Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/1/3230312e3138322e3132302e302f32322d3332203d3e20323637353137.roa
File:                     3230312e3138322e3132302e302f32322d3332203d3e20323637353137.roa (raw, json)
Hash identifier:          RF6h7gnA4aeF1+n7QFT0bhkIUWJd+63DKBJP2hTIW2g=
Subject key identifier:   61:03:44:59:2F:8B:30:E1:71:83:A9:FE:81:56:CD:1A:0F:BA:2E:16
Certificate issuer:       /CN=AAF5B81D61057C224A29F86F6C466A2DE486BFFD
Certificate serial:       26DC81E3F5B189D9DB89ACC879E0EF5F59928F9C
Authority key identifier: AA:F5:B8:1D:61:05:7C:22:4A:29:F8:6F:6C:46:6A:2D:E4:86:BF:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAF5B81D61057C224A29F86F6C466A2DE486BFFD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/1/3230312e3138322e3132302e302f32322d3332203d3e20323637353137.roa
Signing time:             Thu 04 Apr 2024 06:30:15 +0000
ROA not before:           Thu 04 Apr 2024 06:25:15 +0000
ROA not after:            Thu 03 Apr 2025 06:30:15 +0000
asID:                     267517
IP address blocks:        201.182.120.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/1/AAF5B81D61057C224A29F86F6C466A2DE486BFFD.crl
                          rsync://rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/1/AAF5B81D61057C224A29F86F6C466A2DE486BFFD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAF5B81D61057C224A29F86F6C466A2DE486BFFD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:dc:81:e3:f5:b1:89:d9:db:89:ac:c8:79:e0:ef:5f:59:92:8f:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAF5B81D61057C224A29F86F6C466A2DE486BFFD
        Validity
            Not Before: Apr  4 06:25:15 2024 GMT
            Not After : Apr  3 06:30:15 2025 GMT
        Subject: CN=610344592F8B30E17183A9FE8156CD1A0FBA2E16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c8:32:53:34:13:8c:6b:52:70:d2:89:bd:26:
                    d3:b6:0d:18:16:8f:a8:a3:6b:3d:76:d0:d7:c5:a9:
                    d3:af:69:7b:6a:7e:4e:86:07:f7:cd:30:88:c0:e0:
                    e9:34:d0:31:c7:69:c2:07:bd:11:cf:91:76:09:79:
                    f4:07:17:e3:60:e4:d2:ed:e0:1f:90:36:5b:a8:c5:
                    7a:10:f4:37:24:88:95:a1:1f:59:03:60:b3:16:6f:
                    4c:8a:fd:7c:39:5a:5a:9d:3f:5d:df:9e:9c:1f:a5:
                    89:81:8a:db:0b:9c:08:51:5d:9f:5e:ca:4c:46:3a:
                    57:91:97:35:85:b1:9b:ab:e1:72:14:53:50:df:8e:
                    e6:8e:15:94:27:d7:97:21:3e:fa:57:b5:a1:77:0b:
                    ec:a6:23:85:dc:3d:0a:50:64:42:2c:42:f8:ea:6b:
                    29:43:0a:f9:13:e4:52:e8:dd:ee:6e:95:94:4a:4f:
                    39:47:3e:d5:43:d9:45:67:64:9e:00:59:a4:55:2a:
                    36:cc:20:bc:91:fd:07:29:2e:f7:79:3f:b4:f9:ca:
                    34:72:1b:4c:13:8b:4f:ce:1f:8e:f0:f7:74:31:e3:
                    9d:7e:de:22:5d:6a:e9:75:48:0f:5d:1b:de:bd:08:
                    07:96:d2:62:99:4e:6e:c6:97:69:ae:e6:e9:b3:12:
                    f8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:03:44:59:2F:8B:30:E1:71:83:A9:FE:81:56:CD:1A:0F:BA:2E:16
            X509v3 Authority Key Identifier:
                keyid:AA:F5:B8:1D:61:05:7C:22:4A:29:F8:6F:6C:46:6A:2D:E4:86:BF:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/1/AAF5B81D61057C224A29F86F6C466A2DE486BFFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAF5B81D61057C224A29F86F6C466A2DE486BFFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/1/3230312e3138322e3132302e302f32322d3332203d3e20323637353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:54:8c:b4:b2:91:d6:03:75:06:db:70:23:44:06:48:65:67:
         4b:2f:82:66:d9:ed:eb:fe:ea:a9:a5:d2:a9:e8:39:94:f7:44:
         8b:ce:f3:8b:65:3f:f6:0f:fd:35:05:40:07:54:29:24:bf:97:
         cf:44:14:eb:da:a9:ef:22:bc:3b:52:8b:7a:cb:dc:f8:c2:99:
         58:da:51:ba:f8:e4:91:54:c2:19:90:a1:64:f8:bb:ae:17:8b:
         de:f3:60:c3:e3:f6:d0:e3:21:97:56:f4:91:a5:4a:be:f2:15:
         a6:9e:c6:68:be:59:a4:1e:6c:57:8a:7b:98:1e:7c:39:11:f5:
         88:fb:5c:aa:f4:08:8d:e8:8f:bc:eb:f2:7d:5a:ac:8a:a8:f9:
         bf:29:75:e2:bf:a5:52:dc:9a:18:40:bb:e0:86:72:6c:5d:77:
         94:3b:02:2a:65:dc:23:cf:50:f8:21:b5:e8:20:76:c0:43:de:
         e3:2b:d5:e1:74:83:07:06:f5:d5:2c:9d:17:4a:29:cb:01:d4:
         80:ee:18:97:3a:3e:e5:6a:7d:fc:6b:3e:b6:b0:06:5f:89:a9:
         4a:1f:b1:f7:c6:c9:e3:98:bd:7b:13:66:97:e9:d4:69:dc:b3:
         01:72:db:c5:53:ce:42:99:27:d8:9c:b5:3e:84:39:96:68:e1:
         f3:e3:fa:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:28:34 2024 by rpki-client on console-ams.rpki-client.org