Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3K7adNY6QLXq8CAHJyRfhBJmVC93XWBnvkcHP2smgFkT/1/3138312e3139312e3138322e302f32342d3234203d3e20323637343334.roa
File:                     3138312e3139312e3138322e302f32342d3234203d3e20323637343334.roa (raw, json)
Hash identifier:          7Oz+1khUZwB33s8FyaGpYM/OM//HV90QEp52GLtIwn8=
Subject key identifier:   30:A3:77:9C:51:59:72:09:E2:70:AE:AD:1B:2C:32:E4:4B:35:CA:EE
Certificate issuer:       /CN=0FC1691CE2723B06910C8870A43212BD77573423
Certificate serial:       311ECB62620B4263B6803F234671A3326737AA71
Authority key identifier: 0F:C1:69:1C:E2:72:3B:06:91:0C:88:70:A4:32:12:BD:77:57:34:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FC1691CE2723B06910C8870A43212BD77573423.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3K7adNY6QLXq8CAHJyRfhBJmVC93XWBnvkcHP2smgFkT/1/3138312e3139312e3138322e302f32342d3234203d3e20323637343334.roa
Signing time:             Wed 03 Apr 2024 23:39:32 +0000
ROA not before:           Wed 03 Apr 2024 23:34:32 +0000
ROA not after:            Wed 02 Apr 2025 23:39:32 +0000
asID:                     267434
IP address blocks:        181.191.182.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3K7adNY6QLXq8CAHJyRfhBJmVC93XWBnvkcHP2smgFkT/1/0FC1691CE2723B06910C8870A43212BD77573423.crl
                          rsync://rpki-repo.registro.br/repo/3K7adNY6QLXq8CAHJyRfhBJmVC93XWBnvkcHP2smgFkT/1/0FC1691CE2723B06910C8870A43212BD77573423.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FC1691CE2723B06910C8870A43212BD77573423.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 20:15:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:1e:cb:62:62:0b:42:63:b6:80:3f:23:46:71:a3:32:67:37:aa:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FC1691CE2723B06910C8870A43212BD77573423
        Validity
            Not Before: Apr  3 23:34:32 2024 GMT
            Not After : Apr  2 23:39:32 2025 GMT
        Subject: CN=30A3779C51597209E270AEAD1B2C32E44B35CAEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:98:4f:4d:f7:a1:d7:60:67:3c:d9:98:5e:29:
                    61:8e:4e:e9:93:81:a5:59:ef:bb:8b:f9:32:15:d1:
                    f0:eb:b3:b4:a2:26:00:1b:33:30:20:2f:53:7d:9f:
                    59:a3:17:06:4d:8c:1c:59:40:01:7b:7d:89:ed:d1:
                    9c:fc:be:73:f8:ef:e3:b2:d1:76:56:25:69:19:43:
                    48:19:97:6a:0d:de:66:bb:70:2c:d0:1e:e5:54:0f:
                    db:2d:23:2b:5c:46:a5:e5:a2:72:82:92:e0:f3:4f:
                    e7:ce:2b:e5:fe:87:fd:99:ac:37:ad:ad:e8:2b:6f:
                    a2:b7:03:09:5f:f5:f0:61:f0:97:cf:89:3a:41:b0:
                    39:c3:7b:2d:d4:b6:d5:08:2e:d0:a3:a4:40:21:8e:
                    74:b2:d1:4f:79:7b:87:a6:d9:3c:b3:2e:03:eb:a0:
                    1e:41:d8:6f:eb:18:18:85:18:59:4b:ba:4c:22:4c:
                    1f:48:17:da:43:fa:b9:d4:b6:23:0f:dd:f6:96:4a:
                    c5:75:21:46:00:bd:f0:07:46:72:b7:1d:f1:58:1e:
                    d5:c0:54:ef:41:d7:fe:dc:23:a8:a2:97:44:e3:43:
                    a7:d1:b5:93:cf:37:d1:5c:4e:23:74:7b:45:94:1f:
                    0e:dc:c9:53:79:ed:86:08:e6:88:b0:57:f2:a8:42:
                    50:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:A3:77:9C:51:59:72:09:E2:70:AE:AD:1B:2C:32:E4:4B:35:CA:EE
            X509v3 Authority Key Identifier:
                keyid:0F:C1:69:1C:E2:72:3B:06:91:0C:88:70:A4:32:12:BD:77:57:34:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3K7adNY6QLXq8CAHJyRfhBJmVC93XWBnvkcHP2smgFkT/1/0FC1691CE2723B06910C8870A43212BD77573423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FC1691CE2723B06910C8870A43212BD77573423.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3K7adNY6QLXq8CAHJyRfhBJmVC93XWBnvkcHP2smgFkT/1/3138312e3139312e3138322e302f32342d3234203d3e20323637343334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:1c:31:be:71:9e:e0:e7:14:6f:ef:18:de:6d:1a:df:95:2d:
         9b:70:f3:5b:89:c7:5c:2c:da:43:9f:8f:b6:fb:6a:2a:d5:07:
         a9:14:75:37:ad:b3:b2:4f:62:ca:8f:70:e2:eb:69:e6:1b:1c:
         b1:36:ee:76:02:0b:c5:a7:ae:45:28:c4:68:bf:de:5d:0a:31:
         fa:c7:f2:16:52:19:6d:41:dc:d4:cd:6d:44:27:6b:b0:7a:20:
         de:83:af:87:2d:92:50:b7:1a:cc:61:5d:12:a7:b2:9f:f0:77:
         f9:c1:50:34:bf:e1:02:bc:1b:b6:48:6c:d4:19:1b:af:5e:cc:
         b2:e0:cb:bc:c4:23:b8:f4:df:12:05:68:17:dd:f1:b8:4c:7e:
         fe:31:5c:fb:1f:48:b9:4c:76:34:f7:75:6f:bc:bb:5f:55:be:
         15:17:3a:cb:3d:3d:cc:83:09:2e:2d:ca:74:e1:32:9b:5e:3c:
         f2:48:c1:1a:e9:62:39:31:de:74:2e:a2:43:91:75:49:19:8f:
         b4:c7:51:24:41:71:87:96:a8:10:f7:62:d6:23:7e:3c:79:a4:
         01:8e:87:95:aa:cb:50:30:0c:98:5d:40:dc:eb:b6:36:6a:9a:
         7d:63:b4:c6:0f:84:6e:37:a4:94:cb:6c:ef:10:73:a2:e9:2e:
         79:32:76:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 21:05:04 2024 by rpki-client on console-ams.rpki-client.org