Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/56RdXxD9QXwXWehrchLsLyTzAhLu4RSqWvQ6FrKeqaBU/1/3138372e34392e3138302e302f32322d3234203d3e20323730353131.roa
File:                     3138372e34392e3138302e302f32322d3234203d3e20323730353131.roa (raw, json)
Hash identifier:          4CBcfwMY7IYdJvXVS5YVPyjb5oUe74nw8I68asEFQCo=
Subject key identifier:   69:88:E6:34:96:DC:35:5F:AA:CD:8F:B1:AC:6A:EB:21:28:33:F1:EF
Certificate issuer:       /CN=933D25103B9996B3949AF7607EDF6BC993402B70
Certificate serial:       20522A1001DDC8D802C5724D76AEA335A4BF0211
Authority key identifier: 93:3D:25:10:3B:99:96:B3:94:9A:F7:60:7E:DF:6B:C9:93:40:2B:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/933D25103B9996B3949AF7607EDF6BC993402B70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/56RdXxD9QXwXWehrchLsLyTzAhLu4RSqWvQ6FrKeqaBU/1/3138372e34392e3138302e302f32322d3234203d3e20323730353131.roa
Signing time:             Thu 04 Apr 2024 17:08:16 +0000
ROA not before:           Thu 04 Apr 2024 17:03:16 +0000
ROA not after:            Thu 03 Apr 2025 17:08:16 +0000
asID:                     270511
IP address blocks:        187.49.180.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/56RdXxD9QXwXWehrchLsLyTzAhLu4RSqWvQ6FrKeqaBU/1/933D25103B9996B3949AF7607EDF6BC993402B70.crl
                          rsync://rpki-repo.registro.br/repo/56RdXxD9QXwXWehrchLsLyTzAhLu4RSqWvQ6FrKeqaBU/1/933D25103B9996B3949AF7607EDF6BC993402B70.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/933D25103B9996B3949AF7607EDF6BC993402B70.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:55:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:52:2a:10:01:dd:c8:d8:02:c5:72:4d:76:ae:a3:35:a4:bf:02:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=933D25103B9996B3949AF7607EDF6BC993402B70
        Validity
            Not Before: Apr  4 17:03:16 2024 GMT
            Not After : Apr  3 17:08:16 2025 GMT
        Subject: CN=6988E63496DC355FAACD8FB1AC6AEB212833F1EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:dc:99:d6:90:4f:16:f7:bb:c1:f1:6e:cf:a9:
                    d8:9d:a3:c7:64:bc:07:0b:ad:11:cf:05:75:bc:2f:
                    63:e3:e4:36:4b:73:bf:53:a6:15:05:52:f3:14:0d:
                    7b:ba:5e:70:6c:82:ba:69:58:a0:cb:71:7f:e9:9e:
                    aa:a8:0b:7d:7c:5c:3d:fe:4f:36:03:11:3b:6f:b2:
                    4f:fa:64:e3:1d:f5:e9:c1:ab:d7:f8:ee:0e:a1:df:
                    7e:43:93:f0:6a:59:31:54:3b:cb:c3:28:ba:64:44:
                    65:ad:66:be:29:f8:8a:ce:cb:6a:4e:11:8a:7f:bc:
                    03:3a:60:09:1e:47:a2:58:46:30:74:f8:7a:ab:d3:
                    7b:c7:11:db:e1:ba:26:dd:b0:9a:e7:3e:4b:a6:6c:
                    b9:fc:2b:90:3a:c8:20:fb:a1:e1:f0:fa:22:65:e1:
                    72:cb:c0:30:04:8c:54:0f:1c:bd:44:ee:47:ae:b5:
                    4a:0d:c5:a9:62:11:ca:83:2d:dd:0e:6a:92:81:41:
                    c8:d5:c4:fb:f3:01:67:a5:9d:7f:03:26:e1:68:3f:
                    fa:42:2e:08:b1:64:b8:6b:ec:96:d9:a6:71:33:d6:
                    c2:de:76:35:3c:21:15:8a:1d:f3:44:d4:d9:42:9e:
                    6a:26:9a:93:d0:b5:00:ec:70:02:82:80:1a:d0:a5:
                    30:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:88:E6:34:96:DC:35:5F:AA:CD:8F:B1:AC:6A:EB:21:28:33:F1:EF
            X509v3 Authority Key Identifier:
                keyid:93:3D:25:10:3B:99:96:B3:94:9A:F7:60:7E:DF:6B:C9:93:40:2B:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/56RdXxD9QXwXWehrchLsLyTzAhLu4RSqWvQ6FrKeqaBU/1/933D25103B9996B3949AF7607EDF6BC993402B70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/933D25103B9996B3949AF7607EDF6BC993402B70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/56RdXxD9QXwXWehrchLsLyTzAhLu4RSqWvQ6FrKeqaBU/1/3138372e34392e3138302e302f32322d3234203d3e20323730353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:e0:73:3a:ce:a7:a7:fa:bf:45:ee:2c:83:7b:5c:40:aa:ba:
         16:d8:d7:a0:99:88:a9:d0:10:d2:ac:bb:28:5c:b6:c0:4c:f3:
         1a:a4:74:a5:c3:23:11:8e:92:19:44:16:0a:8c:f8:4d:e8:7f:
         39:0c:73:14:93:28:83:4d:d4:54:21:e6:03:45:51:83:df:5b:
         9a:95:88:69:87:9c:b7:89:77:e4:64:3d:8f:61:27:93:b6:11:
         15:75:57:61:06:cf:1c:b0:f2:7c:54:07:58:86:f5:86:f7:dd:
         0c:37:41:14:96:64:7c:f8:9f:0b:dc:db:73:af:28:af:9f:28:
         a8:15:cf:17:16:05:75:e9:ae:15:78:65:5a:52:ad:50:1d:49:
         51:8d:50:78:96:e9:84:6f:ee:5c:cb:94:e4:bf:26:f6:fd:66:
         f5:c5:88:79:b4:3a:71:08:e2:16:78:15:3f:a6:b3:30:30:78:
         32:b4:03:91:9d:c5:85:52:c1:56:1c:3d:21:f0:ca:87:40:e0:
         a6:37:48:1d:f6:7d:bc:a1:39:c2:88:01:c2:b3:9d:f6:d2:20:
         1b:b7:7c:6c:16:a8:2e:ef:67:f5:4f:63:06:6c:7b:a0:85:37:
         f3:99:d6:14:ef:a4:27:c9:50:8d:28:25:e5:ee:4f:ec:db:ef:
         20:b4:a9:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:58 2024 by rpki-client on console-ams.rpki-client.org