Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3K7adNY6QLXq8CAHJyRfhBJmVC93XWBnvkcHP2smgFkT/1/3138312e3139312e3138302e302f32342d3234203d3e20323637343334.roa
File:                     3138312e3139312e3138302e302f32342d3234203d3e20323637343334.roa (raw, json)
Hash identifier:          22OyZzfJrsgE2ok3h24yhbpU8XD++f7k5naz7gfTMbI=
Subject key identifier:   EB:8B:9C:E3:DA:53:EE:6C:1E:35:38:0C:49:4C:72:87:49:C3:64:1E
Certificate issuer:       /CN=0FC1691CE2723B06910C8870A43212BD77573423
Certificate serial:       10EA45661ADD2F4CD7E23A23FED282A71C9DF0E3
Authority key identifier: 0F:C1:69:1C:E2:72:3B:06:91:0C:88:70:A4:32:12:BD:77:57:34:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FC1691CE2723B06910C8870A43212BD77573423.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3K7adNY6QLXq8CAHJyRfhBJmVC93XWBnvkcHP2smgFkT/1/3138312e3139312e3138302e302f32342d3234203d3e20323637343334.roa
Signing time:             Wed 03 Apr 2024 23:39:32 +0000
ROA not before:           Wed 03 Apr 2024 23:34:32 +0000
ROA not after:            Wed 02 Apr 2025 23:39:32 +0000
asID:                     267434
IP address blocks:        181.191.180.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3K7adNY6QLXq8CAHJyRfhBJmVC93XWBnvkcHP2smgFkT/1/0FC1691CE2723B06910C8870A43212BD77573423.crl
                          rsync://rpki-repo.registro.br/repo/3K7adNY6QLXq8CAHJyRfhBJmVC93XWBnvkcHP2smgFkT/1/0FC1691CE2723B06910C8870A43212BD77573423.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FC1691CE2723B06910C8870A43212BD77573423.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 20:15:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:ea:45:66:1a:dd:2f:4c:d7:e2:3a:23:fe:d2:82:a7:1c:9d:f0:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FC1691CE2723B06910C8870A43212BD77573423
        Validity
            Not Before: Apr  3 23:34:32 2024 GMT
            Not After : Apr  2 23:39:32 2025 GMT
        Subject: CN=EB8B9CE3DA53EE6C1E35380C494C728749C3641E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7e:92:70:16:58:32:f9:5b:28:ee:c2:dc:3a:
                    a0:d4:2f:15:33:02:8a:d3:18:dc:4c:39:07:5e:71:
                    f8:42:50:6d:4b:08:ef:45:13:d9:4a:24:3f:57:6a:
                    8d:87:3f:9d:94:01:8b:7f:09:fb:ef:cf:84:a0:a2:
                    e0:56:5c:72:b6:97:a4:e2:46:2e:98:48:80:0c:2e:
                    ed:df:c1:23:3a:3d:18:9d:a9:8f:af:98:44:39:c7:
                    f5:38:4c:e7:0d:57:03:7c:47:8a:a5:41:f3:5b:ca:
                    b8:e1:1d:af:66:a0:31:f3:7c:44:be:f2:92:28:ba:
                    09:14:31:a7:83:de:09:e6:7e:18:fa:38:a4:a5:96:
                    a1:86:38:71:cd:c1:cf:c1:5e:c9:08:54:30:bd:bd:
                    4b:35:dd:f8:83:df:c5:57:11:88:4c:6a:67:ae:61:
                    57:b7:2b:04:6c:e6:53:15:3d:e3:6e:ac:4d:65:1d:
                    61:97:57:e9:ea:1e:11:ac:e3:17:76:01:d4:f7:1d:
                    06:e4:f1:63:de:8b:11:a2:78:78:f0:ca:64:b2:de:
                    c2:ae:51:55:d7:c6:6b:df:46:63:f1:6d:53:d8:10:
                    8b:91:ed:2d:e1:c0:05:9c:af:32:3c:e6:cc:50:87:
                    57:47:9d:b6:f4:15:38:16:4c:59:a7:be:c1:fc:33:
                    b9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:8B:9C:E3:DA:53:EE:6C:1E:35:38:0C:49:4C:72:87:49:C3:64:1E
            X509v3 Authority Key Identifier:
                keyid:0F:C1:69:1C:E2:72:3B:06:91:0C:88:70:A4:32:12:BD:77:57:34:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3K7adNY6QLXq8CAHJyRfhBJmVC93XWBnvkcHP2smgFkT/1/0FC1691CE2723B06910C8870A43212BD77573423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FC1691CE2723B06910C8870A43212BD77573423.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3K7adNY6QLXq8CAHJyRfhBJmVC93XWBnvkcHP2smgFkT/1/3138312e3139312e3138302e302f32342d3234203d3e20323637343334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:b7:95:35:53:f3:a0:ff:ac:bf:fe:65:04:a7:66:80:aa:de:
         7c:53:f0:17:71:4c:b7:d7:6a:4c:fc:77:04:c1:7b:44:60:be:
         c0:fb:b3:22:e8:51:57:b3:0f:ab:d3:d4:02:6e:e8:5c:61:68:
         a8:5c:b3:26:5c:bb:69:e5:36:87:5b:4e:30:ae:60:c5:44:81:
         58:21:f3:f5:10:01:3c:a3:d0:5c:20:0d:ad:2a:f5:57:cf:69:
         09:5d:d0:16:f5:a7:a1:93:e6:ea:6d:f5:ac:1a:cc:a1:1c:f5:
         55:3f:4b:1d:44:91:93:1c:e0:62:4d:0a:02:f0:de:4a:b8:15:
         f9:73:3a:9c:ac:4e:f6:f2:bf:96:a2:33:7a:f1:7e:44:d5:f0:
         bf:e8:a9:90:0a:c9:ae:99:e7:76:89:f3:1c:2b:77:0f:d5:cd:
         e6:fe:dd:18:50:b8:9e:a5:a1:fd:4b:6f:f9:98:9a:5d:33:96:
         12:7e:84:a3:ab:cf:4d:0d:25:d1:5f:c3:95:32:e3:5c:4e:9d:
         3b:c9:bf:b9:9a:da:df:c6:3a:b7:e5:63:70:be:cb:0d:94:7e:
         93:f2:ba:50:5a:ed:82:f9:1f:0a:3e:88:42:77:97:20:8d:5a:
         70:19:4c:b3:ad:e4:7e:98:d1:d5:35:b6:03:ba:80:94:17:62:
         f1:31:b9:78
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUEOpFZhrdL0zX4joj/tKCpxyd8OMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEZDMTY5MUNFMjcyM0IwNjkxMEM4ODcwQTQzMjEyQkQ3
NzU3MzQyMzAeFw0yNDA0MDMyMzM0MzJaFw0yNTA0MDIyMzM5MzJaMDMxMTAvBgNV
BAMTKEVCOEI5Q0UzREE1M0VFNkMxRTM1MzgwQzQ5NEM3Mjg3NDlDMzY0MUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDafpJwFlgy+Vso7sLcOqDULxUz
AorTGNxMOQdecfhCUG1LCO9FE9lKJD9Xao2HP52UAYt/Cfvvz4SgouBWXHK2l6Ti
Ri6YSIAMLu3fwSM6PRidqY+vmEQ5x/U4TOcNVwN8R4qlQfNbyrjhHa9moDHzfES+
8pIougkUMaeD3gnmfhj6OKSllqGGOHHNwc/BXskIVDC9vUs13fiD38VXEYhMameu
YVe3KwRs5lMVPeNurE1lHWGXV+nqHhGs4xd2AdT3HQbk8WPeixGieHjwymSy3sKu
UVXXxmvfRmPxbVPYEIuR7S3hwAWcrzI85sxQh1dHnbb0FTgWTFmnvsH8M7nvAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU64uc49pT7mweNTgMSUxyh0nDZB4wHwYDVR0j
BBgwFoAUD8FpHOJyOwaRDIhwpDISvXdXNCMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0s3YWROWTZRTFhxOENBSEp5UmZoQkptVkM5M1hXQm52a2NIUDJzbWdG
a1QvMS8wRkMxNjkxQ0UyNzIzQjA2OTEwQzg4NzBBNDMyMTJCRDc3NTczNDIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBGQzE2OTFDRTI3MjNCMDY5
MTBDODg3MEE0MzIxMkJENzc1NzM0MjMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNLN2FkTlk2UUxYcThDQUhKeVJmaEJKbVZDOTNYV0JudmtjSFAyc21nRmtULzEv
MzEzODMxMmUzMTM5MzEyZTMxMzgzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNzM0MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALW/tDANBgkqhkiG9w0BAQsFAAOCAQEAnreV
NVPzoP+sv/5lBKdmgKrefFPwF3FMt9dqTPx3BMF7RGC+wPuzIuhRV7MPq9PUAm7o
XGFoqFyzJly7aeU2h1tOMK5gxUSBWCHz9RABPKPQXCANrSr1V89pCV3QFvWnoZPm
6m31rBrMoRz1VT9LHUSRkxzgYk0KAvDeSrgV+XM6nKxO9vK/lqIzevF+RNXwv+ip
kArJrpnndonzHCt3D9XN5v7dGFC4nqWh/Utv+ZiaXTOWEn6Eo6vPTQ0l0V/DlTLj
XE6dO8m/uZra38Y6t+VjcL7LDZR+k/K6UFrtgvkfCj6IQneXII1acBlMs63kfpjR
1TW2A7qAlBdi8TG5eA==
-----END CERTIFICATE-----
Generated at Fri Jun 28 21:05:04 2024 by rpki-client on console-ams.rpki-client.org