Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e392e302f32342d3234203d3e203532393737.roa
File:                     3230302e35332e392e302f32342d3234203d3e203532393737.roa (raw, json)
Hash identifier:          UbDOqaXRXrpacrtks6zthCI9UzLhR37HRP//cYKSrwM=
Subject key identifier:   20:45:58:32:8F:D3:C3:D1:F0:A4:28:5A:8B:53:2C:13:00:2C:D0:F8
Certificate issuer:       /CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Certificate serial:       60B50FBA38E095AD9604D450441C3A06086F010D
Authority key identifier: 9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e392e302f32342d3234203d3e203532393737.roa
Signing time:             Wed 03 Apr 2024 18:30:51 +0000
ROA not before:           Wed 03 Apr 2024 18:25:51 +0000
ROA not after:            Wed 02 Apr 2025 18:30:51 +0000
asID:                     52977
IP address blocks:        200.53.9.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl
                          rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:b5:0f:ba:38:e0:95:ad:96:04:d4:50:44:1c:3a:06:08:6f:01:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
        Validity
            Not Before: Apr  3 18:25:51 2024 GMT
            Not After : Apr  2 18:30:51 2025 GMT
        Subject: CN=204558328FD3C3D1F0A4285A8B532C13002CD0F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ed:03:2f:73:ca:c5:e7:1e:9e:07:7b:c8:6b:
                    45:a0:bd:0e:4b:91:6a:47:de:45:84:dd:51:b1:75:
                    62:f2:69:05:c8:e8:54:e4:76:bb:6e:bc:82:74:11:
                    46:9e:ce:9c:9f:58:9b:83:01:94:a1:3f:f8:57:2e:
                    86:51:30:7a:61:af:e8:9b:d7:46:16:22:ad:fa:b6:
                    61:0f:8c:90:e6:47:ac:10:bc:42:23:12:bf:38:1b:
                    5f:6f:63:49:fa:01:54:83:b1:8f:75:f7:50:94:6e:
                    91:1a:cd:15:1c:a5:a9:2e:61:23:6f:a4:19:93:f6:
                    82:a1:c0:fc:e8:fc:8f:63:28:ad:ee:5e:61:40:6c:
                    0c:30:ec:87:2c:3d:cc:59:99:aa:d4:d4:87:5c:17:
                    3b:c7:5b:ed:64:f5:61:19:46:a3:db:a3:7b:41:3b:
                    58:98:d7:a2:2c:b3:b4:4f:ff:ae:72:d8:95:5f:c9:
                    03:dc:c4:72:cb:ca:79:9d:1f:5b:47:d6:c8:b5:87:
                    72:c6:4f:53:fe:9c:9d:5e:75:63:6d:3b:fa:46:e9:
                    e9:7c:2a:eb:47:36:bf:35:71:b5:d7:48:1e:43:0e:
                    97:f4:2b:20:60:0c:63:c2:58:ba:b1:3c:26:1b:b8:
                    23:35:ba:47:19:50:cc:a2:df:71:22:13:e8:cf:bf:
                    dd:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:45:58:32:8F:D3:C3:D1:F0:A4:28:5A:8B:53:2C:13:00:2C:D0:F8
            X509v3 Authority Key Identifier:
                keyid:9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e392e302f32342d3234203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d7:1f:ff:5b:91:c4:7b:79:a9:08:cb:c6:d4:10:d2:6c:fd:91:
         06:b3:ba:f5:d5:f4:ba:aa:2c:fa:86:68:60:25:55:20:47:11:
         a7:b5:4a:9e:06:2b:66:c0:91:04:fc:72:93:41:5a:af:48:1d:
         ba:27:75:a8:e5:63:9a:bc:60:59:47:3d:e5:dd:3e:6d:45:6b:
         57:c7:1b:05:59:a5:17:a8:f4:d4:f3:38:f1:51:16:62:3d:40:
         8b:c1:5b:61:96:8b:ff:de:25:2a:49:bc:5c:40:80:d6:21:f0:
         b2:e1:fd:d8:b0:ba:9d:93:9a:be:0b:9a:4e:0a:68:f1:48:bc:
         eb:03:78:c4:20:a2:43:b7:ab:fe:bd:93:e3:18:af:55:61:7a:
         97:cc:26:02:d7:ae:0f:f2:8b:4e:66:7c:f2:d4:71:df:8a:57:
         84:59:fe:ee:66:bf:a3:2b:af:0e:c9:98:5c:90:f8:10:01:11:
         14:cf:c8:a4:20:10:f1:ee:c0:bc:e9:81:2a:d9:56:54:3f:82:
         af:a7:9c:42:5f:91:01:02:02:3f:0a:3b:07:53:fa:14:87:de:
         09:bc:12:49:c9:4e:ee:ae:1d:8c:99:1e:ce:cd:c3:ed:c8:83:
         60:c4:16:9a:ec:61:e2:ee:be:75:ce:d3:43:a5:7d:fa:0b:d6:
         b0:98:d0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:20 2024 by rpki-client on console-ams.rpki-client.org