Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/3230312e34392e3138322e302f32342d3234203d3e20323731343636.roa
File:                     3230312e34392e3138322e302f32342d3234203d3e20323731343636.roa (raw, json)
Hash identifier:          s78VpyPG9OUY/qCDzDw4gY3vrftF82DCn6be6wtuhSI=
Subject key identifier:   97:11:D8:CB:DD:E8:7D:EA:8D:61:57:94:A8:1A:27:CA:63:52:23:BD
Certificate issuer:       /CN=E8C82FC45003FEB00DB928E6AF419E57721933EC
Certificate serial:       2DBC6E6A388235CC427F3DB5CC171D4C239C97F7
Authority key identifier: E8:C8:2F:C4:50:03:FE:B0:0D:B9:28:E6:AF:41:9E:57:72:19:33:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/3230312e34392e3138322e302f32342d3234203d3e20323731343636.roa
Signing time:             Thu 04 Apr 2024 14:22:12 +0000
ROA not before:           Thu 04 Apr 2024 14:17:12 +0000
ROA not after:            Thu 03 Apr 2025 14:22:12 +0000
asID:                     271466
IP address blocks:        201.49.182.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.crl
                          rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:44:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:bc:6e:6a:38:82:35:cc:42:7f:3d:b5:cc:17:1d:4c:23:9c:97:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8C82FC45003FEB00DB928E6AF419E57721933EC
        Validity
            Not Before: Apr  4 14:17:12 2024 GMT
            Not After : Apr  3 14:22:12 2025 GMT
        Subject: CN=9711D8CBDDE87DEA8D615794A81A27CA635223BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:52:19:26:21:93:de:d2:90:8a:21:39:1b:d8:
                    f4:fc:2f:f1:f0:74:94:db:55:67:84:03:34:a7:eb:
                    57:6a:31:8c:97:0a:77:64:d9:05:d5:66:93:fa:7a:
                    16:42:71:71:b1:82:4c:78:9e:a4:b1:28:91:0e:98:
                    14:18:10:db:25:ca:4c:4d:a5:90:67:10:1a:53:0f:
                    60:54:41:75:c2:b5:9a:11:90:70:06:e6:9f:f9:7d:
                    6b:ec:c9:db:71:3c:fc:60:a0:4b:c5:ac:20:d3:d4:
                    07:66:33:9e:18:b8:51:14:73:fb:fb:aa:64:04:16:
                    37:f6:93:1c:a1:b2:fe:c4:5f:2a:33:56:b5:12:31:
                    d3:5c:b8:04:b4:2d:50:2d:0a:8c:ea:3b:2f:e7:8c:
                    07:12:b8:93:c5:6f:62:fb:f8:99:93:cb:76:9b:53:
                    4b:d2:b5:f4:65:21:e0:d9:ac:ce:10:8b:87:25:59:
                    13:98:24:dd:cf:50:8b:3e:27:92:b9:cd:07:05:09:
                    3f:f6:84:75:a6:a4:0d:ab:4d:77:23:80:3b:a9:d3:
                    1d:8c:e7:d4:67:b8:8e:12:8c:02:e8:b2:e5:69:a2:
                    bd:f0:3e:2d:5a:a1:ef:0b:c9:52:57:9d:08:8d:3e:
                    a7:2a:43:40:27:f4:c4:20:b1:cc:55:c1:e8:9d:fa:
                    66:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:11:D8:CB:DD:E8:7D:EA:8D:61:57:94:A8:1A:27:CA:63:52:23:BD
            X509v3 Authority Key Identifier:
                keyid:E8:C8:2F:C4:50:03:FE:B0:0D:B9:28:E6:AF:41:9E:57:72:19:33:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/3230312e34392e3138322e302f32342d3234203d3e20323731343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:d8:eb:1b:e2:46:1d:75:4a:45:82:2a:ab:a1:e1:1c:81:e9:
         4c:c0:f8:5f:06:0a:8a:ab:de:1d:dc:4f:f9:fe:ea:cd:14:4b:
         cd:8f:4a:1d:d4:ca:e8:c8:66:53:df:21:87:f5:f0:df:a3:b7:
         2b:48:fe:fe:43:4c:34:ab:ef:6e:8f:2b:4c:42:29:d9:15:a4:
         b5:4e:9d:69:dc:d3:2c:c2:09:96:cb:a7:6e:7e:60:c4:46:a2:
         1e:ca:df:09:16:29:08:e8:d6:20:8b:dd:cb:61:f1:b9:db:92:
         1f:20:ac:3d:13:a3:5b:95:95:ff:eb:28:75:7e:c4:cb:7a:a6:
         9a:80:a3:67:6d:c7:3c:76:6a:7a:f7:85:50:4a:be:80:b3:34:
         48:db:8d:42:a2:18:d4:d5:7c:74:2f:f8:3f:c8:10:1f:be:4f:
         33:5f:f1:02:5a:dd:b6:7a:e3:b1:28:05:ee:eb:07:fd:5d:2e:
         84:0e:b3:d5:14:ab:77:0a:29:68:21:25:76:22:11:3b:cf:43:
         90:a1:61:12:b2:79:8c:ef:1a:4a:fe:d6:b1:be:5a:76:fa:1f:
         a7:b9:40:92:c4:23:15:65:d1:f5:9e:ac:e9:7b:11:69:6d:ea:
         04:45:6b:68:3d:8a:d2:6b:96:7e:2e:26:67:08:02:20:4f:93:
         57:16:e9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:08 2024 by rpki-client on console-ams.rpki-client.org