Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e33392e302f32342d3234203d3e20323732373130.roa
File:                     3230312e32332e33392e302f32342d3234203d3e20323732373130.roa (raw, json)
Hash identifier:          keAxOiNda5TGrwvNQFQk7VRL3UOSL5G2pmp5jys8zy8=
Subject key identifier:   77:ED:04:56:41:01:92:D2:A6:7B:F9:23:0D:EF:B4:B0:3A:AC:50:00
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       1A4ED8EEAC5C3865AD2AAE49C7CE14731255C2CB
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e33392e302f32342d3234203d3e20323732373130.roa
Signing time:             Fri 30 Aug 2024 17:47:01 +0000
ROA not before:           Fri 30 Aug 2024 17:42:01 +0000
ROA not after:            Fri 29 Aug 2025 17:47:01 +0000
asID:                     272710
IP address blocks:        201.23.39.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 13:27:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:4e:d8:ee:ac:5c:38:65:ad:2a:ae:49:c7:ce:14:73:12:55:c2:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Aug 30 17:42:01 2024 GMT
            Not After : Aug 29 17:47:01 2025 GMT
        Subject: CN=77ED0456410192D2A67BF9230DEFB4B03AAC5000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:55:5f:0c:c8:a0:9f:64:e7:09:51:90:96:cd:
                    c6:51:6d:24:d9:97:59:05:56:a7:b1:58:cf:01:b3:
                    b8:a9:e5:9a:fa:0d:aa:6d:d5:bc:1d:45:e6:ac:f9:
                    2b:4e:49:15:1a:5c:1a:cd:3f:c2:49:f5:68:7a:ab:
                    90:87:5c:a7:d5:7f:97:d0:57:ab:60:82:21:12:a6:
                    45:13:39:20:d3:ac:3b:2c:bf:69:88:97:4a:75:3d:
                    63:f5:27:fc:94:bc:65:80:8d:3f:db:83:17:32:8a:
                    45:d0:5f:76:6b:31:53:d8:06:29:c0:ff:83:90:cf:
                    7d:9b:86:73:07:85:ee:76:02:cb:68:3e:45:47:f1:
                    7e:48:63:59:49:64:d0:52:c8:b3:e1:1e:70:f8:dc:
                    3d:64:52:46:4b:60:99:e9:d0:6a:13:91:33:10:07:
                    a4:2e:d2:30:8b:f3:3b:f0:33:b3:b6:1a:01:05:2f:
                    54:62:26:5c:17:d7:1d:3e:32:61:37:21:1d:b6:dd:
                    0c:0e:22:b3:9d:6e:3b:45:13:d0:a8:f9:f7:e0:39:
                    98:84:eb:cd:c4:13:b0:68:4d:ab:0a:65:80:ae:5a:
                    ef:12:ef:dc:39:66:8b:c6:c2:13:88:75:02:08:41:
                    83:b8:bf:66:ab:b7:01:37:f8:f1:e9:1d:1d:a4:6e:
                    ee:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:ED:04:56:41:01:92:D2:A6:7B:F9:23:0D:EF:B4:B0:3A:AC:50:00
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e33392e302f32342d3234203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.23.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:2c:92:3d:36:6c:f5:60:b1:11:29:4d:4e:54:db:b1:30:ef:
         76:72:cf:3a:39:22:d9:94:43:f8:7e:87:7e:1d:ce:94:c4:82:
         15:92:ec:10:1a:d9:e2:b9:c3:a9:2d:aa:4b:a4:57:3a:99:89:
         7e:6e:f5:e5:99:fb:af:d9:58:30:d4:93:ca:5a:3c:0a:ae:f7:
         98:09:f5:60:3d:2d:ef:24:c1:9d:0c:2e:ad:5d:48:d6:61:63:
         f0:0b:0f:cf:c5:33:00:cf:84:8f:32:d1:65:39:e4:7e:c2:ac:
         61:76:81:d7:38:5c:09:25:ed:73:a3:6c:3a:30:51:0b:50:3c:
         d9:a0:5f:6a:52:63:dc:f7:91:54:28:35:e4:c7:2c:49:80:9e:
         13:28:60:97:b1:cb:69:c4:f5:dc:24:21:29:2c:b4:14:cc:bc:
         25:ee:3a:53:0d:f8:ef:7c:55:4d:39:e8:e5:e3:13:3a:23:94:
         50:ad:07:cd:af:5b:74:71:64:cb:9f:4b:20:10:3f:fe:77:d3:
         bc:54:25:a5:4b:bc:fe:f4:0a:e3:55:e6:83:c3:e3:59:de:46:
         86:88:73:9c:a6:0c:64:51:ce:4e:72:dc:ad:79:1a:75:e4:ec:
         39:75:52:07:eb:a0:f8:24:4b:03:4d:7f:04:dd:00:f7:b0:08:
         af:f2:12:60
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUGk7Y7qxcOGWtKq5Jx84UcxJVwsswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVEMzdFMjJFQjhFNTY2OEYwOTM1NDZFNjM0QjU1QjBB
NzgwRDI0RjAeFw0yNDA4MzAxNzQyMDFaFw0yNTA4MjkxNzQ3MDFaMDMxMTAvBgNV
BAMTKDc3RUQwNDU2NDEwMTkyRDJBNjdCRjkyMzBERUZCNEIwM0FBQzUwMDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5VV8MyKCfZOcJUZCWzcZRbSTZ
l1kFVqexWM8Bs7ip5Zr6Dapt1bwdReas+StOSRUaXBrNP8JJ9Wh6q5CHXKfVf5fQ
V6tggiESpkUTOSDTrDssv2mIl0p1PWP1J/yUvGWAjT/bgxcyikXQX3ZrMVPYBinA
/4OQz32bhnMHhe52AstoPkVH8X5IY1lJZNBSyLPhHnD43D1kUkZLYJnp0GoTkTMQ
B6Qu0jCL8zvwM7O2GgEFL1RiJlwX1x0+MmE3IR223QwOIrOdbjtFE9Co+ffgOZiE
683EE7BoTasKZYCuWu8S79w5ZovGwhOIdQIIQYO4v2artwE3+PHpHR2kbu6pAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUd+0EVkEBktKme/kjDe+0sDqsUAAwHwYDVR0j
BBgwFoAUtdN+IuuOVmjwk1RuY0tVsKeA0k8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkRGU3VTRU1YSnJkV0JHVnFFYmg0WlMxZHQ5bUFQRmRuUkJNVnEydUEz
ZFIvMC9CNUQzN0UyMkVCOEU1NjY4RjA5MzU0NkU2MzRCNTVCMEE3ODBEMjRGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I1RDM3RTIyRUI4RTU2NjhG
MDkzNTQ2RTYzNEI1NUIwQTc4MEQyNEYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZERlN1U0VNWEpyZFdCR1ZxRWJoNFpTMWR0OW1BUEZkblJCTVZxMnVBM2RSLzAv
MzIzMDMxMmUzMjMzMmUzMzM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMy
MzczMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAyRcnMA0GCSqGSIb3DQEBCwUAA4IBAQBaLJI9Nmz1
YLERKU1OVNuxMO92cs86OSLZlEP4fod+Hc6UxIIVkuwQGtniucOpLapLpFc6mYl+
bvXlmfuv2Vgw1JPKWjwKrveYCfVgPS3vJMGdDC6tXUjWYWPwCw/PxTMAz4SPMtFl
OeR+wqxhdoHXOFwJJe1zo2w6MFELUDzZoF9qUmPc95FUKDXkxyxJgJ4TKGCXsctp
xPXcJCEpLLQUzLwl7jpTDfjvfFVNOejl4xM6I5RQrQfNr1t0cWTLn0sgED/+d9O8
VCWlS7z+9ArjVeaDw+NZ3kaGiHOcpgxkUc5OctyteRp15Ow5dVIH66D4JEsDTX8E
3QD3sAiv8hJg
-----END CERTIFICATE-----
Generated at Fri Nov 29 13:09:34 2024 by rpki-client on console-fra.rpki-client.org