Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e31302e302f32342d3234203d3e203532393737.roa
File:                     3230302e35332e31302e302f32342d3234203d3e203532393737.roa (raw, json)
Hash identifier:          Oh0ixFd6c5/H3izus8hY8gLZzZOZix3jtAwK3TRg4KU=
Subject key identifier:   CB:49:73:40:AF:4F:4A:09:3F:26:8D:01:7C:CC:E3:8D:98:86:57:E2
Certificate issuer:       /CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Certificate serial:       603C3ACAD6A51AA81F8F3914F2490E628EFF52BD
Authority key identifier: 9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e31302e302f32342d3234203d3e203532393737.roa
Signing time:             Wed 03 Apr 2024 18:30:47 +0000
ROA not before:           Wed 03 Apr 2024 18:25:47 +0000
ROA not after:            Wed 02 Apr 2025 18:30:47 +0000
asID:                     52977
IP address blocks:        200.53.10.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl
                          rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:3c:3a:ca:d6:a5:1a:a8:1f:8f:39:14:f2:49:0e:62:8e:ff:52:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
        Validity
            Not Before: Apr  3 18:25:47 2024 GMT
            Not After : Apr  2 18:30:47 2025 GMT
        Subject: CN=CB497340AF4F4A093F268D017CCCE38D988657E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:dd:6a:ac:a3:c7:c1:8d:e1:e4:b1:95:48:fa:
                    54:04:b6:e5:2f:89:93:d2:5f:6e:78:5f:48:5a:ea:
                    ed:06:26:e7:78:69:8d:92:be:2b:b2:34:48:d0:12:
                    17:c8:68:ee:6d:04:8f:19:32:4d:47:70:85:fa:21:
                    3d:6b:f6:48:c9:78:2f:95:25:c4:4d:c5:3b:1c:a1:
                    bd:b1:9a:c9:49:83:52:0b:82:e7:08:be:3d:98:46:
                    57:83:20:9d:f6:c2:ac:75:e2:eb:bd:7a:f4:ec:dc:
                    09:03:7f:c6:25:71:eb:4c:72:17:85:1a:93:cf:a9:
                    1e:42:37:d4:43:55:ef:79:69:d4:0c:b4:22:01:31:
                    39:9d:2a:84:ed:61:fa:8a:8d:46:53:d5:4e:6a:c6:
                    dd:80:f2:73:c9:a7:70:12:1b:eb:7e:bc:34:dc:f1:
                    8f:99:d5:46:78:dd:d5:56:86:eb:42:16:33:7b:dc:
                    c7:38:4f:df:b7:6e:f1:48:42:ff:37:a8:18:f7:3d:
                    77:61:1d:ec:cd:08:99:54:32:3c:d7:33:c2:a0:52:
                    a8:10:70:58:0d:13:85:c4:ed:8a:99:6c:dc:93:88:
                    d4:f3:9d:c9:97:f8:bf:60:6e:57:1a:e8:92:3b:5e:
                    9f:4a:f5:41:e7:70:70:b9:75:f4:de:54:e9:77:f9:
                    73:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:49:73:40:AF:4F:4A:09:3F:26:8D:01:7C:CC:E3:8D:98:86:57:E2
            X509v3 Authority Key Identifier:
                keyid:9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e31302e302f32342d3234203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:c5:03:37:4e:44:a4:72:74:a8:ab:3b:d5:73:3e:1c:ed:8a:
         ee:34:5c:d8:a8:6d:bc:d3:c5:3b:f3:36:a5:47:b2:1f:9d:9f:
         85:de:88:78:d0:8a:65:37:94:fc:2d:99:ef:c3:92:eb:9a:82:
         8a:00:9a:0f:f6:71:0d:eb:96:73:cb:f1:39:78:c3:a1:bc:21:
         a8:7f:e8:0d:7e:b5:33:95:2e:7f:0e:11:48:1e:7f:be:43:f6:
         49:56:f4:35:c0:1f:b6:ca:58:67:25:60:27:39:c5:cc:0c:5b:
         a1:70:13:50:f2:95:87:dd:32:91:36:99:f3:ba:24:6c:ed:5a:
         49:52:db:4d:64:a5:39:a0:7d:28:58:5e:b1:1e:43:07:81:3d:
         0d:d8:37:95:cf:9c:ff:af:fa:0a:2c:31:5f:7d:b5:29:4c:86:
         d3:a7:2a:dc:c9:0c:03:2e:9f:7d:9d:ac:6e:26:ec:46:37:d2:
         19:0d:46:14:af:30:cc:23:cf:2b:f4:f0:50:13:f7:59:44:92:
         70:f1:be:27:b8:64:b6:13:a8:ab:82:fe:5f:76:a5:50:42:02:
         b2:6b:94:43:af:ce:30:ee:8c:43:90:27:98:b3:22:20:c1:46:
         98:df:d2:3c:54:c9:fd:2d:93:2c:a0:2f:19:75:2c:a2:fb:2d:
         d6:00:cd:03
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUYDw6ytalGqgfjzkU8kkOYo7/Ur0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUNCQzREQzc1MDBDMjRFQjdCRTVEMUIzMjM1QTdDRjBF
RTdDQzUwRTAeFw0yNDA0MDMxODI1NDdaFw0yNTA0MDIxODMwNDdaMDMxMTAvBgNV
BAMTKENCNDk3MzQwQUY0RjRBMDkzRjI2OEQwMTdDQ0NFMzhEOTg4NjU3RTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU3Wqso8fBjeHksZVI+lQEtuUv
iZPSX254X0ha6u0GJud4aY2SviuyNEjQEhfIaO5tBI8ZMk1HcIX6IT1r9kjJeC+V
JcRNxTscob2xmslJg1ILgucIvj2YRleDIJ32wqx14uu9evTs3AkDf8YlcetMcheF
GpPPqR5CN9RDVe95adQMtCIBMTmdKoTtYfqKjUZT1U5qxt2A8nPJp3ASG+t+vDTc
8Y+Z1UZ43dVWhutCFjN73Mc4T9+3bvFIQv83qBj3PXdhHezNCJlUMjzXM8KgUqgQ
cFgNE4XE7YqZbNyTiNTzncmX+L9gblca6JI7Xp9K9UHncHC5dfTeVOl3+XMdAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUy0lzQK9PSgk/Jo0BfMzjjZiGV+IwHwYDVR0j
BBgwFoAUnLxNx1AMJOt75dGzI1p88O58xQ4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTl6dGV3SmRGQjJ1WkNIWWlwZ244Ylp0RjZFN2NDWjhEdTFzeEN0aEYy
cHAvMS85Q0JDNERDNzUwMEMyNEVCN0JFNUQxQjMyMzVBN0NGMEVFN0NDNTBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDQkM0REM3NTAwQzI0RUI3
QkU1RDFCMzIzNUE3Q0YwRUU3Q0M1MEUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0E5enRld0pkRkIydVpDSFlpcGduOGJadEY2RTdjQ1o4RHUxc3hDdGhGMnBwLzEv
MzIzMDMwMmUzNTMzMmUzMTMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjM5
MzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAMg1CjANBgkqhkiG9w0BAQsFAAOCAQEAH8UDN05EpHJ0
qKs71XM+HO2K7jRc2KhtvNPFO/M2pUeyH52fhd6IeNCKZTeU/C2Z78OS65qCigCa
D/ZxDeuWc8vxOXjDobwhqH/oDX61M5Uufw4RSB5/vkP2SVb0NcAftspYZyVgJznF
zAxboXATUPKVh90ykTaZ87okbO1aSVLbTWSlOaB9KFhesR5DB4E9Ddg3lc+c/6/6
CiwxX321KUyG06cq3MkMAy6ffZ2sbibsRjfSGQ1GFK8wzCPPK/TwUBP3WUSScPG+
J7hkthOoq4L+X3alUEICsmuUQ6/OMO6MQ5AnmLMiIMFGmN/SPFTJ/S2TLKAvGXUs
ovst1gDNAw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:20 2024 by rpki-client on console-ams.rpki-client.org