Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e31342e302f32332d3233203d3e203532393737.roa
File:                     3230302e35332e31342e302f32332d3233203d3e203532393737.roa (raw, json)
Hash identifier:          l64Jn/syLVUvAQxaHRxxwtdO0ZohuEk9Pvpjd4TLJ9U=
Subject key identifier:   C7:18:8C:F3:0C:6A:A7:BA:F4:84:20:97:FC:31:EC:BD:D0:5E:15:78
Certificate issuer:       /CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Certificate serial:       55897AAD4565674168D80BC9FBC6361E1279F016
Authority key identifier: 9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e31342e302f32332d3233203d3e203532393737.roa
Signing time:             Wed 03 Apr 2024 18:30:49 +0000
ROA not before:           Wed 03 Apr 2024 18:25:49 +0000
ROA not after:            Wed 02 Apr 2025 18:30:49 +0000
asID:                     52977
IP address blocks:        200.53.14.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl
                          rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 17:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:89:7a:ad:45:65:67:41:68:d8:0b:c9:fb:c6:36:1e:12:79:f0:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
        Validity
            Not Before: Apr  3 18:25:49 2024 GMT
            Not After : Apr  2 18:30:49 2025 GMT
        Subject: CN=C7188CF30C6AA7BAF4842097FC31ECBDD05E1578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:96:15:9a:68:a1:c3:a1:c9:f6:7e:7d:68:1c:
                    f9:47:a3:a0:50:14:28:1a:5e:84:26:25:39:98:4f:
                    76:5e:c8:ec:f4:23:51:62:12:d7:d2:41:b9:40:5f:
                    a2:08:11:7b:2b:60:0f:11:25:58:e6:3f:c0:ff:89:
                    52:21:95:96:e7:b3:84:d0:3b:05:87:93:c3:12:c9:
                    84:e7:72:77:74:d7:7d:90:f9:a4:d7:b8:8e:8a:26:
                    57:d2:88:af:93:e6:4d:39:33:f5:86:9f:7d:40:61:
                    dd:e1:9d:2e:55:35:1d:d9:3b:b8:77:02:fc:17:97:
                    44:e7:57:8b:87:af:13:57:2e:49:93:6c:a7:61:d5:
                    a6:87:29:80:28:d8:89:11:0f:a1:37:7f:d9:71:a3:
                    e7:aa:6b:23:e2:68:2a:5b:41:fa:55:57:08:68:a9:
                    36:01:c6:7a:34:48:b7:18:9a:fc:d6:64:00:77:55:
                    df:f7:7c:af:bc:14:53:97:a8:c1:c7:af:66:7d:cc:
                    e3:e4:1b:7e:8c:91:f0:a0:0f:97:e7:54:30:bc:c5:
                    a8:22:59:3b:d4:09:45:72:5b:15:27:83:90:53:cb:
                    cf:25:6f:f2:bf:f8:97:ec:30:d9:d8:6d:df:ab:f7:
                    ec:ce:07:54:54:36:ef:ad:95:0a:b7:5f:85:bc:03:
                    81:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:18:8C:F3:0C:6A:A7:BA:F4:84:20:97:FC:31:EC:BD:D0:5E:15:78
            X509v3 Authority Key Identifier:
                keyid:9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e31342e302f32332d3233203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:a6:11:93:7a:44:bb:de:0a:37:5f:63:d6:43:cc:22:4c:2b:
         69:9c:dc:8f:af:fe:3a:b7:46:f8:f5:08:00:d2:53:a4:08:b9:
         6a:b2:43:60:7c:71:ba:32:c3:60:1f:ee:23:6b:1f:30:02:33:
         6d:e0:c1:4b:a0:4e:f2:ee:8b:23:bd:1d:ea:b4:d9:d7:49:a6:
         df:ff:5b:0a:99:fb:7d:ba:9a:10:f4:41:69:80:5a:6d:a5:23:
         cc:c6:d6:b4:e9:3c:74:c4:a7:bd:cd:37:f1:fa:29:d2:74:c8:
         85:bc:0a:98:de:aa:36:9f:2f:12:94:a8:5b:b9:37:0e:b9:c0:
         75:7c:16:f2:de:4f:75:01:84:6a:43:e0:08:5d:36:1f:f1:c3:
         09:89:55:b5:ac:1e:e5:19:3c:af:84:78:ec:9d:c6:32:f4:2a:
         28:dd:06:a3:ee:4f:04:cd:d5:22:cf:35:f5:a2:61:ea:f8:cf:
         88:95:64:bb:9a:5c:c2:05:df:fc:fe:b1:d5:ac:ef:7f:3c:bd:
         e6:0e:10:c6:dd:a4:73:48:ba:63:41:ee:81:72:21:0f:30:80:
         11:9f:5c:c1:a0:0c:10:59:3b:b4:76:f6:7e:4b:41:2b:75:db:
         42:7f:c2:f9:f2:d2:6b:c0:d3:6a:4d:66:4c:61:9b:c4:d7:61:
         10:cf:fc:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:27:50 2024 by rpki-client on console-fra.rpki-client.org