Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LRbqsXBEPv3bCu2zA7c4V3w1gzUTQGXHErC2hZ9asY/1/3138312e3232342e35362e302f32342d3234203d3e20323731353332.roa
File:                     3138312e3232342e35362e302f32342d3234203d3e20323731353332.roa (raw, json)
Hash identifier:          V45tmz6qX3+GP5sWV/1F+P/m9jIbr0AFewGZ9QrKInU=
Subject key identifier:   4F:F6:62:6E:84:97:51:A2:84:FB:71:37:01:EB:89:02:27:EE:22:11
Certificate issuer:       /CN=6982D51872DC91BEC06EE371CAE70C62F710F7BA
Certificate serial:       2B75C0DF1519BB759BD36E8CF7754B9457F82FDF
Authority key identifier: 69:82:D5:18:72:DC:91:BE:C0:6E:E3:71:CA:E7:0C:62:F7:10:F7:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6982D51872DC91BEC06EE371CAE70C62F710F7BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LRbqsXBEPv3bCu2zA7c4V3w1gzUTQGXHErC2hZ9asY/1/3138312e3232342e35362e302f32342d3234203d3e20323731353332.roa
Signing time:             Thu 04 Apr 2024 03:33:37 +0000
ROA not before:           Thu 04 Apr 2024 03:28:37 +0000
ROA not after:            Thu 03 Apr 2025 03:33:37 +0000
asID:                     271532
IP address blocks:        181.224.56.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LRbqsXBEPv3bCu2zA7c4V3w1gzUTQGXHErC2hZ9asY/1/6982D51872DC91BEC06EE371CAE70C62F710F7BA.crl
                          rsync://rpki-repo.registro.br/repo/5LRbqsXBEPv3bCu2zA7c4V3w1gzUTQGXHErC2hZ9asY/1/6982D51872DC91BEC06EE371CAE70C62F710F7BA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6982D51872DC91BEC06EE371CAE70C62F710F7BA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:75:c0:df:15:19:bb:75:9b:d3:6e:8c:f7:75:4b:94:57:f8:2f:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6982D51872DC91BEC06EE371CAE70C62F710F7BA
        Validity
            Not Before: Apr  4 03:28:37 2024 GMT
            Not After : Apr  3 03:33:37 2025 GMT
        Subject: CN=4FF6626E849751A284FB713701EB890227EE2211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:6f:22:dd:60:07:f1:a2:83:f3:ca:d1:43:d4:
                    2b:04:9b:0e:73:c9:3d:83:45:f9:33:fc:2a:af:69:
                    04:18:63:e4:25:40:fb:14:2a:32:9f:8f:e9:cb:4b:
                    89:db:5b:ac:a8:e9:09:d1:72:c3:b2:a4:3a:94:11:
                    db:67:e4:a0:79:c7:9f:f7:3a:dd:7c:d4:a6:0f:90:
                    3e:29:5c:79:84:d5:fa:77:98:82:db:ab:97:f4:b4:
                    aa:43:4a:d1:b3:dc:54:91:38:08:c4:b3:f6:a1:48:
                    ed:e7:d0:40:93:56:5c:b5:ca:c9:ac:a7:6e:4d:9d:
                    e1:d7:52:b0:36:9d:93:ab:ab:1c:62:2a:c8:96:f9:
                    2c:cb:d3:b3:cf:fe:63:d4:f8:a3:3a:38:47:ea:2e:
                    7f:68:89:25:4b:97:dc:00:99:dc:ff:8c:ed:79:ad:
                    5b:2e:f7:58:a4:57:a3:7d:47:33:f7:9e:92:62:c2:
                    b0:c7:11:0b:1a:ce:66:d5:ea:8a:cf:5b:21:20:4e:
                    54:96:c0:ec:bd:e7:a8:c1:46:46:1f:e7:e0:93:c8:
                    dd:1f:27:da:d9:db:9a:d6:d7:28:88:da:a9:c5:8e:
                    87:e9:2c:6e:96:07:5b:d0:37:25:c4:95:e9:45:dc:
                    01:78:f1:4f:6a:29:2f:91:c3:ea:5c:fb:ff:5f:30:
                    89:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:F6:62:6E:84:97:51:A2:84:FB:71:37:01:EB:89:02:27:EE:22:11
            X509v3 Authority Key Identifier:
                keyid:69:82:D5:18:72:DC:91:BE:C0:6E:E3:71:CA:E7:0C:62:F7:10:F7:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LRbqsXBEPv3bCu2zA7c4V3w1gzUTQGXHErC2hZ9asY/1/6982D51872DC91BEC06EE371CAE70C62F710F7BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6982D51872DC91BEC06EE371CAE70C62F710F7BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LRbqsXBEPv3bCu2zA7c4V3w1gzUTQGXHErC2hZ9asY/1/3138312e3232342e35362e302f32342d3234203d3e20323731353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:11:e6:d7:4e:dc:76:be:3e:96:b9:46:c7:49:41:8c:0d:4c:
         7d:fa:25:52:5a:cb:e5:7b:db:92:0a:7e:62:01:55:e8:76:40:
         55:e4:15:86:54:20:7f:67:56:1c:80:a0:03:63:ef:98:e8:4c:
         75:48:dc:fe:56:b1:21:f9:2b:a5:d5:c7:46:29:6a:67:cd:5b:
         1e:34:18:88:4c:07:55:d5:ac:d0:12:87:b7:0c:28:db:0b:76:
         cd:86:d4:05:9c:0b:26:f7:2c:54:f2:f9:93:11:cd:56:ee:bc:
         55:9f:e5:ce:74:10:36:ce:a8:ba:ab:ba:a7:b4:73:81:dc:68:
         80:37:34:fd:5e:23:30:4c:f8:9b:52:21:80:db:6d:9d:c4:4e:
         ce:04:f5:cd:c3:6f:d9:26:4c:84:5d:84:d9:35:f6:f6:b7:ac:
         21:5e:26:63:30:c3:39:24:d2:8b:b3:41:33:91:0c:32:85:b8:
         ac:cb:87:30:0f:b6:df:a8:bb:bd:42:19:81:99:5d:3b:76:59:
         94:e1:43:b1:d0:36:4d:93:8f:92:33:53:4e:91:e3:f7:32:d5:
         b4:3a:ab:25:00:92:d2:fc:de:24:5c:ca:c3:d7:a4:a4:ca:d3:
         9f:28:4d:f3:9c:e4:4c:88:01:5e:72:09:58:20:09:cf:ee:30:
         7c:df:4f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:33 2024 by rpki-client on console-fra.rpki-client.org