Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/1/3138312e3233322e3234302e302f32322d3234203d3e20323731353530.roa
File:                     3138312e3233322e3234302e302f32322d3234203d3e20323731353530.roa (raw, json)
Hash identifier:          QrL166OCfQExw0a3Bi+A0Dat/ALN/Lin1j0tOoeSV50=
Subject key identifier:   E0:A3:2F:EA:44:A5:E2:43:88:90:05:8A:FA:5A:1A:6B:F5:2C:C5:56
Certificate issuer:       /CN=5D88506E9E4CEFFA0495A2DC722396EE08FC529D
Certificate serial:       54B7AA3B04A8F34BD132CA4555BE64C4D3C6152D
Authority key identifier: 5D:88:50:6E:9E:4C:EF:FA:04:95:A2:DC:72:23:96:EE:08:FC:52:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D88506E9E4CEFFA0495A2DC722396EE08FC529D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/1/3138312e3233322e3234302e302f32322d3234203d3e20323731353530.roa
Signing time:             Wed 03 Apr 2024 18:39:00 +0000
ROA not before:           Wed 03 Apr 2024 18:34:00 +0000
ROA not after:            Wed 02 Apr 2025 18:39:00 +0000
asID:                     271550
IP address blocks:        181.232.240.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/1/5D88506E9E4CEFFA0495A2DC722396EE08FC529D.crl
                          rsync://rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/1/5D88506E9E4CEFFA0495A2DC722396EE08FC529D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D88506E9E4CEFFA0495A2DC722396EE08FC529D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 13:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:b7:aa:3b:04:a8:f3:4b:d1:32:ca:45:55:be:64:c4:d3:c6:15:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D88506E9E4CEFFA0495A2DC722396EE08FC529D
        Validity
            Not Before: Apr  3 18:34:00 2024 GMT
            Not After : Apr  2 18:39:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:fa:b0:89:f6:98:2f:26:76:7c:79:19:c9:55:
                    53:17:b3:3f:ee:a8:7a:dd:a0:b9:9b:4a:e2:34:ba:
                    52:4e:5d:0a:90:b8:68:98:40:77:96:3d:cf:9b:c4:
                    61:96:f3:ab:41:83:9f:bb:47:8b:c7:9b:41:4c:e8:
                    a4:72:93:2e:09:75:97:22:35:6b:2c:a4:4f:b4:f3:
                    67:60:3b:44:1b:0d:18:99:a6:f9:6e:70:13:26:76:
                    fa:e0:39:02:fd:e0:7b:3a:37:d4:b1:e4:5a:bb:91:
                    74:69:50:57:2b:4d:2b:ec:3d:96:72:d6:26:a4:7c:
                    e3:4f:3e:6f:15:18:76:32:1d:6e:5b:35:65:71:05:
                    10:9d:55:82:d5:c7:25:b4:2d:e2:8d:0e:38:ca:28:
                    f2:b6:29:4b:b6:14:09:1a:4b:ec:1a:38:8b:1c:20:
                    6c:f4:57:10:87:00:c8:2a:45:a8:c6:78:df:dc:3f:
                    f2:c6:da:4e:e7:c1:f6:bd:d1:08:1a:a8:42:1d:29:
                    88:f5:38:df:3a:5a:07:e5:4e:4b:d2:d5:5e:95:e5:
                    aa:ee:f4:17:cd:d2:6c:96:cb:e6:ac:12:87:be:f3:
                    e4:47:10:b7:3f:9c:6c:f1:df:96:6c:31:0c:ac:e5:
                    a0:7c:a6:f8:dd:64:60:d4:1b:e2:1d:8f:ce:22:df:
                    d0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:A3:2F:EA:44:A5:E2:43:88:90:05:8A:FA:5A:1A:6B:F5:2C:C5:56
            X509v3 Authority Key Identifier:
                keyid:5D:88:50:6E:9E:4C:EF:FA:04:95:A2:DC:72:23:96:EE:08:FC:52:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/1/5D88506E9E4CEFFA0495A2DC722396EE08FC529D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D88506E9E4CEFFA0495A2DC722396EE08FC529D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/1/3138312e3233322e3234302e302f32322d3234203d3e20323731353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:83:4a:ed:69:7d:09:71:9c:c3:bb:f5:c6:5e:e9:07:4c:79:
         41:72:d8:eb:c8:ab:fc:03:9b:b8:17:3f:d1:b7:09:b7:d9:66:
         4c:e8:5d:43:d1:cf:b3:af:b1:ca:89:fa:df:ae:a9:3b:29:de:
         c5:42:f2:3b:ea:76:99:ec:65:aa:6d:94:37:38:a5:3b:4d:41:
         9b:a0:e4:01:62:cd:89:fe:40:96:f6:0f:ad:a3:9a:a5:ec:91:
         ec:d7:db:2b:fd:79:ff:dc:d5:4c:d0:f9:21:1d:51:3b:fb:64:
         55:a5:03:34:ad:b7:85:31:2f:b4:8b:46:e2:6d:f6:36:9d:f4:
         28:85:b7:4f:0c:ce:7a:17:4a:ce:97:eb:f7:72:6e:53:7c:9d:
         8f:a7:bc:53:57:d0:3e:77:bb:c0:46:48:42:82:5c:a5:38:ed:
         48:7b:b4:d0:e7:ef:c3:05:c0:5c:bc:20:f0:ab:55:71:17:51:
         fe:68:45:ba:bb:91:6b:3f:15:eb:f7:b3:2e:df:35:e3:5b:ef:
         99:68:06:5a:d3:34:9d:1c:e9:9b:64:b2:4c:2a:38:e3:4a:26:
         66:77:25:93:f3:b1:26:b7:f5:a6:b4:6c:4e:1e:55:d9:82:1e:
         c0:a5:27:2f:b6:55:e0:c2:76:9e:87:3a:33:f4:50:0b:82:86:
         04:93:58:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:27:01 2024 by rpki-client on console-fra.rpki-client.org