Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3233372e302f32342d3234203d3e203532353332.roa
File:                     3230312e34392e3233372e302f32342d3234203d3e203532353332.roa (raw, json)
Hash identifier:          YHXOVn9N8d3C8gWB7k4FAmn/FVsXujnSJLAgTd8197s=
Subject key identifier:   4D:B1:2C:EE:BC:3A:25:5D:A5:14:9A:E4:45:77:B3:3E:47:8F:11:8E
Certificate issuer:       /CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
Certificate serial:       7EA48977608D2C69B0EE6C2428F5482F7D5FEA92
Authority key identifier: 2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3233372e302f32342d3234203d3e203532353332.roa
Signing time:             Mon 29 Apr 2024 19:18:26 +0000
ROA not before:           Mon 29 Apr 2024 19:13:26 +0000
ROA not after:            Mon 28 Apr 2025 19:18:26 +0000
asID:                     52532
IP address blocks:        201.49.237.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl
                          rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 04 Jul 2024 17:55:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:a4:89:77:60:8d:2c:69:b0:ee:6c:24:28:f5:48:2f:7d:5f:ea:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
        Validity
            Not Before: Apr 29 19:13:26 2024 GMT
            Not After : Apr 28 19:18:26 2025 GMT
        Subject: CN=4DB12CEEBC3A255DA5149AE44577B33E478F118E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c5:8a:34:52:9b:5e:e9:76:43:66:e2:0b:38:
                    8b:57:79:2a:5f:b3:3d:40:8f:4d:cc:52:9f:8b:4c:
                    26:6e:eb:02:69:d6:84:8e:91:e6:ad:be:69:29:1b:
                    05:f5:59:2c:da:d5:ab:8e:ff:d1:1d:30:71:01:ed:
                    40:be:f3:0f:65:1d:3f:4c:d1:c4:c4:33:8e:83:c7:
                    df:6a:14:ec:df:c9:56:4c:bc:cc:e8:92:62:2e:30:
                    55:2a:48:55:d7:32:9d:13:7e:d7:d5:87:9a:01:b6:
                    c6:1c:20:4c:85:c0:9c:4e:0d:50:a7:d1:1f:50:6f:
                    82:33:a5:a5:d0:00:b2:ab:b9:fb:2b:a2:4f:f3:5d:
                    ca:23:a4:77:45:34:7f:61:df:f5:5f:2e:ca:b3:c6:
                    4d:59:06:86:58:48:f3:d7:b5:c8:48:55:9c:e8:b8:
                    42:35:55:28:88:a7:a3:63:82:53:2a:88:40:ae:c1:
                    84:11:cf:35:0d:2c:60:82:e4:2e:d8:77:5f:d8:a4:
                    03:1f:f4:a8:2f:d8:8a:23:3d:dc:7e:0c:e7:2c:00:
                    b4:1c:d0:51:66:ef:53:70:b0:97:89:22:37:a6:34:
                    1d:bf:8e:32:2d:0f:6e:6d:73:fb:5e:63:cb:7e:08:
                    95:c2:66:14:0e:1e:b1:e7:54:9b:10:94:8b:4b:b2:
                    03:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:B1:2C:EE:BC:3A:25:5D:A5:14:9A:E4:45:77:B3:3E:47:8F:11:8E
            X509v3 Authority Key Identifier:
                keyid:2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3233372e302f32342d3234203d3e203532353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:8d:37:03:6c:de:6b:c5:e1:7b:15:a6:9e:22:f3:20:7d:c9:
         ce:00:9e:ee:97:37:40:45:66:c9:bd:ab:03:23:b5:20:80:9d:
         9e:e1:83:29:94:37:17:80:2c:97:5a:a8:51:95:3f:b3:fb:21:
         c0:20:20:3b:74:e1:aa:ca:66:6a:2b:63:8b:cb:74:b9:14:86:
         ca:a3:66:b7:c2:9b:44:ce:61:8e:bc:29:4b:05:25:72:86:01:
         88:7a:a1:d8:4b:ca:af:71:9f:20:a8:9a:fe:cd:4d:80:0a:df:
         67:b1:ea:46:fa:ba:27:cb:b5:c7:8c:db:4a:3c:fa:d3:1c:29:
         02:87:7b:34:1c:db:bd:48:cd:87:f2:7d:df:3d:93:34:00:6f:
         78:c9:54:da:a5:a8:bd:b9:41:d6:6a:5a:4a:a2:00:83:1f:cf:
         73:1e:fc:b2:f3:19:2a:46:56:77:af:d0:c7:ed:98:14:f4:c0:
         11:7a:aa:c4:5b:8d:49:d9:f5:dc:e4:d8:80:63:ff:12:8b:ad:
         9a:ea:db:ad:db:a6:ce:a0:49:c6:aa:9c:18:66:5c:d1:40:72:
         f0:37:3c:53:d0:38:1d:a3:21:5e:29:c2:a1:88:01:99:4b:82:
         69:af:71:6d:2d:c2:99:29:84:5e:bd:bf:37:fe:d5:88:24:87:
         24:fa:a8:02
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUfqSJd2CNLGmw7mwkKPVIL31f6pIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkMxQ0M5NDM1MzdFNzJBQTU5OUJDOUI5NDBGQjE4MEJB
ODlDMkQxQTAeFw0yNDA0MjkxOTEzMjZaFw0yNTA0MjgxOTE4MjZaMDMxMTAvBgNV
BAMTKDREQjEyQ0VFQkMzQTI1NURBNTE0OUFFNDQ1NzdCMzNFNDc4RjExOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlxYo0Upte6XZDZuILOItXeSpf
sz1Aj03MUp+LTCZu6wJp1oSOkeatvmkpGwX1WSza1auO/9EdMHEB7UC+8w9lHT9M
0cTEM46Dx99qFOzfyVZMvMzokmIuMFUqSFXXMp0TftfVh5oBtsYcIEyFwJxODVCn
0R9Qb4IzpaXQALKrufsrok/zXcojpHdFNH9h3/VfLsqzxk1ZBoZYSPPXtchIVZzo
uEI1VSiIp6NjglMqiECuwYQRzzUNLGCC5C7Yd1/YpAMf9Kgv2IojPdx+DOcsALQc
0FFm71NwsJeJIjemNB2/jjItD25tc/teY8t+CJXCZhQOHrHnVJsQlItLsgNdAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUTbEs7rw6JV2lFJrkRXezPkePEY4wHwYDVR0j
BBgwFoAULBzJQ1N+cqpZm8m5QPsYC6icLRowDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9hZlhGTWtReXBKamFTYVV6dDNFUVFvSk5jVnV6aGhtZEJOdTFXNFhFbzNp
LzEvMkMxQ0M5NDM1MzdFNzJBQTU5OUJDOUI5NDBGQjE4MEJBODlDMkQxQS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yQzFDQzk0MzUzN0U3MkFBNTk5
QkM5Qjk0MEZCMTgwQkE4OUMyRDFBLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9h
ZlhGTWtReXBKamFTYVV6dDNFUVFvSk5jVnV6aGhtZEJOdTFXNFhFbzNpLzEvMzIz
MDMxMmUzNDM5MmUzMjMzMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzUz
MzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQAyTHtMA0GCSqGSIb3DQEBCwUAA4IBAQCejTcDbN5rxeF7
FaaeIvMgfcnOAJ7ulzdARWbJvasDI7UggJ2e4YMplDcXgCyXWqhRlT+z+yHAICA7
dOGqymZqK2OLy3S5FIbKo2a3wptEzmGOvClLBSVyhgGIeqHYS8qvcZ8gqJr+zU2A
Ct9nsepG+rony7XHjNtKPPrTHCkCh3s0HNu9SM2H8n3fPZM0AG94yVTapai9uUHW
alpKogCDH89zHvyy8xkqRlZ3r9DH7ZgU9MAReqrEW41J2fXc5NiAY/8Si62a6tut
26bOoEnGqpwYZlzRQHLwNzxT0DgdoyFeKcKhiAGZS4Jpr3FtLcKZKYRevb83/tWI
JIck+qgC
-----END CERTIFICATE-----
Generated at Wed Jul 3 17:43:28 2024 by rpki-client on console-ams.rpki-client.org