Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/1/3230312e3138322e3137362e302f32322d3332203d3e20323637353238.roa
File:                     3230312e3138322e3137362e302f32322d3332203d3e20323637353238.roa (raw, json)
Hash identifier:          G+/3nfP/++03S+BIufHKap06m6eFw//2EhfAze+Rc7g=
Subject key identifier:   D5:38:07:11:05:FF:E7:B8:5D:1A:44:A1:60:C5:11:74:02:DA:4F:C9
Certificate issuer:       /CN=0E6FD47D905EAC8EE5AA9D2C5C3B6A407552D02B
Certificate serial:       1D168FB2E144846DCDB1A5B2676512C4375F8FF0
Authority key identifier: 0E:6F:D4:7D:90:5E:AC:8E:E5:AA:9D:2C:5C:3B:6A:40:75:52:D0:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E6FD47D905EAC8EE5AA9D2C5C3B6A407552D02B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/1/3230312e3138322e3137362e302f32322d3332203d3e20323637353238.roa
Signing time:             Thu 04 Apr 2024 16:18:10 +0000
ROA not before:           Thu 04 Apr 2024 16:13:10 +0000
ROA not after:            Thu 03 Apr 2025 16:18:10 +0000
asID:                     267528
IP address blocks:        201.182.176.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/1/0E6FD47D905EAC8EE5AA9D2C5C3B6A407552D02B.crl
                          rsync://rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/1/0E6FD47D905EAC8EE5AA9D2C5C3B6A407552D02B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E6FD47D905EAC8EE5AA9D2C5C3B6A407552D02B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:16:8f:b2:e1:44:84:6d:cd:b1:a5:b2:67:65:12:c4:37:5f:8f:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E6FD47D905EAC8EE5AA9D2C5C3B6A407552D02B
        Validity
            Not Before: Apr  4 16:13:10 2024 GMT
            Not After : Apr  3 16:18:10 2025 GMT
        Subject: CN=D538071105FFE7B85D1A44A160C5117402DA4FC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:49:2c:c3:26:3b:be:b8:d7:63:66:a4:4a:c4:
                    ac:5b:5d:ca:8a:e6:68:7a:27:58:97:7a:5f:df:89:
                    5a:7e:9c:de:45:3d:3a:1a:29:28:fb:4a:36:30:ec:
                    e9:56:b1:0d:51:94:39:5d:b5:c2:93:b8:17:75:cb:
                    46:34:25:da:37:fd:32:5a:53:6b:5a:00:8e:cd:89:
                    31:42:6d:2d:40:9d:16:2e:6c:f5:14:2e:7c:bd:5c:
                    f9:de:06:4f:87:a1:73:df:26:5f:4b:df:48:0c:07:
                    58:01:80:0d:79:62:8c:04:a4:27:a5:28:77:43:cb:
                    b0:89:54:77:c7:01:a7:8f:97:99:5a:e7:5c:75:9a:
                    11:df:d4:d5:28:0b:09:15:c1:57:57:ed:37:59:87:
                    53:d1:f0:75:71:d6:3a:52:22:e2:a0:09:2d:92:38:
                    de:2e:d4:9c:46:a5:b0:93:9d:25:47:d3:93:a0:f7:
                    44:b9:e1:40:92:dc:c6:2a:b9:b7:d7:4c:83:98:3a:
                    21:35:8f:40:fa:84:b9:95:f6:3f:16:ee:8d:3f:e4:
                    be:78:4a:32:44:56:a0:45:74:86:f3:21:81:66:dc:
                    9b:b3:12:8f:55:49:6a:11:ec:d2:d1:c5:57:d0:fe:
                    77:99:5d:d1:62:2e:28:a7:6d:a5:ad:ee:1f:da:1a:
                    f1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:38:07:11:05:FF:E7:B8:5D:1A:44:A1:60:C5:11:74:02:DA:4F:C9
            X509v3 Authority Key Identifier:
                keyid:0E:6F:D4:7D:90:5E:AC:8E:E5:AA:9D:2C:5C:3B:6A:40:75:52:D0:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/1/0E6FD47D905EAC8EE5AA9D2C5C3B6A407552D02B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E6FD47D905EAC8EE5AA9D2C5C3B6A407552D02B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/1/3230312e3138322e3137362e302f32322d3332203d3e20323637353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:d0:31:ae:74:50:c3:8f:61:f6:fe:9e:3e:c6:21:17:7e:64:
         0f:c8:56:a6:0b:43:62:f0:9d:f3:6f:48:fa:b4:6b:02:ed:fc:
         70:17:93:25:31:d9:a7:f1:95:da:dc:24:f3:18:1a:21:cd:2b:
         dd:6a:63:5e:4f:6a:9c:f1:d1:9d:e5:36:2a:94:00:55:22:c3:
         95:2c:84:63:ec:5d:b0:85:b2:b5:fb:e0:0d:6d:18:9b:33:42:
         07:6e:b9:68:d0:8b:09:88:31:1c:af:09:77:30:45:77:7c:6e:
         cd:ff:2e:8f:df:cd:0f:7b:5d:f6:c4:6b:46:4b:03:b8:7f:3e:
         74:89:08:e3:2a:34:58:f2:93:a8:84:fb:01:4e:f1:31:c6:d4:
         40:c3:52:2d:f1:a6:39:c1:00:4a:fe:65:2e:ca:1a:d3:ec:e7:
         19:9c:d9:96:46:b1:52:8c:ac:5b:10:40:4b:52:e0:60:0f:56:
         87:81:d0:85:8f:a0:8f:d7:72:14:cb:97:92:19:47:d9:c4:af:
         33:65:60:34:ff:51:52:ec:43:b4:ce:2b:c9:85:fc:30:d6:6f:
         b9:fe:24:cb:9c:b5:29:ed:08:51:c7:6a:17:93:d5:4c:52:4f:
         e9:3f:c4:7d:cb:41:67:19:4b:a8:c3:6b:b2:e4:8e:80:82:c7:
         23:83:86:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:34 2024 by rpki-client on console-ams.rpki-client.org