Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e31342e302f32342d3234203d3e203532393737.roa
File:                     3230302e35332e31342e302f32342d3234203d3e203532393737.roa (raw, json)
Hash identifier:          0j45Xzus2438NjK8C7Kdw4lf1NNWHg6NIuvKHKTBG/Q=
Subject key identifier:   DB:3D:7B:9A:65:B4:43:B3:40:22:67:E2:66:BD:97:34:6E:D1:82:A7
Certificate issuer:       /CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Certificate serial:       353D0D9C70966DDB21086FED287E96F348C9A20C
Authority key identifier: 9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e31342e302f32342d3234203d3e203532393737.roa
Signing time:             Wed 03 Apr 2024 18:30:48 +0000
ROA not before:           Wed 03 Apr 2024 18:25:48 +0000
ROA not after:            Wed 02 Apr 2025 18:30:48 +0000
asID:                     52977
IP address blocks:        200.53.14.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl
                          rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:3d:0d:9c:70:96:6d:db:21:08:6f:ed:28:7e:96:f3:48:c9:a2:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
        Validity
            Not Before: Apr  3 18:25:48 2024 GMT
            Not After : Apr  2 18:30:48 2025 GMT
        Subject: CN=DB3D7B9A65B443B3402267E266BD97346ED182A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:60:db:a6:6b:56:e6:3a:82:6a:b2:2b:e2:27:
                    a4:67:44:e6:ea:3d:11:d8:7d:ee:9a:0c:9a:1f:01:
                    a5:6e:c9:34:0a:6d:dc:06:eb:44:78:69:00:57:0a:
                    da:3a:89:9b:14:df:da:e4:cc:5a:f2:67:51:ea:ac:
                    3a:1a:78:b1:44:7a:72:3c:42:f3:0b:87:de:5c:58:
                    d1:40:36:e2:28:e2:d4:30:54:61:10:3a:f2:11:70:
                    47:c2:c5:69:90:e6:55:b3:14:63:15:09:e8:dc:7e:
                    b7:42:13:29:82:dd:11:8d:57:76:88:91:63:57:5f:
                    d9:18:57:5c:f7:36:e9:06:9c:ef:5c:64:fb:bb:a1:
                    89:1d:ca:c3:06:e0:7c:09:19:da:bc:b9:95:26:c3:
                    b7:d1:06:6f:63:04:42:37:90:6b:be:16:f9:51:7d:
                    c7:d0:8a:4b:a8:f6:9c:6b:5f:6c:74:58:48:5c:40:
                    f6:e7:f5:6d:2e:c1:ef:c3:9d:9c:7e:b1:07:ee:90:
                    1e:17:38:5c:59:cb:c9:8d:fe:92:ed:16:23:f8:a4:
                    95:a6:b0:12:32:3f:3f:4f:9d:e6:7f:aa:36:4b:73:
                    50:ab:5a:ae:90:86:65:2a:39:dd:e9:65:ad:6e:e7:
                    33:58:98:53:cd:01:f0:37:94:b7:dc:ca:54:41:48:
                    30:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:3D:7B:9A:65:B4:43:B3:40:22:67:E2:66:BD:97:34:6E:D1:82:A7
            X509v3 Authority Key Identifier:
                keyid:9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e31342e302f32342d3234203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e1:97:80:53:4f:02:80:18:f3:08:d5:ac:76:f2:2f:97:bc:d1:
         50:5b:e9:77:d4:db:a5:65:a1:47:09:5e:3f:de:88:28:56:53:
         52:0d:2f:12:a2:89:ab:0b:5b:00:9d:fc:e4:ab:65:f7:ec:70:
         2f:92:36:58:1d:89:1b:c8:57:97:5f:bd:e7:a1:6c:42:7c:ed:
         5b:f9:c1:31:fb:fb:16:00:c3:ff:56:c0:3a:af:d0:d9:9a:5b:
         61:66:e7:05:38:c9:7a:e4:e8:14:7f:94:a7:e8:67:94:ee:0b:
         c7:a8:e0:66:98:e3:d0:2b:80:01:4d:39:13:86:d6:83:f1:b9:
         fb:71:34:83:25:01:a0:52:61:60:d6:84:bf:ae:3f:ea:c9:ad:
         37:8c:40:e6:42:78:96:e0:4f:d7:6a:9f:24:f0:2b:33:71:83:
         f7:91:f3:b4:cb:e8:6b:6d:cd:2a:1a:0a:76:01:e6:60:5f:3b:
         15:c6:09:da:7d:0f:e5:cf:7d:f0:1d:c6:7b:10:a8:46:c3:3e:
         28:9d:d1:1e:3d:fd:19:5b:c8:9e:5b:10:3a:c5:3d:e1:2c:7a:
         91:a6:6a:23:eb:51:28:d7:12:d3:d6:7f:9c:7d:f7:f6:7f:b6:
         a0:0b:db:b1:2e:79:01:63:be:af:ca:4d:ba:9c:a7:f7:af:69:
         5c:f7:9f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:20 2024 by rpki-client on console-ams.rpki-client.org