Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/3230312e34392e3138332e302f32342d3234203d3e20323731343636.roa
File:                     3230312e34392e3138332e302f32342d3234203d3e20323731343636.roa (raw, json)
Hash identifier:          o25lxIzxcd4FiIIhzyBolDzOXrlQVN5xBgZZaQD3fS8=
Subject key identifier:   01:15:22:42:20:83:DE:13:79:7D:2A:7E:68:29:92:0B:79:67:5B:CF
Certificate issuer:       /CN=E8C82FC45003FEB00DB928E6AF419E57721933EC
Certificate serial:       010D8280A21F56E266432285A57A5AAB53D7CC7D
Authority key identifier: E8:C8:2F:C4:50:03:FE:B0:0D:B9:28:E6:AF:41:9E:57:72:19:33:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/3230312e34392e3138332e302f32342d3234203d3e20323731343636.roa
Signing time:             Thu 04 Apr 2024 14:22:12 +0000
ROA not before:           Thu 04 Apr 2024 14:17:12 +0000
ROA not after:            Thu 03 Apr 2025 14:22:12 +0000
asID:                     271466
IP address blocks:        201.49.183.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.crl
                          rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:82:80:a2:1f:56:e2:66:43:22:85:a5:7a:5a:ab:53:d7:cc:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8C82FC45003FEB00DB928E6AF419E57721933EC
        Validity
            Not Before: Apr  4 14:17:12 2024 GMT
            Not After : Apr  3 14:22:12 2025 GMT
        Subject: CN=011522422083DE13797D2A7E6829920B79675BCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6f:00:46:20:4c:cb:4f:47:a8:d0:22:06:9c:
                    50:e6:c1:6d:c2:33:32:6e:01:cf:15:bb:7b:3b:e1:
                    49:c8:f6:e1:25:66:17:01:f1:eb:40:e4:86:40:60:
                    e7:83:3e:77:34:59:72:ab:24:c9:c7:be:52:92:0b:
                    c1:0c:73:54:20:55:3b:1f:3e:bb:db:29:2c:f1:3c:
                    32:81:05:6e:5a:b4:17:f7:aa:55:31:83:eb:3b:a4:
                    3a:e1:4f:d4:1f:4d:79:a6:4b:05:21:ce:22:ad:dc:
                    d0:23:0c:9a:6d:20:b1:57:31:94:c7:55:ce:33:ff:
                    95:da:39:6e:f5:d6:bf:43:d7:dc:09:29:2b:ed:92:
                    02:4a:7c:46:03:5d:c1:e3:de:6d:4e:1d:8f:40:58:
                    e6:41:10:48:3f:15:29:c9:24:b1:cb:92:b3:63:a6:
                    04:0d:33:75:18:6b:2e:2b:39:8a:8f:90:1f:31:a0:
                    ff:88:aa:80:0a:b7:9f:df:4f:f9:64:ad:54:24:0f:
                    bf:73:31:8c:c9:c2:31:1a:1a:53:fd:e7:33:6f:ff:
                    b1:31:a4:37:9c:a4:99:54:07:06:95:64:34:af:e8:
                    64:bf:a5:4c:15:ee:34:34:8a:da:52:c7:00:41:7e:
                    4b:91:5f:a5:58:dc:28:98:99:de:3b:9d:21:54:15:
                    03:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:15:22:42:20:83:DE:13:79:7D:2A:7E:68:29:92:0B:79:67:5B:CF
            X509v3 Authority Key Identifier:
                keyid:E8:C8:2F:C4:50:03:FE:B0:0D:B9:28:E6:AF:41:9E:57:72:19:33:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/3230312e34392e3138332e302f32342d3234203d3e20323731343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:9e:6a:ae:ff:e3:ba:69:2b:52:0f:3c:61:fd:8d:2a:a2:dd:
         1c:17:74:12:e1:19:88:47:68:b7:ba:6a:6e:ff:92:0d:4b:8d:
         6f:cb:c9:7b:b3:3f:43:a6:61:0f:b2:22:2b:bd:ea:b2:b8:33:
         f3:d2:fa:45:7f:63:3c:9e:d6:57:b8:ea:21:26:9a:ea:c4:0d:
         ae:3d:6b:c3:10:06:49:44:22:11:9b:e8:ce:77:8e:85:73:48:
         38:94:f2:f2:88:8b:5e:98:c2:e8:7d:98:93:25:a6:53:5e:73:
         46:d8:9d:6c:5d:d7:9f:78:0b:d9:c7:61:cc:da:27:c8:de:55:
         77:72:03:c5:d3:ee:8d:69:dc:75:51:47:96:0e:72:2b:fc:4b:
         e1:a6:aa:0d:42:89:63:28:a7:f8:c1:b6:ec:0a:fe:95:b0:82:
         57:38:49:31:11:5c:18:e7:0d:e1:8f:6e:be:64:19:48:6c:a4:
         28:3e:f3:4a:21:00:a5:b7:78:18:72:80:e9:da:65:e0:f1:7b:
         72:7b:6a:6f:ce:3b:cc:bf:99:2b:a9:55:7d:d4:5f:fa:9e:54:
         47:66:08:1d:41:41:87:a3:f8:04:bc:29:1d:6d:2c:ce:39:43:
         5c:68:72:15:51:be:74:e1:43:4f:ce:4e:01:3e:c4:7f:c0:eb:
         69:95:d0:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:52:38 2024 by rpki-client on console-ams.rpki-client.org