Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/1/3138312e3233322e3136362e302f32342d3234203d3e20323731333131.roa
File:                     3138312e3233322e3136362e302f32342d3234203d3e20323731333131.roa (raw, json)
Hash identifier:          1FJNme9zUd0BkEepV3vbern2N/hi6hCKiUkRFKtxrBU=
Subject key identifier:   B8:A0:6F:27:21:57:C1:07:BF:F3:D2:9E:F5:78:70:E3:F7:B3:54:C1
Certificate issuer:       /CN=B6CC812D59F4308FCB1D2239555678B476218767
Certificate serial:       5692A79740AA66026B2CB452FB97C9CD3BACA28B
Authority key identifier: B6:CC:81:2D:59:F4:30:8F:CB:1D:22:39:55:56:78:B4:76:21:87:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6CC812D59F4308FCB1D2239555678B476218767.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/1/3138312e3233322e3136362e302f32342d3234203d3e20323731333131.roa
Signing time:             Wed 03 Apr 2024 20:20:15 +0000
ROA not before:           Wed 03 Apr 2024 20:15:15 +0000
ROA not after:            Wed 02 Apr 2025 20:20:15 +0000
asID:                     271311
IP address blocks:        181.232.166.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/1/B6CC812D59F4308FCB1D2239555678B476218767.crl
                          rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/1/B6CC812D59F4308FCB1D2239555678B476218767.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6CC812D59F4308FCB1D2239555678B476218767.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:92:a7:97:40:aa:66:02:6b:2c:b4:52:fb:97:c9:cd:3b:ac:a2:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6CC812D59F4308FCB1D2239555678B476218767
        Validity
            Not Before: Apr  3 20:15:15 2024 GMT
            Not After : Apr  2 20:20:15 2025 GMT
        Subject: CN=B8A06F272157C107BFF3D29EF57870E3F7B354C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bc:53:5e:e9:2a:9c:3a:f5:55:70:76:47:fa:
                    60:8b:ea:b8:3e:86:c7:17:0e:ac:db:02:9c:3b:64:
                    b6:85:bc:64:89:b5:38:29:fb:5b:cc:4e:22:e8:82:
                    46:eb:33:6e:06:51:90:19:4e:c5:a2:7e:57:f2:e1:
                    51:69:d5:db:ff:0d:35:33:b6:89:f9:f4:76:17:86:
                    a3:82:d5:9d:cb:aa:f7:14:4a:10:a1:b1:a9:53:b9:
                    4c:af:2c:eb:37:e5:61:47:39:5b:ef:82:fb:df:56:
                    b8:ae:76:28:83:09:e9:23:d3:7e:b8:9d:db:84:0f:
                    b7:3f:1a:f4:6b:fe:84:d2:4c:80:ec:13:59:8d:cf:
                    04:cf:c5:84:34:a4:9c:fc:6f:ed:45:f6:da:7e:a2:
                    8a:74:a8:f2:12:11:9f:0c:ff:2b:d6:dd:a8:c5:75:
                    0d:e8:b6:8e:1a:1b:42:47:51:52:57:82:d1:92:0f:
                    58:0e:d8:72:f9:2b:1d:4b:1e:f9:1c:56:6a:12:16:
                    25:a0:3a:01:91:1f:30:08:11:fb:9d:d7:c8:0e:e0:
                    97:db:44:86:03:c1:c1:ef:b8:bd:61:29:92:7d:5d:
                    20:71:bb:fb:ad:2e:dc:0e:14:17:ed:75:37:b2:ca:
                    2e:79:fa:ff:4a:5b:9c:c9:d1:28:ed:79:d4:c2:f5:
                    9e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:A0:6F:27:21:57:C1:07:BF:F3:D2:9E:F5:78:70:E3:F7:B3:54:C1
            X509v3 Authority Key Identifier:
                keyid:B6:CC:81:2D:59:F4:30:8F:CB:1D:22:39:55:56:78:B4:76:21:87:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/1/B6CC812D59F4308FCB1D2239555678B476218767.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6CC812D59F4308FCB1D2239555678B476218767.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/1/3138312e3233322e3136362e302f32342d3234203d3e20323731333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:82:f8:26:0b:0a:6d:24:07:24:e2:16:d9:49:38:0c:d9:34:
         7d:40:d8:67:2a:cc:88:5f:5d:b5:35:a5:28:1a:92:e9:3e:c7:
         5b:7c:88:90:44:1f:30:94:6e:de:4e:23:87:80:7f:83:14:eb:
         83:e1:2a:d2:fa:06:e0:3f:c8:5e:28:ae:86:19:4a:e3:ff:3c:
         38:99:4b:95:dd:64:66:6d:7c:44:33:ee:56:fe:46:21:6a:15:
         b5:c9:a1:3c:58:54:c9:25:62:0d:6f:b1:e1:79:28:07:78:3d:
         5e:c4:ae:69:67:5c:ba:56:4d:48:04:61:65:6d:d8:ca:9e:62:
         1d:20:c7:02:9a:13:b9:c5:44:a4:81:d0:d5:3d:ae:95:2a:90:
         ea:90:b7:46:4c:7b:71:87:63:53:7c:ad:88:a8:94:64:75:4d:
         d0:80:ef:5a:7e:ba:1e:b6:5b:f2:c0:72:b9:c0:67:ab:3a:5c:
         f2:3b:3e:bc:93:8c:6a:5b:f3:b3:33:91:86:0f:40:80:47:54:
         9c:6e:fc:0b:c2:a7:fb:9b:da:9c:25:54:43:d7:f6:76:11:2d:
         c1:2f:74:37:75:79:81:2c:8b:48:1c:15:89:92:47:a7:e7:79:
         d2:b5:9b:5a:8f:34:a7:10:22:9d:2e:60:44:ab:89:a0:52:2c:
         d9:ef:70:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:39 2024 by rpki-client on console-fra.rpki-client.org