Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/3138312e3233322e3133362e302f32322d3234203d3e20323731333535.roa
File:                     3138312e3233322e3133362e302f32322d3234203d3e20323731333535.roa (raw, json)
Hash identifier:          jXWBDLiYB1m25FMwuM+A/KotQrDbMeAmlT0ztnJgTgw=
Subject key identifier:   7C:63:70:B9:C9:7D:09:09:AC:94:B6:51:FE:6C:99:94:A7:92:87:22
Certificate issuer:       /CN=B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391
Certificate serial:       26E2304BA80E2E2D2E7A8FED87DABE8D2C31B596
Authority key identifier: B0:9A:72:F7:DA:A1:90:5E:0B:89:C7:D8:FE:A0:3D:3E:21:E8:53:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/3138312e3233322e3133362e302f32322d3234203d3e20323731333535.roa
Signing time:             Fri 22 Nov 2024 23:10:21 +0000
ROA not before:           Fri 22 Nov 2024 23:05:21 +0000
ROA not after:            Fri 21 Nov 2025 23:10:21 +0000
asID:                     271355
IP address blocks:        181.232.136.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.crl
                          rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Nov 2024 14:45:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:e2:30:4b:a8:0e:2e:2d:2e:7a:8f:ed:87:da:be:8d:2c:31:b5:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391
        Validity
            Not Before: Nov 22 23:05:21 2024 GMT
            Not After : Nov 21 23:10:21 2025 GMT
        Subject: CN=7C6370B9C97D0909AC94B651FE6C9994A7928722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3a:89:49:3d:68:b9:ba:29:f5:cb:f1:b0:c0:
                    7c:de:c4:c4:b8:24:44:89:68:b7:15:0a:6a:64:3a:
                    f2:e7:87:9f:0a:1f:36:91:b1:7d:32:f5:4d:ac:83:
                    8e:53:32:68:b5:5e:1b:03:38:45:b6:1d:5f:3a:5a:
                    d8:08:c8:4c:47:ab:70:ae:b8:2f:28:79:2f:b7:42:
                    49:be:86:dc:86:a8:d4:ac:a5:5b:27:cd:72:1d:76:
                    cf:71:5e:5f:bf:94:ab:82:5b:b3:0a:bb:89:94:50:
                    97:40:91:83:d5:fb:3f:2f:48:14:af:0c:a3:a4:30:
                    8f:b5:cd:07:b6:22:6a:1d:b1:a5:1f:42:39:d8:07:
                    70:c5:1b:e3:c2:f8:cb:e6:53:9c:38:c7:bd:d7:84:
                    ea:0b:81:01:e5:b3:fc:aa:35:6b:2e:b3:fc:9e:de:
                    06:bb:be:a9:e1:dd:24:6e:38:4c:cd:85:90:f9:a8:
                    d5:ad:1c:c5:ff:fc:0c:e4:fa:93:29:81:ac:31:e8:
                    b4:88:97:b5:f0:13:ee:4e:9b:bd:bc:41:bd:67:af:
                    44:85:5d:cd:39:f2:23:94:8d:1a:e0:e0:58:d0:45:
                    4a:c8:62:6f:b7:40:04:e8:57:62:23:f8:78:7a:a7:
                    4b:07:7e:9e:1e:18:4f:a0:4e:52:5e:9d:be:55:80:
                    24:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:63:70:B9:C9:7D:09:09:AC:94:B6:51:FE:6C:99:94:A7:92:87:22
            X509v3 Authority Key Identifier:
                keyid:B0:9A:72:F7:DA:A1:90:5E:0B:89:C7:D8:FE:A0:3D:3E:21:E8:53:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/3138312e3233322e3133362e302f32322d3234203d3e20323731333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:2b:ae:c4:d7:fd:2f:f0:67:53:e6:c0:74:60:1d:a1:f0:c6:
         f6:28:4e:56:27:d7:d7:49:22:22:cf:6f:ed:19:41:66:c3:38:
         ab:e6:67:df:81:5c:77:5b:8d:75:4a:36:5c:e9:be:a4:04:9b:
         5e:d1:a6:f2:69:c8:58:a6:af:78:ae:b8:c1:ac:44:15:cc:2d:
         f0:52:55:b5:de:29:0d:5a:7d:51:a2:01:5c:33:01:e6:88:26:
         2c:3d:cc:8c:05:a9:df:53:33:af:50:c4:d6:d0:04:3c:f1:22:
         10:d4:01:8e:e4:84:87:77:a6:98:64:1c:16:1f:0a:ca:fe:93:
         03:83:15:40:51:18:6d:1b:93:d5:fe:22:9e:67:50:04:28:6a:
         e5:8d:93:97:40:8b:3c:3a:30:f0:df:db:19:51:07:49:ea:ac:
         30:99:f6:8a:16:9a:97:cc:e1:65:20:aa:91:bf:da:c9:7c:b8:
         62:4b:90:e6:49:e4:91:64:2e:19:09:76:7f:a2:11:fb:a2:e3:
         d0:7f:bf:41:c3:23:55:b0:fa:40:d7:72:a4:a0:fd:fd:d7:57:
         cf:41:9c:11:d8:c8:19:a5:da:db:b9:45:90:08:50:23:e4:d0:
         6e:12:47:e9:3a:51:98:03:28:49:75:e0:33:0b:52:86:76:9f:
         c9:04:4e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 14:55:08 2024 by rpki-client on console-fra.rpki-client.org