Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/3137392e34382e3134342e302f32332d3233203d3e20323731303930.roa
File:                     3137392e34382e3134342e302f32332d3233203d3e20323731303930.roa (raw, json)
Hash identifier:          D/DUWmBjsAj2W721UQzNMDB9TuZHtrzSHpyaI2Lo7qw=
Subject key identifier:   05:77:0A:04:8C:5E:24:DE:91:99:AE:A9:86:8B:1A:3A:A5:45:E3:05
Certificate issuer:       /CN=54CEDD2E24960DE589D4B16EB4D662384CCC0FAF
Certificate serial:       0631D2313DE19C848A286B5989CAC6004FE18BC6
Authority key identifier: 54:CE:DD:2E:24:96:0D:E5:89:D4:B1:6E:B4:D6:62:38:4C:CC:0F:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/3137392e34382e3134342e302f32332d3233203d3e20323731303930.roa
Signing time:             Thu 04 Apr 2024 20:35:36 +0000
ROA not before:           Thu 04 Apr 2024 20:30:36 +0000
ROA not after:            Thu 03 Apr 2025 20:35:36 +0000
asID:                     271090
IP address blocks:        179.48.144.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.crl
                          rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:31:d2:31:3d:e1:9c:84:8a:28:6b:59:89:ca:c6:00:4f:e1:8b:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54CEDD2E24960DE589D4B16EB4D662384CCC0FAF
        Validity
            Not Before: Apr  4 20:30:36 2024 GMT
            Not After : Apr  3 20:35:36 2025 GMT
        Subject: CN=05770A048C5E24DE9199AEA9868B1A3AA545E305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0a:79:53:a8:ab:f9:a8:b7:30:fc:e3:41:f0:
                    30:84:c7:89:05:44:d5:d3:c4:43:ef:ff:9b:4f:8f:
                    50:ec:36:95:6d:aa:52:3b:61:c0:be:b3:43:fe:76:
                    bf:68:b8:a0:3b:18:e6:b5:65:1c:15:dc:72:64:6f:
                    12:79:06:11:c9:15:85:33:4c:4a:44:dc:1b:db:4e:
                    de:bb:1d:3c:b8:83:e9:89:5d:48:3a:59:84:f8:28:
                    14:fd:89:59:bf:4c:c7:4c:ff:6e:d1:69:8b:fc:24:
                    ca:48:99:86:1e:63:24:e1:ec:e6:12:0e:a8:b5:6b:
                    68:19:87:f3:54:69:b5:05:a3:20:86:dc:eb:5c:27:
                    da:1d:a2:f7:92:c4:29:95:ab:83:c2:86:c3:85:3f:
                    d7:4a:15:a7:d9:ec:75:f9:6b:72:14:22:4f:d9:52:
                    f6:e5:7b:9a:af:51:15:1f:43:61:6a:c1:9b:6d:27:
                    d9:ed:1b:8d:70:4d:8b:6e:4b:b1:5d:ad:3c:97:36:
                    08:52:6e:7a:49:13:19:9b:7d:ed:9d:ad:8c:30:1d:
                    54:22:9e:94:3d:d4:5b:4d:e3:b4:5d:85:5b:88:a6:
                    15:01:00:b3:a2:8a:70:2c:20:d3:f9:be:6c:7e:37:
                    ca:51:a9:0f:06:72:c2:86:b0:bb:da:f1:32:72:3b:
                    38:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:77:0A:04:8C:5E:24:DE:91:99:AE:A9:86:8B:1A:3A:A5:45:E3:05
            X509v3 Authority Key Identifier:
                keyid:54:CE:DD:2E:24:96:0D:E5:89:D4:B1:6E:B4:D6:62:38:4C:CC:0F:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/3137392e34382e3134342e302f32332d3233203d3e20323731303930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:e4:d9:f7:9b:e4:98:f5:8e:a7:09:d6:e4:2a:95:22:0f:95:
         42:5f:7a:4e:59:33:f0:ea:70:89:e3:0c:fe:c6:d7:4d:5c:74:
         a8:3d:db:99:60:96:71:12:63:3d:a0:b2:35:d4:04:89:4a:1a:
         84:f9:5e:97:10:35:a2:34:9c:4c:9e:e6:a0:1e:cc:cd:a3:ac:
         fd:16:36:5a:66:dc:8f:3c:9b:d7:c8:73:c4:0d:93:9a:0c:2a:
         2a:ec:c4:90:38:1d:73:a6:6d:1d:9f:e5:89:85:42:02:6a:6c:
         4a:4b:c8:aa:9d:88:92:76:a7:10:6c:68:de:dd:ff:37:44:ce:
         35:ab:fe:6f:71:32:8e:f4:a5:36:7b:ab:23:e0:52:7a:97:6f:
         17:ed:3b:82:8f:ad:d3:8b:df:65:db:34:97:12:91:12:d9:26:
         19:14:45:2b:d0:be:4e:98:84:5b:de:e5:fd:88:92:0b:81:2b:
         65:03:55:97:91:2f:3f:be:bb:c9:6e:5a:7c:9c:a3:aa:38:55:
         93:13:2d:21:ac:19:ee:e6:0d:93:92:47:f9:f1:17:56:af:fa:
         d0:9a:71:52:1e:f0:22:8b:f3:0b:a3:81:3d:da:de:68:34:74:
         a0:01:cc:09:d2:19:8f:e0:93:9a:b9:15:59:e6:05:38:70:63:
         46:38:97:3d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUBjHSMT3hnISKKGtZicrGAE/hi8YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRDRUREMkUyNDk2MERFNTg5RDRCMTZFQjRENjYyMzg0
Q0NDMEZBRjAeFw0yNDA0MDQyMDMwMzZaFw0yNTA0MDMyMDM1MzZaMDMxMTAvBgNV
BAMTKDA1NzcwQTA0OEM1RTI0REU5MTk5QUVBOTg2OEIxQTNBQTU0NUUzMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDECnlTqKv5qLcw/ONB8DCEx4kF
RNXTxEPv/5tPj1DsNpVtqlI7YcC+s0P+dr9ouKA7GOa1ZRwV3HJkbxJ5BhHJFYUz
TEpE3BvbTt67HTy4g+mJXUg6WYT4KBT9iVm/TMdM/27RaYv8JMpImYYeYyTh7OYS
Dqi1a2gZh/NUabUFoyCG3OtcJ9odoveSxCmVq4PChsOFP9dKFafZ7HX5a3IUIk/Z
Uvble5qvURUfQ2FqwZttJ9ntG41wTYtuS7FdrTyXNghSbnpJExmbfe2drYwwHVQi
npQ91FtN47RdhVuIphUBALOiinAsINP5vmx+N8pRqQ8GcsKGsLva8TJyOzjjAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUBXcKBIxeJN6Rma6phosaOqVF4wUwHwYDVR0j
BBgwFoAUVM7dLiSWDeWJ1LFutNZiOEzMD68wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHo1WnZkYlRNdzF4aGtENUZEdzlaYmsxMlBKQVcyWlk1VWNVR0dUNVU4
RjcvMS81NENFREQyRTI0OTYwREU1ODlENEIxNkVCNEQ2NjIzODRDQ0MwRkFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU0Q0VERDJFMjQ5NjBERTU4
OUQ0QjE2RUI0RDY2MjM4NENDQzBGQUYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h6NVp2ZGJUTXcxeGhrRDVGRHc5WmJrMTJQSkFXMlpZNVVjVUdHVDVVOEY3LzEv
MzEzNzM5MmUzNDM4MmUzMTM0MzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM3
MzEzMDM5MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGzMJAwDQYJKoZIhvcNAQELBQADggEBACfk2feb
5Jj1jqcJ1uQqlSIPlUJfek5ZM/DqcInjDP7G101cdKg925lglnESYz2gsjXUBIlK
GoT5XpcQNaI0nEye5qAezM2jrP0WNlpm3I88m9fIc8QNk5oMKirsxJA4HXOmbR2f
5YmFQgJqbEpLyKqdiJJ2pxBsaN7d/zdEzjWr/m9xMo70pTZ7qyPgUnqXbxftO4KP
rdOL32XbNJcSkRLZJhkURSvQvk6YhFve5f2IkguBK2UDVZeRLz++u8luWnyco6o4
VZMTLSGsGe7mDZOSR/nxF1av+tCacVIe8CKL8wujgT3a3mg0dKABzAnSGY/gk5q5
FVnmBThwY0Y4lz0=
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:47 2024 by rpki-client on console-fra.rpki-client.org