Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/1/3138312e3233322e3136342e302f32322d3232203d3e20323731333131.roa
File:                     3138312e3233322e3136342e302f32322d3232203d3e20323731333131.roa (raw, json)
Hash identifier:          9mQlkSP5aM+tH9j32x/jz/ABnm17FDq7XmAwgaPXmNU=
Subject key identifier:   F0:40:31:5F:A0:1E:C1:1D:DD:43:F8:64:E2:BA:54:9A:BA:41:0B:FE
Certificate issuer:       /CN=B6CC812D59F4308FCB1D2239555678B476218767
Certificate serial:       07D6FAAAFBC47716263829B9B67FEA484A060988
Authority key identifier: B6:CC:81:2D:59:F4:30:8F:CB:1D:22:39:55:56:78:B4:76:21:87:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6CC812D59F4308FCB1D2239555678B476218767.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/1/3138312e3233322e3136342e302f32322d3232203d3e20323731333131.roa
Signing time:             Wed 03 Apr 2024 20:20:15 +0000
ROA not before:           Wed 03 Apr 2024 20:15:15 +0000
ROA not after:            Wed 02 Apr 2025 20:20:15 +0000
asID:                     271311
IP address blocks:        181.232.164.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/1/B6CC812D59F4308FCB1D2239555678B476218767.crl
                          rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/1/B6CC812D59F4308FCB1D2239555678B476218767.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6CC812D59F4308FCB1D2239555678B476218767.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:d6:fa:aa:fb:c4:77:16:26:38:29:b9:b6:7f:ea:48:4a:06:09:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6CC812D59F4308FCB1D2239555678B476218767
        Validity
            Not Before: Apr  3 20:15:15 2024 GMT
            Not After : Apr  2 20:20:15 2025 GMT
        Subject: CN=F040315FA01EC11DDD43F864E2BA549ABA410BFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:00:20:f5:ae:49:fd:62:1e:0d:82:ac:10:99:
                    ca:22:ad:3e:b9:f5:09:21:9d:cc:c4:31:c1:ea:e9:
                    79:c4:32:bb:b9:fa:01:08:30:87:89:3f:d5:19:db:
                    ae:38:27:e0:a9:96:03:4e:4d:f2:90:81:d0:cd:f9:
                    aa:30:d8:72:43:d4:57:98:51:69:13:ad:8e:72:1a:
                    84:24:b0:f6:2d:74:c0:96:ac:c2:cf:91:c8:89:c0:
                    b7:ba:b6:e6:15:7b:68:dd:7b:99:f1:bf:7b:fa:aa:
                    c3:6e:30:c8:2c:bc:ce:66:4d:99:ea:e3:be:e1:3b:
                    8a:9a:12:c8:f3:5b:8d:f4:19:18:88:32:ba:9a:e5:
                    48:30:1d:23:b6:17:15:47:9a:98:09:cf:8b:f3:ee:
                    1f:b4:b9:01:9e:67:3b:bf:19:c2:d7:fe:ee:a9:74:
                    6e:7d:26:fb:a1:0e:e8:9a:05:58:41:0d:56:d5:fa:
                    6e:8a:5a:cd:44:5b:29:25:be:51:bc:2e:ae:27:17:
                    39:86:c7:4c:bf:f5:cb:46:b1:5b:30:88:97:75:38:
                    69:51:3e:f9:20:a3:af:b1:82:fc:71:c8:15:59:f7:
                    be:35:80:6e:f0:a6:34:d6:42:3c:43:d4:6f:b3:7d:
                    58:88:f6:13:e3:87:9d:7a:19:4d:10:26:76:ae:fd:
                    4e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:40:31:5F:A0:1E:C1:1D:DD:43:F8:64:E2:BA:54:9A:BA:41:0B:FE
            X509v3 Authority Key Identifier:
                keyid:B6:CC:81:2D:59:F4:30:8F:CB:1D:22:39:55:56:78:B4:76:21:87:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/1/B6CC812D59F4308FCB1D2239555678B476218767.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6CC812D59F4308FCB1D2239555678B476218767.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/1/3138312e3233322e3136342e302f32322d3232203d3e20323731333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:77:52:54:63:23:2d:97:27:68:a9:da:8a:37:6f:43:57:27:
         b0:75:3f:66:cd:03:3b:a0:5d:d4:c7:8c:9f:fd:64:ee:b0:4f:
         68:62:14:6a:35:93:6c:bd:df:5f:ef:94:0f:4d:c7:9e:33:84:
         0c:7b:07:52:d1:c6:bf:3a:ff:85:87:6e:80:a0:ae:b3:34:65:
         f3:7d:7c:a1:b2:a9:09:8b:58:03:f8:b0:9e:dc:77:1c:41:3a:
         5b:4f:08:b1:ca:04:cc:10:8e:e1:27:9c:cd:60:bf:79:9d:5b:
         fb:bd:56:1b:70:d8:43:ad:4b:ed:fd:b3:d8:79:79:9d:27:36:
         b6:47:85:0c:1d:e4:83:59:2c:2c:d4:3e:f1:b6:1f:d3:48:d5:
         0d:6d:84:84:47:b8:55:a8:59:77:a5:b0:b7:fa:48:44:3d:fb:
         ed:98:aa:f3:9d:45:34:67:f7:77:55:dc:d7:c9:1b:73:f1:51:
         13:90:06:f5:9f:a3:ec:24:08:47:d2:b8:c0:e2:7b:94:e9:03:
         83:50:f9:0b:f6:6a:7b:1e:2b:ff:04:7d:13:ad:9f:8e:f7:ad:
         bd:30:32:80:08:22:de:40:ad:b7:7d:29:f8:c1:e1:f0:2a:39:
         b6:b2:d4:d7:05:eb:38:2c:46:9a:62:26:06:e4:4b:f0:b4:a9:
         95:76:e2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:39 2024 by rpki-client on console-fra.rpki-client.org