Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3233322e302f32322d3232203d3e203532353332.roa
File:                     3230312e34392e3233322e302f32322d3232203d3e203532353332.roa (raw, json)
Hash identifier:          mv8AuhpnIigu0ud5nByTFDJa9jJKBwQfz+TKKxqvDg8=
Subject key identifier:   F8:F5:F8:72:57:84:BB:1C:73:2A:11:6F:89:42:46:76:4A:C7:97:F5
Certificate issuer:       /CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
Certificate serial:       7A6F316A5A48720F80057F224A95D1702BA3FE26
Authority key identifier: 2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3233322e302f32322d3232203d3e203532353332.roa
Signing time:             Mon 29 Apr 2024 19:18:41 +0000
ROA not before:           Mon 29 Apr 2024 19:13:41 +0000
ROA not after:            Mon 28 Apr 2025 19:18:41 +0000
asID:                     52532
IP address blocks:        201.49.232.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl
                          rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 04 Jul 2024 17:55:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:6f:31:6a:5a:48:72:0f:80:05:7f:22:4a:95:d1:70:2b:a3:fe:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
        Validity
            Not Before: Apr 29 19:13:41 2024 GMT
            Not After : Apr 28 19:18:41 2025 GMT
        Subject: CN=F8F5F8725784BB1C732A116F894246764AC797F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c5:ee:de:48:32:05:e0:cb:df:de:81:e9:62:
                    9f:75:5b:fb:b0:bf:3d:20:e0:2c:99:ea:5c:d9:67:
                    c5:e8:28:c3:e5:28:84:e6:fb:ff:0f:ac:40:5f:04:
                    81:55:8a:04:f9:ba:0c:62:0d:11:2e:f7:4c:ca:0c:
                    90:9a:98:84:52:d0:74:d8:5b:77:88:6a:1e:30:0e:
                    07:a7:f7:23:da:d2:90:6f:d0:c9:ba:37:79:07:f1:
                    71:e9:4c:c4:10:70:1c:d4:35:23:cb:20:52:21:20:
                    69:1a:82:cf:a7:1e:94:fb:53:06:90:ef:7f:03:90:
                    9d:b8:18:72:4b:ac:17:e6:69:18:13:bf:42:e4:79:
                    85:84:60:e8:87:ee:51:51:2a:ea:fb:94:b2:77:e0:
                    cd:7b:64:9a:04:3c:a1:5e:f7:0b:7a:ad:20:ef:44:
                    1f:2c:2e:df:b7:50:ec:27:2c:28:c0:7c:e3:65:4c:
                    0c:0f:0a:28:d4:0e:4b:71:b4:28:b1:52:3b:6f:d8:
                    39:74:b1:c4:31:2b:42:a8:ba:aa:59:6b:08:e3:57:
                    8d:cf:ce:66:c1:69:24:38:a2:98:74:7c:27:fb:33:
                    90:7f:39:c6:a8:c8:8d:85:c0:71:65:be:aa:b9:e6:
                    a5:8d:b8:fa:bc:af:df:32:e7:81:b4:27:24:0e:4c:
                    54:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F5:F8:72:57:84:BB:1C:73:2A:11:6F:89:42:46:76:4A:C7:97:F5
            X509v3 Authority Key Identifier:
                keyid:2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3233322e302f32322d3232203d3e203532353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:2f:6d:bc:79:63:b0:3f:aa:7e:7e:85:92:ef:3b:03:b9:bf:
         89:d7:b0:fb:7f:c6:36:82:31:94:74:f2:73:8b:ca:12:de:e4:
         76:c6:5e:db:f5:6b:d5:a5:36:8f:85:2d:ae:df:99:d2:7e:53:
         83:34:83:2b:51:3b:01:58:ba:29:4c:a4:0e:29:d4:5f:c5:28:
         15:58:75:ca:b3:4c:96:5a:c2:c8:48:06:7a:f6:d8:4a:c4:25:
         06:c3:04:72:a0:d9:74:79:e4:f7:1d:b3:01:47:88:ca:d6:a3:
         bf:60:c2:70:d8:25:c8:91:db:42:bd:7d:27:34:cf:82:e8:f2:
         7f:16:8d:44:09:d0:37:b2:82:a8:de:79:d2:30:49:1d:77:89:
         39:02:cf:e5:fb:c3:71:b8:c7:c8:5c:fb:34:df:bf:27:2b:e6:
         97:23:d8:e3:bc:e6:7b:71:e5:db:f7:07:fb:ea:78:9e:c9:9a:
         77:99:59:36:66:9b:ef:b7:40:0e:7f:28:b6:8f:80:2f:98:ba:
         d5:93:0d:4c:b7:66:55:7d:26:7c:c1:0d:6d:6f:72:53:38:f3:
         e6:f4:0d:65:76:aa:a5:31:fb:f8:f6:c0:38:b0:a9:6b:2b:41:
         42:f5:2f:c6:ab:e4:eb:c8:29:56:5d:e9:ca:5b:da:7e:bb:90:
         fa:cf:dd:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 17:43:28 2024 by rpki-client on console-ams.rpki-client.org