Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3233312e302f32342d3234203d3e203532353332.roa
File:                     3230312e34392e3233312e302f32342d3234203d3e203532353332.roa (raw, json)
Hash identifier:          eWtQHgJKmUOEgx6kMoKNr21PvAt5lBF+qycXgb0mgeY=
Subject key identifier:   4D:08:E0:9A:09:04:DF:5A:C3:33:CC:FD:B3:FE:0F:0C:6F:33:F3:68
Certificate issuer:       /CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
Certificate serial:       7BAD77AC8989B05AB645EF5145D72B647ED18784
Authority key identifier: 2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3233312e302f32342d3234203d3e203532353332.roa
Signing time:             Wed 10 Jul 2024 20:42:27 +0000
ROA not before:           Wed 10 Jul 2024 20:37:27 +0000
ROA not after:            Wed 09 Jul 2025 20:42:27 +0000
asID:                     52532
IP address blocks:        201.49.231.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl
                          rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:43:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:ad:77:ac:89:89:b0:5a:b6:45:ef:51:45:d7:2b:64:7e:d1:87:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
        Validity
            Not Before: Jul 10 20:37:27 2024 GMT
            Not After : Jul  9 20:42:27 2025 GMT
        Subject: CN=4D08E09A0904DF5AC333CCFDB3FE0F0C6F33F368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:42:5a:3e:16:c2:fd:7b:e4:f3:3b:f8:2c:dd:
                    5c:af:5b:6b:ef:f7:70:21:3f:98:c0:91:26:30:f2:
                    92:31:2f:b5:8a:7d:8f:38:c5:ad:d4:c6:0d:e4:eb:
                    cb:f0:be:46:bd:c0:2f:4c:c5:1c:5c:19:8b:6a:d5:
                    61:98:be:4e:cb:8a:72:3b:1f:a2:e0:7a:e1:97:a1:
                    4e:e0:0e:fc:45:37:15:c7:b1:8d:1b:81:9c:e8:01:
                    e8:ff:de:22:df:43:b4:f1:6f:1c:1a:aa:51:95:aa:
                    33:d8:2a:6c:5b:29:be:6d:f2:aa:32:74:ac:d3:39:
                    6a:7f:13:0c:fe:4e:a4:dd:00:51:03:b9:63:65:06:
                    38:c9:af:0f:1c:24:9b:df:37:22:aa:09:9b:12:fd:
                    6f:86:17:ef:a3:b0:83:55:13:97:50:3d:6d:7f:54:
                    44:59:06:24:b9:9d:30:d4:71:45:78:17:76:3b:40:
                    8e:f3:d2:8f:c0:8e:5c:a8:46:26:f4:46:18:3f:3c:
                    ca:a9:0a:5b:c5:16:60:55:56:05:cd:72:04:44:4e:
                    f3:2e:6c:2e:20:5a:05:b3:ab:a5:00:f8:7e:3c:b1:
                    86:d0:82:5e:e1:c1:92:e6:1b:ef:4b:92:5a:53:83:
                    7b:bb:85:5b:29:3a:ee:7a:c1:e7:cf:b8:72:7a:e0:
                    3d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:08:E0:9A:09:04:DF:5A:C3:33:CC:FD:B3:FE:0F:0C:6F:33:F3:68
            X509v3 Authority Key Identifier:
                keyid:2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3233312e302f32342d3234203d3e203532353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:a1:3a:66:9e:42:dc:5e:91:80:8d:40:a7:3d:c0:0a:bd:38:
         aa:a5:08:08:2d:4b:2f:b6:81:ae:2d:09:7e:3f:73:7d:7e:a6:
         7e:20:f8:f3:49:be:a2:9a:96:b6:68:4a:54:1c:59:bc:af:b9:
         5c:15:5a:49:16:83:4d:6f:e0:12:5f:77:d0:4a:75:03:5c:4f:
         76:48:97:40:f6:3b:25:c9:f4:6f:b2:02:78:4c:f0:38:71:66:
         34:67:5b:44:72:cf:16:19:c7:04:ea:9a:15:58:87:41:ca:6a:
         de:c9:b0:4b:04:49:05:28:7e:0d:7d:08:d3:be:35:25:b8:21:
         ec:2e:0d:89:01:9a:5b:1d:a1:9d:68:d2:7f:43:b5:1a:e5:16:
         25:f4:9c:36:36:d2:48:02:d7:85:e7:63:49:f4:d0:cb:cc:a5:
         7d:3a:48:59:25:b6:7f:36:d4:f2:96:2b:9d:50:50:13:fc:29:
         f5:38:b2:27:83:16:02:90:73:01:f7:ca:f4:10:57:fe:29:c7:
         63:46:9a:7c:d8:69:44:d1:a8:33:bd:a0:a6:96:4d:cf:ab:03:
         46:e4:88:be:a3:19:a7:6a:e5:87:a1:88:2e:68:7f:a2:83:4b:
         e0:97:df:6d:78:b0:e0:fc:1c:7b:ef:92:85:ae:86:cd:6b:20:
         38:8e:2e:8d
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUe613rImJsFq2Re9RRdcrZH7Rh4QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkMxQ0M5NDM1MzdFNzJBQTU5OUJDOUI5NDBGQjE4MEJB
ODlDMkQxQTAeFw0yNDA3MTAyMDM3MjdaFw0yNTA3MDkyMDQyMjdaMDMxMTAvBgNV
BAMTKDREMDhFMDlBMDkwNERGNUFDMzMzQ0NGREIzRkUwRjBDNkYzM0YzNjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrQlo+FsL9e+TzO/gs3VyvW2vv
93AhP5jAkSYw8pIxL7WKfY84xa3Uxg3k68vwvka9wC9MxRxcGYtq1WGYvk7LinI7
H6LgeuGXoU7gDvxFNxXHsY0bgZzoAej/3iLfQ7TxbxwaqlGVqjPYKmxbKb5t8qoy
dKzTOWp/Ewz+TqTdAFEDuWNlBjjJrw8cJJvfNyKqCZsS/W+GF++jsINVE5dQPW1/
VERZBiS5nTDUcUV4F3Y7QI7z0o/AjlyoRib0Rhg/PMqpClvFFmBVVgXNcgRETvMu
bC4gWgWzq6UA+H48sYbQgl7hwZLmG+9LklpTg3u7hVspOu56wefPuHJ64D23AgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUTQjgmgkE31rDM8z9s/4PDG8z82gwHwYDVR0j
BBgwFoAULBzJQ1N+cqpZm8m5QPsYC6icLRowDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9hZlhGTWtReXBKamFTYVV6dDNFUVFvSk5jVnV6aGhtZEJOdTFXNFhFbzNp
LzEvMkMxQ0M5NDM1MzdFNzJBQTU5OUJDOUI5NDBGQjE4MEJBODlDMkQxQS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yQzFDQzk0MzUzN0U3MkFBNTk5
QkM5Qjk0MEZCMTgwQkE4OUMyRDFBLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9h
ZlhGTWtReXBKamFTYVV6dDNFUVFvSk5jVnV6aGhtZEJOdTFXNFhFbzNpLzEvMzIz
MDMxMmUzNDM5MmUzMjMzMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzUz
MzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQAyTHnMA0GCSqGSIb3DQEBCwUAA4IBAQBioTpmnkLcXpGA
jUCnPcAKvTiqpQgILUsvtoGuLQl+P3N9fqZ+IPjzSb6impa2aEpUHFm8r7lcFVpJ
FoNNb+ASX3fQSnUDXE92SJdA9jslyfRvsgJ4TPA4cWY0Z1tEcs8WGccE6poVWIdB
ymreybBLBEkFKH4NfQjTvjUluCHsLg2JAZpbHaGdaNJ/Q7Ua5RYl9Jw2NtJIAteF
52NJ9NDLzKV9OkhZJbZ/NtTyliudUFAT/Cn1OLIngxYCkHMB98r0EFf+KcdjRpp8
2GlE0agzvaCmlk3PqwNG5Ii+oxmnauWHoYguaH+ig0vgl99teLDg/Bx775KFrobN
ayA4ji6N
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:32 2024 by rpki-client on console-ams.rpki-client.org