:14:7B:8E:FF:91:E5:9A:BC:F5
            X509v3 Authority Key Identifier:
                keyid:9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e31302e302f32332d3233203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         da:8f:1e:e8:70:e3:ee:84:b4:e5:97:b4:52:aa:16:8f:83:f2:
         28:60:75:ff:80:c4:3c:5b:2f:74:8f:b6:a3:fe:5a:9d:3d:39:
         4f:2a:ab:b2:25:11:14:86:e3:8b:87:a0:51:60:fc:30:cd:7b:
         63:dc:e2:36:eb:f2:fc:5a:6e:e3:bf:7d:80:a0:7a:83:8b:05:
         8c:f3:3a:a7:5a:3d:20:41:15:2a:29:e8:72:ac:b7:db:a2:91:
         2c:91:d6:fa:07:6a:b4:15:36:24:42:73:d5:6d:94:16:50:06:
         fc:70:34:74:e0:68:a9:79:20:e7:46:da:70:66:ec:57:98:58:
         ae:03:39:ba:5f:a5:d3:16:fe:3d:22:49:92:eb:b1:1e:12:c0:
         98:b9:ab:36:95:2d:8a:ad:e9:a0:13:c3:97:07:b5:5b:e1:82:
         b3:d9:6f:97:50:3e:73:35:11:de:84:d7:9c:b7:4b:a5:30:15:
         bb:37:5c:94:38:dd:b1:56:1f:83:9c:bd:75:4a:c5:d2:65:8b:
         be:36:19:8b:e4:d6:fd:fb:8c:46:eb:6d:f7:a7:f7:1f:aa:18:
         13:5b:31:4f:84:cc:57:bb:67:8b:c4:1b:8c:15:c6:80:fd:1f:
         3f:fa:8c:98:86:b0:79:16:dd:65:53:58:2b:44:92:e8:e8:03:
         f2:99:58:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:20 2024 by rpki-client on console-ams.rpki-client.org