Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/3136382e3233322e3138312e302f32342d3234203d3e20323633353633.roa
File:                     3136382e3233322e3138312e302f32342d3234203d3e20323633353633.roa (raw, json)
Hash identifier:          zbgAwtel2vYhVlriVanBMBQih1TMpUACoVnrnoV5P88=
Subject key identifier:   27:DE:C6:9D:9A:79:3F:2D:01:86:2F:A6:95:2D:D3:2B:1C:EE:7C:3B
Certificate issuer:       /CN=8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7
Certificate serial:       7F1C8ADEC39CA3E93B326CABDA996EFBB0398BDE
Authority key identifier: 8E:AE:8D:1A:E6:A6:86:9C:FE:54:E3:74:20:1A:54:F2:E0:93:4E:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/3136382e3233322e3138312e302f32342d3234203d3e20323633353633.roa
Signing time:             Thu 04 Apr 2024 13:58:04 +0000
ROA not before:           Thu 04 Apr 2024 13:53:04 +0000
ROA not after:            Thu 03 Apr 2025 13:58:04 +0000
asID:                     263563
IP address blocks:        168.232.181.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.crl
                          rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:1c:8a:de:c3:9c:a3:e9:3b:32:6c:ab:da:99:6e:fb:b0:39:8b:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7
        Validity
            Not Before: Apr  4 13:53:04 2024 GMT
            Not After : Apr  3 13:58:04 2025 GMT
        Subject: CN=27DEC69D9A793F2D01862FA6952DD32B1CEE7C3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:07:ac:6c:f7:ba:36:40:8e:46:2b:7c:87:43:
                    d7:70:0c:4f:b2:25:0d:8a:32:55:6b:e0:5a:37:3f:
                    58:54:26:1f:2e:ab:af:04:2d:1e:08:71:8c:a5:58:
                    5d:ce:5e:a4:21:e7:b9:9d:4b:eb:60:8e:34:cf:67:
                    79:e4:3e:d9:dd:c6:5f:8c:3b:37:d9:e5:0f:5c:fb:
                    43:9d:ab:fa:be:7a:66:da:7d:24:e2:ae:8f:35:44:
                    ba:47:f9:58:6b:7c:10:9d:aa:0e:10:1c:66:06:bd:
                    0d:49:b4:bc:98:b7:ab:df:a8:20:77:10:13:98:54:
                    06:3c:8f:cc:2b:30:50:5d:8a:a8:c3:4a:04:07:b0:
                    0f:ac:5f:14:09:06:a9:a2:f0:54:1e:65:97:05:74:
                    50:a5:00:80:c5:48:f8:66:81:78:00:5b:9e:00:f8:
                    29:b3:c6:14:7c:9c:67:c5:a8:f9:ac:05:14:2e:c6:
                    f6:f5:4e:4a:e8:00:9a:ac:33:b3:7d:ac:7a:b5:77:
                    1c:d6:11:d8:b9:83:02:ed:3a:ef:1a:44:d6:c5:6f:
                    72:f8:e9:fe:a1:00:bf:41:63:4f:67:ff:22:26:68:
                    5f:a2:31:46:1f:23:bc:c2:06:ce:ce:4f:c5:54:71:
                    47:17:b5:aa:ee:12:25:8c:e6:f3:bb:19:9c:51:57:
                    01:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:DE:C6:9D:9A:79:3F:2D:01:86:2F:A6:95:2D:D3:2B:1C:EE:7C:3B
            X509v3 Authority Key Identifier:
                keyid:8E:AE:8D:1A:E6:A6:86:9C:FE:54:E3:74:20:1A:54:F2:E0:93:4E:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/3136382e3233322e3138312e302f32342d3234203d3e20323633353633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:c2:ee:3a:d3:b1:0d:a1:90:24:b9:1d:a9:ca:0c:c5:ce:7d:
         ca:2d:1e:a4:be:8c:17:67:f8:01:57:82:43:a7:1f:36:a6:41:
         a0:c4:a6:d4:b5:fc:f4:9e:65:c0:26:ca:22:5a:2b:90:30:25:
         a8:61:ff:a5:01:58:f4:0a:00:a9:e5:53:f0:f3:e7:f6:24:b3:
         24:46:de:ed:09:b8:30:c7:f7:dd:1a:35:68:ce:fc:1e:b9:24:
         02:fd:9c:35:2b:9b:33:70:4a:9b:24:56:0c:c8:f0:67:a7:07:
         99:86:0e:09:9d:8b:57:1a:fb:6a:ca:07:56:e3:e1:b9:6e:32:
         f1:05:62:e3:e1:f4:46:13:42:09:b6:9a:6e:17:3e:5f:28:97:
         37:70:c3:6c:8e:cd:40:f3:f6:b2:50:3f:0a:e1:71:b2:91:ca:
         df:59:66:c6:e5:1c:df:59:a7:9a:19:4d:78:b0:db:14:f9:e7:
         fb:75:02:78:cf:52:35:47:e0:23:1a:d7:32:e0:a7:27:3a:e3:
         7d:65:14:24:b1:7b:3d:b3:af:6d:7d:7d:ae:3c:13:65:e6:2c:
         82:38:c7:bf:d6:13:39:e2:4e:58:c8:69:06:2d:0c:62:e8:1f:
         70:4e:13:63:be:67:cb:a0:68:39:3f:4f:6a:79:36:c5:6b:74:
         9b:87:3a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:32 2024 by rpki-client on console-fra.rpki-client.org