Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/27hAC1SmsFLNA6MiFDwXGjouYh8oCmmcsfapvSpz1aMu/0/3138312e3139312e302e302f32322d3234203d3e20323637343336.roa
File:                     3138312e3139312e302e302f32322d3234203d3e20323637343336.roa (raw, json)
Hash identifier:          1NGXVZBq7N7JfWlnSkt9eqTReqsahtQdPfAg7iU+aGM=
Subject key identifier:   10:69:79:A9:38:2B:0F:7F:E3:9A:BC:30:14:90:E1:FD:B2:71:44:0B
Certificate issuer:       /CN=03FA2EBA952910BFF3993D9D42BA510513B3280B
Certificate serial:       443FDE677596D7C4FB7E9230303B1222B800440C
Authority key identifier: 03:FA:2E:BA:95:29:10:BF:F3:99:3D:9D:42:BA:51:05:13:B3:28:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03FA2EBA952910BFF3993D9D42BA510513B3280B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/27hAC1SmsFLNA6MiFDwXGjouYh8oCmmcsfapvSpz1aMu/0/3138312e3139312e302e302f32322d3234203d3e20323637343336.roa
Signing time:             Thu 24 Oct 2024 14:04:12 +0000
ROA not before:           Thu 24 Oct 2024 13:59:12 +0000
ROA not after:            Thu 23 Oct 2025 14:04:12 +0000
asID:                     267436
IP address blocks:        181.191.0.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/27hAC1SmsFLNA6MiFDwXGjouYh8oCmmcsfapvSpz1aMu/0/03FA2EBA952910BFF3993D9D42BA510513B3280B.crl
                          rsync://rpki-repo.registro.br/repo/27hAC1SmsFLNA6MiFDwXGjouYh8oCmmcsfapvSpz1aMu/0/03FA2EBA952910BFF3993D9D42BA510513B3280B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03FA2EBA952910BFF3993D9D42BA510513B3280B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 17:21:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:3f:de:67:75:96:d7:c4:fb:7e:92:30:30:3b:12:22:b8:00:44:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03FA2EBA952910BFF3993D9D42BA510513B3280B
        Validity
            Not Before: Oct 24 13:59:12 2024 GMT
            Not After : Oct 23 14:04:12 2025 GMT
        Subject: CN=106979A9382B0F7FE39ABC301490E1FDB271440B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b2:40:22:9d:8b:ab:7d:e9:2e:f1:5c:97:96:
                    ac:1c:2f:98:cc:bf:ea:df:14:23:16:37:c9:cd:9d:
                    85:d4:59:a7:03:73:c7:c9:af:de:32:2b:81:54:95:
                    e6:48:f2:ec:ad:44:6f:8b:9e:67:e8:11:83:80:28:
                    8d:e3:c6:0f:30:34:1c:97:24:e0:0e:48:40:4b:12:
                    37:2b:9c:18:08:e8:84:16:4a:42:9d:0c:7e:59:ff:
                    4e:8a:d8:08:f1:cd:45:a1:bc:1e:02:e7:cf:b5:b2:
                    26:f0:75:2e:ee:ef:86:4c:b7:fd:d0:67:f8:17:19:
                    65:c2:0d:56:18:c4:5c:6e:16:e5:11:61:3e:7f:2d:
                    30:e7:e6:01:da:bb:15:9c:92:63:8a:19:68:92:7e:
                    c2:41:96:ae:a8:87:4e:a5:a0:02:09:9f:ce:72:7c:
                    9f:aa:d5:0d:6d:6d:88:67:c6:5d:09:4c:65:aa:ca:
                    eb:39:95:d2:be:f7:cb:4e:87:66:0a:f5:69:c2:3c:
                    fc:1d:9f:cb:13:21:5c:a0:9d:58:ce:d8:95:69:83:
                    3c:06:91:1a:cb:e5:6c:a7:c9:1c:bd:bd:cc:5f:af:
                    d0:f3:7d:ab:e8:15:c4:3a:c0:12:0f:f4:e6:70:cb:
                    a4:81:dd:bb:9f:d8:bd:51:6b:e6:d9:c5:0c:56:3a:
                    95:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:69:79:A9:38:2B:0F:7F:E3:9A:BC:30:14:90:E1:FD:B2:71:44:0B
            X509v3 Authority Key Identifier:
                keyid:03:FA:2E:BA:95:29:10:BF:F3:99:3D:9D:42:BA:51:05:13:B3:28:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/27hAC1SmsFLNA6MiFDwXGjouYh8oCmmcsfapvSpz1aMu/0/03FA2EBA952910BFF3993D9D42BA510513B3280B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03FA2EBA952910BFF3993D9D42BA510513B3280B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/27hAC1SmsFLNA6MiFDwXGjouYh8oCmmcsfapvSpz1aMu/0/3138312e3139312e302e302f32322d3234203d3e20323637343336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:06:16:c2:f6:c1:f3:56:16:0b:44:8e:0a:a6:48:a6:4a:3b:
         2c:5e:09:b5:0f:f3:a2:7f:34:93:40:97:d1:89:80:c1:e4:5a:
         2b:17:27:7d:06:67:0f:0f:f3:cb:dd:41:3b:7f:a9:1c:af:27:
         a6:fb:e3:40:94:d3:d5:0d:89:2f:62:86:00:1b:b0:ca:57:86:
         57:60:08:82:1a:c4:00:01:41:3f:18:7a:d7:be:95:81:cb:a2:
         1f:a7:56:1d:09:ff:a8:2e:1c:09:86:c5:53:12:84:e4:1e:71:
         d2:64:7a:19:f9:90:ab:1c:2c:3e:75:85:9a:15:1c:70:fb:cb:
         c3:2e:8a:68:79:a8:da:5c:f5:a0:cc:e7:cb:11:9d:30:dd:0b:
         be:3b:ff:b7:36:9b:ef:96:d5:91:a8:b9:19:f1:70:d8:44:a9:
         4f:e4:5a:ae:fe:e5:6c:ab:30:fc:cd:20:04:c2:39:bf:3b:d5:
         e4:99:ff:c7:a0:7c:09:50:7b:f4:8c:31:db:df:bf:8d:7c:13:
         0f:47:c4:74:80:45:95:63:71:0d:3b:31:79:89:c7:e8:2e:4c:
         8e:82:a5:2b:98:8a:34:09:73:ed:12:46:1e:bf:6e:4d:bc:27:
         f4:c5:01:71:f1:36:95:52:29:1c:66:1d:8f:14:ba:ce:97:ac:
         51:ff:af:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 17:55:34 2024 by rpki-client on console-fra.rpki-client.org