Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3232382e302f32322d3232203d3e203532353332.roa
File:                     3230312e34392e3232382e302f32322d3232203d3e203532353332.roa (raw, json)
Hash identifier:          qM9vuFk1u7SsJGHZlIgQM9ceaM3OcJiPATt3TX2s7OM=
Subject key identifier:   B2:20:52:8E:D3:85:29:0D:CF:B0:15:F1:28:64:4C:15:28:91:AB:9D
Certificate issuer:       /CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
Certificate serial:       1DD2072438F83DFA0B33F878737B062DE4BB8BC2
Authority key identifier: 2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3232382e302f32322d3232203d3e203532353332.roa
Signing time:             Mon 29 Apr 2024 19:18:00 +0000
ROA not before:           Mon 29 Apr 2024 19:13:00 +0000
ROA not after:            Mon 28 Apr 2025 19:18:00 +0000
asID:                     52532
IP address blocks:        201.49.228.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl
                          rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 04 Jul 2024 17:55:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:d2:07:24:38:f8:3d:fa:0b:33:f8:78:73:7b:06:2d:e4:bb:8b:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
        Validity
            Not Before: Apr 29 19:13:00 2024 GMT
            Not After : Apr 28 19:18:00 2025 GMT
        Subject: CN=B220528ED385290DCFB015F128644C152891AB9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ef:c4:56:af:d3:41:e1:4c:70:5e:42:02:d1:
                    49:1e:77:14:d8:ae:60:63:16:2c:85:02:90:04:92:
                    2f:b2:ee:67:7d:e1:a5:f2:18:37:79:5b:2c:92:6f:
                    4e:a6:6e:65:75:10:85:d4:06:24:b1:cc:cf:a9:d1:
                    23:2f:a6:2f:b2:e0:48:7d:e1:c1:86:c9:b9:e6:d4:
                    a3:90:3b:6f:27:65:7a:0d:78:5b:b0:32:cf:29:0c:
                    d5:23:02:a6:0d:62:2c:55:17:80:06:0d:4e:4e:a4:
                    c7:8a:9c:f1:c7:af:39:d4:f2:c0:8f:2e:4c:3d:4b:
                    89:af:ab:ff:32:44:c3:e8:c8:ff:f6:76:f1:44:27:
                    c5:99:30:e9:df:12:1f:75:2a:3f:5d:c0:cc:45:45:
                    d8:ab:a4:dd:e0:ab:41:4a:4a:65:a3:27:0a:b0:69:
                    ae:9c:63:90:3f:33:da:1c:04:af:c9:e7:94:15:1c:
                    19:05:44:eb:31:2b:b8:7d:f3:32:47:37:c1:26:fd:
                    27:d5:cf:e6:33:97:bb:e0:03:b6:bf:d2:11:b1:56:
                    7f:be:af:95:cb:db:a8:c9:96:46:c5:6d:bc:e3:aa:
                    72:95:73:c5:84:05:7b:aa:05:58:45:b5:9a:44:61:
                    9a:e6:7f:ce:e7:ab:b6:0c:07:5a:37:ca:fa:50:98:
                    bc:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:20:52:8E:D3:85:29:0D:CF:B0:15:F1:28:64:4C:15:28:91:AB:9D
            X509v3 Authority Key Identifier:
                keyid:2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3232382e302f32322d3232203d3e203532353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:61:c8:9c:63:32:34:81:c5:4d:c6:ac:61:4c:75:b1:e9:66:
         ee:6c:4d:a4:0d:54:70:2d:52:31:6b:8a:c7:d4:70:ac:8f:3f:
         d2:fa:8c:21:c5:d6:43:a1:4b:92:07:93:91:7e:94:47:f5:5c:
         8c:a0:f9:20:cf:bd:87:d4:78:d0:c8:92:b1:81:ee:aa:3e:06:
         3d:80:eb:c6:ae:98:81:01:ab:44:e4:a3:98:49:d9:6b:12:77:
         29:9f:3a:3d:12:6a:4e:e6:29:b9:fa:9b:8e:4f:68:d7:b1:1e:
         35:f8:0f:7a:30:a1:6f:32:f8:4e:88:bf:a3:b8:e6:f9:ea:d1:
         a1:fa:93:06:dc:fd:be:8b:16:c1:15:bc:f4:32:49:3e:cd:3a:
         67:a3:60:8a:67:08:2c:e8:d4:3b:0c:04:93:f9:71:a6:8f:12:
         2b:4f:49:b6:39:80:4d:6a:d5:b8:5b:18:9a:e5:7e:d6:e0:52:
         4b:fb:aa:02:aa:f0:07:d8:d1:eb:2a:2f:e5:d7:f4:40:09:fd:
         35:5f:23:8a:50:b2:f7:4d:5e:8d:df:25:04:cc:e4:62:d8:67:
         32:da:bf:a6:56:3a:b6:e0:56:60:b0:6a:9e:bb:c9:0a:7d:72:
         f6:e2:eb:fa:61:ed:fd:64:20:ac:1e:02:db:5e:51:18:9e:64:
         91:71:05:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 17:46:23 2024 by rpki-client on console-fra.rpki-client.org