Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e31322e302f32332d3233203d3e203532393737.roa
File:                     3230302e35332e31322e302f32332d3233203d3e203532393737.roa (raw, json)
Hash identifier:          9W5hDsz/SvJO5K0B8qgc5JLgYUy7tzogsuJD9duLOHw=
Subject key identifier:   2B:C3:E4:C2:59:E3:2D:39:FB:EB:9C:76:46:BC:F7:C1:97:F0:A1:AF
Certificate issuer:       /CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Certificate serial:       6C05703EEF95DBA4A4451062360C459532E7A329
Authority key identifier: 9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e31322e302f32332d3233203d3e203532393737.roa
Signing time:             Wed 03 Apr 2024 18:30:49 +0000
ROA not before:           Wed 03 Apr 2024 18:25:49 +0000
ROA not after:            Wed 02 Apr 2025 18:30:49 +0000
asID:                     52977
IP address blocks:        200.53.12.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl
                          rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:05:70:3e:ef:95:db:a4:a4:45:10:62:36:0c:45:95:32:e7:a3:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
        Validity
            Not Before: Apr  3 18:25:49 2024 GMT
            Not After : Apr  2 18:30:49 2025 GMT
        Subject: CN=2BC3E4C259E32D39FBEB9C7646BCF7C197F0A1AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:00:94:4d:11:8b:df:41:59:bb:20:53:47:85:
                    e4:d6:02:37:a2:ad:25:43:b9:93:d0:ae:d4:83:b0:
                    77:f3:66:41:10:79:5e:07:27:b3:88:b1:99:ab:c4:
                    2c:a2:94:79:a1:ef:04:93:e5:10:6e:08:a1:26:1e:
                    3b:9f:46:fc:09:1c:49:5b:07:06:b1:37:4f:be:e8:
                    2c:4f:c0:d1:98:84:14:46:3e:62:de:13:5f:33:b7:
                    3d:73:3f:97:eb:eb:d9:21:40:b6:79:ba:a4:17:05:
                    6e:ab:c3:09:16:09:c7:64:1c:fd:1b:c8:a6:21:7c:
                    99:44:59:b0:86:c2:b9:73:d0:49:24:b7:01:53:b1:
                    9e:e9:56:a6:6e:6c:7a:0c:ca:9c:a4:31:02:ea:c1:
                    59:a6:b8:6a:ca:7a:15:db:72:f9:22:cf:da:20:1c:
                    5d:88:37:c4:c6:30:da:2a:e8:9d:e6:05:81:65:8d:
                    f3:c0:c7:95:3f:c5:f3:1a:a0:33:ff:e1:83:fc:e1:
                    41:c8:92:46:7c:e1:6e:1e:cc:cc:a6:16:7b:c9:9b:
                    3b:3d:01:ae:01:15:47:88:07:8d:c1:9f:e5:64:39:
                    87:ba:78:c2:6f:7b:74:10:3d:ba:9f:c9:65:9a:83:
                    f1:da:30:22:6d:1f:79:c1:71:bb:f2:98:82:2b:28:
                    37:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:C3:E4:C2:59:E3:2D:39:FB:EB:9C:76:46:BC:F7:C1:97:F0:A1:AF
            X509v3 Authority Key Identifier:
                keyid:9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e31322e302f32332d3233203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:8d:a3:63:98:8b:86:70:f6:0f:7f:0e:b1:47:6e:f3:0a:07:
         d0:3d:c9:47:80:ec:2d:54:d9:d8:a4:a0:4c:5e:63:b8:4a:3e:
         36:a3:49:59:6b:f9:8c:06:81:10:f3:0f:39:23:2a:90:9d:64:
         1b:ad:3a:ca:46:5a:dc:3f:2b:a0:0d:09:4c:35:dc:44:2a:9e:
         86:94:db:bc:00:b7:59:74:35:db:19:62:bf:e7:3b:48:c5:d0:
         e9:14:ab:a0:86:95:87:98:08:fe:99:2e:48:2c:ed:ab:a5:fa:
         f8:e5:09:5e:11:c4:fd:75:18:c0:3e:13:df:96:88:81:c5:7c:
         a5:63:24:6c:df:87:7b:37:9c:0e:1c:ae:ed:2b:48:ee:a8:ec:
         cf:73:3e:e5:a7:14:c5:f1:f1:28:1e:6d:b8:5f:88:0c:92:e6:
         72:62:bf:67:a7:84:d6:34:b2:35:4b:a0:fe:60:1e:ee:a5:bf:
         f2:b9:89:6c:41:57:2e:9a:79:95:9c:1f:6d:a4:53:62:cc:bb:
         e7:f7:d9:80:73:00:ae:46:8c:76:78:39:bd:f4:93:fe:ca:e2:
         d8:aa:76:e1:90:67:d2:5d:a7:72:e6:cf:86:ce:8e:a6:ad:a2:
         17:fb:6a:51:66:52:42:bc:f4:fa:53:b4:30:5c:70:91:a3:b8:
         a9:3d:a9:de
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUbAVwPu+V26SkRRBiNgxFlTLnoykwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUNCQzREQzc1MDBDMjRFQjdCRTVEMUIzMjM1QTdDRjBF
RTdDQzUwRTAeFw0yNDA0MDMxODI1NDlaFw0yNTA0MDIxODMwNDlaMDMxMTAvBgNV
BAMTKDJCQzNFNEMyNTlFMzJEMzlGQkVCOUM3NjQ2QkNGN0MxOTdGMEExQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgAJRNEYvfQVm7IFNHheTWAjei
rSVDuZPQrtSDsHfzZkEQeV4HJ7OIsZmrxCyilHmh7wST5RBuCKEmHjufRvwJHElb
BwaxN0++6CxPwNGYhBRGPmLeE18ztz1zP5fr69khQLZ5uqQXBW6rwwkWCcdkHP0b
yKYhfJlEWbCGwrlz0EkktwFTsZ7pVqZubHoMypykMQLqwVmmuGrKehXbcvkiz9og
HF2IN8TGMNoq6J3mBYFljfPAx5U/xfMaoDP/4YP84UHIkkZ84W4ezMymFnvJmzs9
Aa4BFUeIB43Bn+VkOYe6eMJve3QQPbqfyWWag/HaMCJtH3nBcbvymIIrKDdhAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUK8PkwlnjLTn765x2Rrz3wZfwoa8wHwYDVR0j
BBgwFoAUnLxNx1AMJOt75dGzI1p88O58xQ4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTl6dGV3SmRGQjJ1WkNIWWlwZ244Ylp0RjZFN2NDWjhEdTFzeEN0aEYy
cHAvMS85Q0JDNERDNzUwMEMyNEVCN0JFNUQxQjMyMzVBN0NGMEVFN0NDNTBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDQkM0REM3NTAwQzI0RUI3
QkU1RDFCMzIzNUE3Q0YwRUU3Q0M1MEUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0E5enRld0pkRkIydVpDSFlpcGduOGJadEY2RTdjQ1o4RHUxc3hDdGhGMnBwLzEv
MzIzMDMwMmUzNTMzMmUzMTMyMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzUzMjM5
MzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAcg1DDANBgkqhkiG9w0BAQsFAAOCAQEAPY2jY5iLhnD2
D38OsUdu8woH0D3JR4DsLVTZ2KSgTF5juEo+NqNJWWv5jAaBEPMPOSMqkJ1kG606
ykZa3D8roA0JTDXcRCqehpTbvAC3WXQ12xliv+c7SMXQ6RSroIaVh5gI/pkuSCzt
q6X6+OUJXhHE/XUYwD4T35aIgcV8pWMkbN+HezecDhyu7StI7qjsz3M+5acUxfHx
KB5tuF+IDJLmcmK/Z6eE1jSyNUug/mAe7qW/8rmJbEFXLpp5lZwfbaRTYsy75/fZ
gHMArkaMdng5vfST/sri2Kp24ZBn0l2ncubPhs6Opq2iF/tqUWZSQrz0+lO0MFxw
kaO4qT2p3g==
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:20 2024 by rpki-client on console-ams.rpki-client.org