Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3137322e302f32332d3233203d3e20323632353835.roa
File:                     3230312e35352e3137322e302f32332d3233203d3e20323632353835.roa (raw, json)
Hash identifier:          8PlKUntdShk7AkXeO+dmrfPhwY4FvVN8xw0aFhd7tWk=
Subject key identifier:   73:B1:92:FC:A1:05:91:8E:4B:4D:C5:4F:B3:5E:A6:A6:0C:60:8D:C1
Certificate issuer:       /CN=5AC853AE3F9CB62CC01BAF4379BF8072926B07A7
Certificate serial:       6E808FE3BC50832599A4DA790F9EBA74412A9F87
Authority key identifier: 5A:C8:53:AE:3F:9C:B6:2C:C0:1B:AF:43:79:BF:80:72:92:6B:07:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3137322e302f32332d3233203d3e20323632353835.roa
Signing time:             Thu 14 Nov 2024 15:10:05 +0000
ROA not before:           Thu 14 Nov 2024 15:05:05 +0000
ROA not after:            Thu 13 Nov 2025 15:10:05 +0000
asID:                     262585
IP address blocks:        201.55.172.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.crl
                          rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 21:59:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:80:8f:e3:bc:50:83:25:99:a4:da:79:0f:9e:ba:74:41:2a:9f:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AC853AE3F9CB62CC01BAF4379BF8072926B07A7
        Validity
            Not Before: Nov 14 15:05:05 2024 GMT
            Not After : Nov 13 15:10:05 2025 GMT
        Subject: CN=73B192FCA105918E4B4DC54FB35EA6A60C608DC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:97:4f:92:80:38:d7:23:48:7d:9b:5b:53:db:
                    46:3d:93:c8:e4:6b:fe:d2:66:24:0e:3e:4f:f1:c7:
                    ce:bc:5f:98:b2:26:7f:d4:d4:0e:46:3b:82:af:aa:
                    03:28:18:c8:65:8c:fa:17:ea:76:3f:84:e1:df:6b:
                    0c:02:18:e5:47:ad:f9:7b:05:ce:64:ab:83:da:4e:
                    e3:e4:81:df:fe:ba:b1:40:32:23:92:20:9d:30:18:
                    00:f7:f2:bd:94:d3:f3:eb:56:17:92:61:7b:9d:ee:
                    17:82:94:a2:b1:44:fa:b3:b1:15:f4:bf:18:dc:f9:
                    1e:7f:8e:b3:e1:06:17:06:c7:3b:67:3b:88:ac:45:
                    cd:c8:ea:88:7e:da:ab:45:9b:ca:d7:2f:9c:3e:51:
                    92:f2:c9:40:f5:0a:74:c5:37:9a:68:63:17:05:c6:
                    7e:72:8e:65:ea:40:ca:e5:05:0e:02:4f:36:8c:0a:
                    10:7e:2a:7a:37:8f:05:5a:e9:8b:f3:d0:9f:7a:f8:
                    ce:9d:e6:05:26:ee:ec:64:84:d3:a2:29:49:2c:13:
                    e5:4e:5c:eb:8d:a6:59:aa:7d:9d:ed:9e:03:4d:b7:
                    7c:e4:5e:79:3b:09:1e:f8:ab:03:e5:85:27:5c:df:
                    e4:4a:93:84:e0:37:2a:f8:f6:2d:53:8e:ce:70:4b:
                    ff:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:B1:92:FC:A1:05:91:8E:4B:4D:C5:4F:B3:5E:A6:A6:0C:60:8D:C1
            X509v3 Authority Key Identifier:
                keyid:5A:C8:53:AE:3F:9C:B6:2C:C0:1B:AF:43:79:BF:80:72:92:6B:07:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3137322e302f32332d3233203d3e20323632353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.55.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:55:ca:1c:cb:24:9d:79:a7:3b:e2:90:99:45:df:29:16:ef:
         3a:a2:cf:bb:bf:ff:d3:1c:f4:85:d8:e2:27:26:95:f1:7a:68:
         95:28:58:31:98:3d:67:12:67:a4:c7:96:de:88:9a:63:f4:fa:
         f7:29:df:86:b3:f9:7a:43:ec:5f:03:b2:4c:72:2c:c1:19:f4:
         26:a6:c8:a4:24:89:06:f7:21:97:43:46:5c:0c:87:13:72:d2:
         aa:28:30:9a:a1:a0:0e:11:06:06:01:08:3a:5f:51:12:59:e0:
         fc:fb:21:58:f4:d7:5e:95:66:de:d4:cb:32:d6:50:c5:27:f4:
         c1:e7:11:14:6e:21:e8:69:f3:f7:f2:8a:9c:24:c4:65:9c:f4:
         b8:4c:86:c5:2a:6c:cd:cb:ea:21:f7:77:4a:00:92:46:b8:07:
         83:ef:f2:56:b7:71:3a:e4:65:7e:5e:d5:da:0d:4a:b6:a0:74:
         80:a3:da:d1:0f:ca:21:a7:54:81:3c:71:87:17:89:f5:be:c6:
         71:f8:b3:27:44:c3:41:1f:e7:59:6b:ac:6b:37:56:9f:7e:a3:
         4f:5e:dc:b7:51:af:4a:b1:b0:69:66:45:75:99:5f:24:03:0a:
         0f:e3:c6:b6:15:76:26:ea:ee:be:02:33:c5:5b:df:6a:00:a7:
         17:81:96:1a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUboCP47xQgyWZpNp5D566dEEqn4cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUFDODUzQUUzRjlDQjYyQ0MwMUJBRjQzNzlCRjgwNzI5
MjZCMDdBNzAeFw0yNDExMTQxNTA1MDVaFw0yNTExMTMxNTEwMDVaMDMxMTAvBgNV
BAMTKDczQjE5MkZDQTEwNTkxOEU0QjREQzU0RkIzNUVBNkE2MEM2MDhEQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9l0+SgDjXI0h9m1tT20Y9k8jk
a/7SZiQOPk/xx868X5iyJn/U1A5GO4KvqgMoGMhljPoX6nY/hOHfawwCGOVHrfl7
Bc5kq4PaTuPkgd/+urFAMiOSIJ0wGAD38r2U0/PrVheSYXud7heClKKxRPqzsRX0
vxjc+R5/jrPhBhcGxztnO4isRc3I6oh+2qtFm8rXL5w+UZLyyUD1CnTFN5poYxcF
xn5yjmXqQMrlBQ4CTzaMChB+Kno3jwVa6Yvz0J96+M6d5gUm7uxkhNOiKUksE+VO
XOuNplmqfZ3tngNNt3zkXnk7CR74qwPlhSdc3+RKk4TgNyr49i1Tjs5wS/8zAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUc7GS/KEFkY5LTcVPs16mpgxgjcEwHwYDVR0j
BBgwFoAUWshTrj+ctizAG69Deb+AcpJrB6cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR21uUmM2Q1BwSkxDeEdORGUxeEFybmVIelpvRDJYMlA4NE1HVHZwRWta
ZnQvMC81QUM4NTNBRTNGOUNCNjJDQzAxQkFGNDM3OUJGODA3MjkyNkIwN0E3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVBQzg1M0FFM0Y5Q0I2MkND
MDFCQUY0Mzc5QkY4MDcyOTI2QjA3QTcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dtblJjNkNQcEpMQ3hHTkRlMXhBcm5lSHpab0QyWDJQODRNR1R2cEVrWmZ0LzAv
MzIzMDMxMmUzNTM1MmUzMTM3MzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzIzNTM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAHJN6wwDQYJKoZIhvcNAQELBQADggEBADBVyhzL
JJ15pzvikJlF3ykW7zqiz7u//9Mc9IXY4icmlfF6aJUoWDGYPWcSZ6THlt6ImmP0
+vcp34az+XpD7F8DskxyLMEZ9CamyKQkiQb3IZdDRlwMhxNy0qooMJqhoA4RBgYB
CDpfURJZ4Pz7IVj0116VZt7UyzLWUMUn9MHnERRuIehp8/fyipwkxGWc9LhMhsUq
bM3L6iH3d0oAkka4B4Pv8la3cTrkZX5e1doNSragdICj2tEPyiGnVIE8cYcXifW+
xnH4sydEw0Ef51lrrGs3Vp9+o09e3LdRr0qxsGlmRXWZXyQDCg/jxrYVdibq7r4C
M8Vb32oApxeBlho=
-----END CERTIFICATE-----
Generated at Fri Nov 29 21:26:30 2024 by rpki-client on console-fra.rpki-client.org