Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/1/3138312e3233322e3234302e302f32322d3232203d3e20323731353530.roa
File:                     3138312e3233322e3234302e302f32322d3232203d3e20323731353530.roa (raw, json)
Hash identifier:          OUWgJyByDAN3wKWN6wDPMUS0qFOYC3iSOGWd+FtSX0g=
Subject key identifier:   D0:54:86:85:41:8E:68:9D:B6:BA:B6:4A:F9:19:59:7D:AD:15:C7:E5
Certificate issuer:       /CN=5D88506E9E4CEFFA0495A2DC722396EE08FC529D
Certificate serial:       30A5820586C9EB7EFED4C47B3FEE7155250745A6
Authority key identifier: 5D:88:50:6E:9E:4C:EF:FA:04:95:A2:DC:72:23:96:EE:08:FC:52:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D88506E9E4CEFFA0495A2DC722396EE08FC529D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/1/3138312e3233322e3234302e302f32322d3232203d3e20323731353530.roa
Signing time:             Wed 03 Apr 2024 18:39:00 +0000
ROA not before:           Wed 03 Apr 2024 18:34:00 +0000
ROA not after:            Wed 02 Apr 2025 18:39:00 +0000
asID:                     271550
IP address blocks:        181.232.240.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/1/5D88506E9E4CEFFA0495A2DC722396EE08FC529D.crl
                          rsync://rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/1/5D88506E9E4CEFFA0495A2DC722396EE08FC529D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D88506E9E4CEFFA0495A2DC722396EE08FC529D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 13:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:a5:82:05:86:c9:eb:7e:fe:d4:c4:7b:3f:ee:71:55:25:07:45:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D88506E9E4CEFFA0495A2DC722396EE08FC529D
        Validity
            Not Before: Apr  3 18:34:00 2024 GMT
            Not After : Apr  2 18:39:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0c:5b:62:25:fc:3d:eb:cd:bc:1b:f0:25:9d:
                    bb:a9:15:ce:4c:74:3e:9a:e9:7e:bb:bd:17:c4:49:
                    ce:a6:99:39:7c:bb:09:4a:b3:e6:b8:1b:4c:5e:5f:
                    66:6f:2e:dc:84:0e:5c:14:ee:08:ea:98:5b:b9:1c:
                    9b:62:55:d8:2f:27:a1:05:55:28:70:95:e5:22:bf:
                    c7:05:82:59:20:2c:7b:9a:50:9d:ae:5e:9e:d0:f1:
                    06:d7:92:83:3d:07:5a:29:5c:08:12:57:70:5c:6b:
                    ec:32:e5:70:d2:c7:9b:0a:a9:bc:5b:6c:d9:1d:29:
                    92:14:d2:2e:fa:e9:ac:1f:67:ff:88:81:6e:4a:eb:
                    d7:66:27:15:0d:c5:b0:4b:b0:78:57:bf:94:18:c3:
                    57:3c:ce:9f:11:0f:d9:aa:72:24:ba:b2:c2:5f:1b:
                    ab:9f:91:4e:ee:51:ed:de:4b:6c:c3:44:b5:29:84:
                    ea:79:35:37:4e:10:3c:fa:69:9a:c0:b7:76:ae:93:
                    0c:7d:a0:67:ac:a0:b4:0e:b8:27:e9:b4:d0:47:58:
                    5c:5f:9d:1e:ee:de:25:14:1b:71:c5:14:05:82:86:
                    6d:6d:6e:74:d0:5a:de:ab:cb:b2:7d:30:02:74:e7:
                    fa:89:c0:51:e2:03:d7:eb:ce:39:da:1e:0a:3b:95:
                    7d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:54:86:85:41:8E:68:9D:B6:BA:B6:4A:F9:19:59:7D:AD:15:C7:E5
            X509v3 Authority Key Identifier:
                keyid:5D:88:50:6E:9E:4C:EF:FA:04:95:A2:DC:72:23:96:EE:08:FC:52:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/1/5D88506E9E4CEFFA0495A2DC722396EE08FC529D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D88506E9E4CEFFA0495A2DC722396EE08FC529D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/1/3138312e3233322e3234302e302f32322d3232203d3e20323731353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:d1:96:4b:44:ea:5c:36:f0:4a:73:87:52:02:27:2a:f2:b4:
         20:e8:50:44:59:85:35:71:9e:87:87:35:f7:77:57:2d:24:5d:
         ac:40:3c:0d:00:2d:c8:09:41:f7:aa:cb:de:7a:8c:16:66:28:
         ad:ea:01:a5:85:eb:92:60:16:ed:76:09:ba:84:ce:7d:f7:22:
         84:3b:f1:73:6e:83:39:2c:e6:af:5e:15:98:82:a9:e5:6e:72:
         84:57:85:c9:41:3c:fa:6d:73:99:ba:4c:46:00:19:b3:13:37:
         c6:5c:2d:4f:28:f6:dd:ff:81:fb:46:12:19:57:ea:c1:4d:66:
         77:92:17:24:dc:b1:51:1c:8f:35:e9:71:ec:77:ae:17:ad:4f:
         2d:a2:b3:2a:f1:9b:9f:07:95:ff:7a:83:74:e2:27:6c:17:be:
         ae:b5:70:f4:f0:96:66:8f:24:de:6b:63:23:62:76:fa:6a:11:
         43:a3:9f:1c:4a:8a:1d:99:fe:98:93:ad:a7:24:19:b6:50:90:
         7e:8b:05:c8:c5:dc:3f:31:14:0c:8e:a5:d4:c1:c0:99:c5:df:
         53:e1:7f:aa:31:ed:6e:76:0a:a2:ec:43:ad:b3:75:5a:52:37:
         26:23:04:fe:b6:b4:c4:25:99:e9:c8:d5:f9:91:b4:58:02:06:
         62:04:a7:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:27:00 2024 by rpki-client on console-fra.rpki-client.org