Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3233392e302f32342d3234203d3e203532353332.roa
File:                     3230312e34392e3233392e302f32342d3234203d3e203532353332.roa (raw, json)
Hash identifier:          JFkA+VOcj1Be+qolDCRFx4xs9oGA3JevhRvxCiSsoEc=
Subject key identifier:   3D:27:12:05:20:BD:9D:F7:24:B1:43:69:62:05:F1:58:B3:62:B5:5C
Certificate issuer:       /CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
Certificate serial:       77039B0B1B03304E94745643E3B29729FE65BE0C
Authority key identifier: 2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3233392e302f32342d3234203d3e203532353332.roa
Signing time:             Mon 29 Apr 2024 19:17:45 +0000
ROA not before:           Mon 29 Apr 2024 19:12:45 +0000
ROA not after:            Mon 28 Apr 2025 19:17:45 +0000
asID:                     52532
IP address blocks:        201.49.239.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl
                          rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 04 Jul 2024 17:55:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:03:9b:0b:1b:03:30:4e:94:74:56:43:e3:b2:97:29:fe:65:be:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
        Validity
            Not Before: Apr 29 19:12:45 2024 GMT
            Not After : Apr 28 19:17:45 2025 GMT
        Subject: CN=3D27120520BD9DF724B143696205F158B362B55C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:fc:dd:dc:66:5a:2f:24:a2:9a:80:db:6e:7c:
                    47:54:b5:b2:8d:68:af:ad:a5:55:11:54:b4:66:ed:
                    02:fd:e0:9f:03:3a:33:60:ff:f6:99:ee:ce:e5:0e:
                    e1:94:a3:5b:de:f3:6a:e3:c1:e7:de:5e:ca:08:dc:
                    d5:fd:a1:b5:ca:4a:ad:03:5f:81:b8:ec:f2:fc:1f:
                    78:40:2f:30:3e:d3:7f:e6:58:30:14:39:00:fd:56:
                    80:78:42:87:a1:aa:1a:25:3a:c2:de:69:a6:fe:60:
                    a4:7b:b0:5b:c5:84:3a:80:d7:29:7a:1e:77:34:e8:
                    36:ac:37:5c:36:6d:50:4b:10:94:86:11:91:2b:de:
                    5d:a1:04:f3:41:48:44:ad:66:9c:d2:f3:75:c6:a0:
                    fe:ef:71:5a:e1:19:a6:bd:29:bb:c5:28:fc:6a:02:
                    4b:0e:0c:8f:b2:31:51:bb:e8:d3:7f:94:c6:eb:1a:
                    81:17:16:af:dd:a6:5e:ce:d8:1e:90:e3:4e:e6:fb:
                    a4:d5:39:2f:5d:5a:76:2f:0c:26:c1:db:00:e0:90:
                    a2:61:96:70:e9:fa:19:67:60:98:53:83:bf:5d:62:
                    22:ee:18:ea:7c:c2:9c:d2:c3:5e:e7:76:56:c4:62:
                    4d:96:58:39:10:b7:f9:f4:1b:4b:1c:be:c0:e1:37:
                    c7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:27:12:05:20:BD:9D:F7:24:B1:43:69:62:05:F1:58:B3:62:B5:5C
            X509v3 Authority Key Identifier:
                keyid:2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3233392e302f32342d3234203d3e203532353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:77:26:5c:a7:6b:6d:c0:59:bc:18:e2:1b:93:f4:8d:82:58:
         33:3c:03:45:81:09:b7:b6:97:e7:63:63:54:d9:e2:ca:5b:8c:
         fb:a6:c7:b5:99:bd:53:67:5e:eb:40:b2:d4:37:1a:38:53:0b:
         e9:c7:1d:e9:16:db:fd:a8:e0:fd:60:c5:3e:58:5b:d8:48:2b:
         79:9a:4a:00:4f:d3:98:7e:a2:b0:58:59:f9:a1:20:42:bb:ba:
         21:e8:31:cd:37:96:33:2a:1e:f9:84:94:b7:dd:45:56:82:30:
         b6:3f:35:08:b8:0c:43:bb:d5:40:46:3f:6a:2e:3f:da:99:c7:
         db:80:36:88:2d:b9:82:85:25:82:7d:a3:a5:e5:a9:fc:3c:cc:
         e8:72:59:b2:6a:f9:e9:03:2b:f1:e6:18:47:99:4c:8f:3b:94:
         e8:52:7b:cb:73:64:5d:6d:ca:21:dd:d1:5f:b4:e0:dc:cc:59:
         fc:2e:5c:6e:11:a6:e7:06:ee:c8:a0:2b:55:ea:12:ea:63:80:
         73:cc:fc:25:84:37:67:a4:fb:90:b3:ab:64:71:78:3d:ff:2b:
         d1:7a:d3:b7:cd:5b:47:87:d7:6a:ba:1b:1c:ee:f1:b3:c7:90:
         db:96:56:a9:5f:5b:98:d8:ec:8d:1d:70:46:78:63:ae:81:7c:
         cc:7d:fb:19
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUdwObCxsDME6UdFZD47KXKf5lvgwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkMxQ0M5NDM1MzdFNzJBQTU5OUJDOUI5NDBGQjE4MEJB
ODlDMkQxQTAeFw0yNDA0MjkxOTEyNDVaFw0yNTA0MjgxOTE3NDVaMDMxMTAvBgNV
BAMTKDNEMjcxMjA1MjBCRDlERjcyNEIxNDM2OTYyMDVGMTU4QjM2MkI1NUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD+/N3cZlovJKKagNtufEdUtbKN
aK+tpVURVLRm7QL94J8DOjNg//aZ7s7lDuGUo1ve82rjwefeXsoI3NX9obXKSq0D
X4G47PL8H3hALzA+03/mWDAUOQD9VoB4QoehqholOsLeaab+YKR7sFvFhDqA1yl6
Hnc06DasN1w2bVBLEJSGEZEr3l2hBPNBSEStZpzS83XGoP7vcVrhGaa9KbvFKPxq
AksODI+yMVG76NN/lMbrGoEXFq/dpl7O2B6Q407m+6TVOS9dWnYvDCbB2wDgkKJh
lnDp+hlnYJhTg79dYiLuGOp8wpzSw17ndlbEYk2WWDkQt/n0G0scvsDhN8fTAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUPScSBSC9nfcksUNpYgXxWLNitVwwHwYDVR0j
BBgwFoAULBzJQ1N+cqpZm8m5QPsYC6icLRowDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9hZlhGTWtReXBKamFTYVV6dDNFUVFvSk5jVnV6aGhtZEJOdTFXNFhFbzNp
LzEvMkMxQ0M5NDM1MzdFNzJBQTU5OUJDOUI5NDBGQjE4MEJBODlDMkQxQS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yQzFDQzk0MzUzN0U3MkFBNTk5
QkM5Qjk0MEZCMTgwQkE4OUMyRDFBLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9h
ZlhGTWtReXBKamFTYVV6dDNFUVFvSk5jVnV6aGhtZEJOdTFXNFhFbzNpLzEvMzIz
MDMxMmUzNDM5MmUzMjMzMzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzUz
MzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQAyTHvMA0GCSqGSIb3DQEBCwUAA4IBAQB8dyZcp2ttwFm8
GOIbk/SNglgzPANFgQm3tpfnY2NU2eLKW4z7pse1mb1TZ17rQLLUNxo4Uwvpxx3p
Ftv9qOD9YMU+WFvYSCt5mkoAT9OYfqKwWFn5oSBCu7oh6DHNN5YzKh75hJS33UVW
gjC2PzUIuAxDu9VARj9qLj/amcfbgDaILbmChSWCfaOl5an8PMzoclmyavnpAyvx
5hhHmUyPO5ToUnvLc2Rdbcoh3dFftODczFn8LlxuEabnBu7IoCtV6hLqY4BzzPwl
hDdnpPuQs6tkcXg9/yvRetO3zVtHh9dquhsc7vGzx5DbllapX1uY2OyNHXBGeGOu
gXzMffsZ
-----END CERTIFICATE-----
Generated at Wed Jul 3 17:46:23 2024 by rpki-client on console-fra.rpki-client.org