Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/3137392e34382e3134352e302f32342d3234203d3e20323731303930.roa
File:                     3137392e34382e3134352e302f32342d3234203d3e20323731303930.roa (raw, json)
Hash identifier:          JtQ9P1u5HBZwyhYamlap+nMuut7Uig8D3ESoaljQS2Q=
Subject key identifier:   DD:6C:C6:E3:A3:31:DC:7C:BC:98:2E:B9:4F:74:8C:B2:85:30:91:10
Certificate issuer:       /CN=54CEDD2E24960DE589D4B16EB4D662384CCC0FAF
Certificate serial:       50FF8B5493057460ED42EDEB8CF28314E7B4AC06
Authority key identifier: 54:CE:DD:2E:24:96:0D:E5:89:D4:B1:6E:B4:D6:62:38:4C:CC:0F:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/3137392e34382e3134352e302f32342d3234203d3e20323731303930.roa
Signing time:             Thu 04 Apr 2024 20:35:35 +0000
ROA not before:           Thu 04 Apr 2024 20:30:35 +0000
ROA not after:            Thu 03 Apr 2025 20:35:35 +0000
asID:                     271090
IP address blocks:        179.48.145.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.crl
                          rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:ff:8b:54:93:05:74:60:ed:42:ed:eb:8c:f2:83:14:e7:b4:ac:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54CEDD2E24960DE589D4B16EB4D662384CCC0FAF
        Validity
            Not Before: Apr  4 20:30:35 2024 GMT
            Not After : Apr  3 20:35:35 2025 GMT
        Subject: CN=DD6CC6E3A331DC7CBC982EB94F748CB285309110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ee:19:47:36:09:04:b9:f6:f4:de:51:f2:24:
                    7c:eb:99:9a:8c:64:20:93:e7:91:aa:88:b4:16:60:
                    66:42:9d:65:93:60:56:43:9e:b3:19:ce:1b:c5:c5:
                    9f:5d:37:d9:cc:1c:58:bf:ed:48:c6:37:9f:71:89:
                    e2:d0:77:5d:66:24:a4:66:eb:7f:13:f7:c3:e9:67:
                    af:8c:26:9b:f7:ee:45:a1:6d:b7:19:55:98:09:d9:
                    6b:d1:a3:e2:1e:31:11:c7:ce:4e:21:6a:3b:4a:68:
                    2b:a0:8d:5e:e5:3d:75:18:e2:bd:2e:88:4d:98:e2:
                    53:6f:56:ef:45:16:4a:bc:26:0f:a1:c9:ca:f1:ae:
                    a1:aa:ec:e9:3e:63:88:4c:1e:5e:dc:ff:25:ec:19:
                    14:41:e9:e3:b6:b0:3e:82:43:a7:86:52:13:be:d6:
                    2a:87:d0:8d:f0:1c:f1:02:6c:01:0e:b1:ce:8e:01:
                    83:7b:1a:a4:f3:70:d6:72:2f:84:14:ba:7e:0c:02:
                    12:39:ef:c1:db:1a:e8:87:4a:51:2b:5a:ca:7b:6a:
                    7c:b2:dc:cf:5e:bd:fb:f1:19:b2:fb:ce:65:83:77:
                    f7:d1:2c:9a:58:6f:80:52:6b:01:af:33:4e:7b:20:
                    4d:d6:4a:24:56:69:2b:9f:e5:d4:90:7f:95:5b:e9:
                    1d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:6C:C6:E3:A3:31:DC:7C:BC:98:2E:B9:4F:74:8C:B2:85:30:91:10
            X509v3 Authority Key Identifier:
                keyid:54:CE:DD:2E:24:96:0D:E5:89:D4:B1:6E:B4:D6:62:38:4C:CC:0F:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/3137392e34382e3134352e302f32342d3234203d3e20323731303930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:f7:83:9b:b9:56:cd:c7:ee:94:f0:f0:2b:ef:a8:ba:38:11:
         14:85:3b:99:4c:6d:65:68:21:7e:2d:57:f0:fa:fd:b9:43:ec:
         55:f8:76:05:10:4b:99:8a:ec:1e:55:f7:dd:81:85:0e:4b:fb:
         e1:5e:26:f9:85:a5:c0:82:25:31:ad:b4:da:17:11:b6:f6:f5:
         f5:16:9f:ae:ff:bc:3b:ab:8b:63:a1:02:69:b7:35:ed:52:b0:
         72:92:d5:15:7b:66:c4:41:c9:0f:3b:8d:ad:dd:32:64:cb:39:
         4c:42:52:f9:e0:46:50:a0:51:eb:df:3f:3e:f5:8f:65:3b:63:
         0c:75:10:9a:17:31:52:a9:4e:5b:96:d8:53:c6:8d:ce:1a:03:
         c0:3c:a4:de:fe:41:1d:c1:66:25:ad:c6:e1:ca:44:55:75:62:
         37:80:db:37:27:cd:c4:4d:de:ca:89:b1:fc:09:29:9a:8c:4c:
         3d:1a:60:ab:9f:e3:fc:34:c7:0f:99:d0:8c:ec:31:f8:12:04:
         e7:a1:60:38:e8:88:82:f6:41:95:61:57:97:27:7e:d0:3a:06:
         c0:e0:3e:db:0e:32:ce:03:82:5f:ac:1e:0c:95:9f:41:74:6b:
         ed:ed:73:f2:30:3e:75:98:f8:de:15:41:dc:82:7e:33:84:8b:
         7d:3f:b7:97
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUUP+LVJMFdGDtQu3rjPKDFOe0rAYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRDRUREMkUyNDk2MERFNTg5RDRCMTZFQjRENjYyMzg0
Q0NDMEZBRjAeFw0yNDA0MDQyMDMwMzVaFw0yNTA0MDMyMDM1MzVaMDMxMTAvBgNV
BAMTKERENkNDNkUzQTMzMURDN0NCQzk4MkVCOTRGNzQ4Q0IyODUzMDkxMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW7hlHNgkEufb03lHyJHzrmZqM
ZCCT55GqiLQWYGZCnWWTYFZDnrMZzhvFxZ9dN9nMHFi/7UjGN59xieLQd11mJKRm
638T98PpZ6+MJpv37kWhbbcZVZgJ2WvRo+IeMRHHzk4hajtKaCugjV7lPXUY4r0u
iE2Y4lNvVu9FFkq8Jg+hycrxrqGq7Ok+Y4hMHl7c/yXsGRRB6eO2sD6CQ6eGUhO+
1iqH0I3wHPECbAEOsc6OAYN7GqTzcNZyL4QUun4MAhI578HbGuiHSlErWsp7anyy
3M9evfvxGbL7zmWDd/fRLJpYb4BSawGvM057IE3WSiRWaSuf5dSQf5Vb6R0pAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU3WzG46Mx3Hy8mC65T3SMsoUwkRAwHwYDVR0j
BBgwFoAUVM7dLiSWDeWJ1LFutNZiOEzMD68wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHo1WnZkYlRNdzF4aGtENUZEdzlaYmsxMlBKQVcyWlk1VWNVR0dUNVU4
RjcvMS81NENFREQyRTI0OTYwREU1ODlENEIxNkVCNEQ2NjIzODRDQ0MwRkFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU0Q0VERDJFMjQ5NjBERTU4
OUQ0QjE2RUI0RDY2MjM4NENDQzBGQUYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h6NVp2ZGJUTXcxeGhrRDVGRHc5WmJrMTJQSkFXMlpZNVVjVUdHVDVVOEY3LzEv
MzEzNzM5MmUzNDM4MmUzMTM0MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzEzMDM5MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACzMJEwDQYJKoZIhvcNAQELBQADggEBADf3g5u5
Vs3H7pTw8CvvqLo4ERSFO5lMbWVoIX4tV/D6/blD7FX4dgUQS5mK7B5V992BhQ5L
++FeJvmFpcCCJTGttNoXEbb29fUWn67/vDuri2OhAmm3Ne1SsHKS1RV7ZsRByQ87
ja3dMmTLOUxCUvngRlCgUevfPz71j2U7Ywx1EJoXMVKpTluW2FPGjc4aA8A8pN7+
QR3BZiWtxuHKRFV1YjeA2zcnzcRN3sqJsfwJKZqMTD0aYKuf4/w0xw+Z0IzsMfgS
BOehYDjoiIL2QZVhV5cnftA6BsDgPtsOMs4Dgl+sHgyVn0F0a+3tc/IwPnWY+N4V
QdyCfjOEi30/t5c=
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:47 2024 by rpki-client on console-fra.rpki-client.org