Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/3138312e3139312e34382e302f32322d3232203d3e20323637343533.roa
File:                     3138312e3139312e34382e302f32322d3232203d3e20323637343533.roa (raw, json)
Hash identifier:          GzGz8vr5SXn1bgrmm7V2w/b6YnPO9TBAg0n0ywBq+SA=
Subject key identifier:   45:FC:62:EA:80:B7:EF:65:F7:33:BD:90:7E:D4:0B:17:57:92:0A:9A
Certificate issuer:       /CN=72798A16F3C8F86B911CA44A91126AF678AB4DA9
Certificate serial:       4754AF9A99EC10563DB150C8C33783C1609D6EC4
Authority key identifier: 72:79:8A:16:F3:C8:F8:6B:91:1C:A4:4A:91:12:6A:F6:78:AB:4D:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72798A16F3C8F86B911CA44A91126AF678AB4DA9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/3138312e3139312e34382e302f32322d3232203d3e20323637343533.roa
Signing time:             Tue 01 Oct 2024 21:13:12 +0000
ROA not before:           Tue 01 Oct 2024 21:08:12 +0000
ROA not after:            Tue 30 Sep 2025 21:13:12 +0000
asID:                     267453
IP address blocks:        181.191.48.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/72798A16F3C8F86B911CA44A91126AF678AB4DA9.crl
                          rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/72798A16F3C8F86B911CA44A91126AF678AB4DA9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72798A16F3C8F86B911CA44A91126AF678AB4DA9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:54:af:9a:99:ec:10:56:3d:b1:50:c8:c3:37:83:c1:60:9d:6e:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72798A16F3C8F86B911CA44A91126AF678AB4DA9
        Validity
            Not Before: Oct  1 21:08:12 2024 GMT
            Not After : Sep 30 21:13:12 2025 GMT
        Subject: CN=45FC62EA80B7EF65F733BD907ED40B1757920A9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:dd:a4:59:5b:67:24:31:7e:dd:07:b2:f6:3d:
                    f2:6f:9a:1b:93:e3:46:91:fb:56:a6:7f:80:1a:94:
                    e3:ed:8d:7d:ca:d9:58:39:b3:e7:14:68:0a:8b:a9:
                    38:58:21:68:72:c8:21:c9:c8:6a:30:71:c2:0e:10:
                    14:eb:e9:79:08:62:1c:96:db:3d:05:5d:d0:43:a9:
                    79:66:fa:ea:90:06:a3:35:d8:a0:be:16:6f:f1:18:
                    00:60:9b:1f:ba:6a:31:bd:63:1e:50:69:15:b9:2a:
                    cc:b3:a4:01:03:ad:2e:d2:55:da:56:b6:ba:d7:9e:
                    61:18:af:9e:71:63:9f:95:2b:19:cb:96:85:b7:27:
                    4f:45:aa:77:b7:34:eb:7d:26:ac:ed:3d:5a:a8:20:
                    3f:89:86:6c:05:ea:94:41:bc:8a:9f:5e:a8:02:bf:
                    9b:dc:f2:5b:1d:04:08:03:11:7b:d3:38:30:81:8e:
                    cb:fe:11:bb:e5:30:59:47:33:5d:53:b7:77:00:4d:
                    cb:66:dc:d2:8a:18:42:5e:5e:79:83:f5:b6:7f:f3:
                    7a:b0:96:01:01:96:e2:dc:5f:92:84:af:7a:b5:e1:
                    1b:27:21:b3:3b:1e:30:79:c2:fa:b8:d9:16:14:d1:
                    5b:cf:47:43:b8:26:77:44:49:5b:82:92:70:8a:fb:
                    c5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:FC:62:EA:80:B7:EF:65:F7:33:BD:90:7E:D4:0B:17:57:92:0A:9A
            X509v3 Authority Key Identifier:
                keyid:72:79:8A:16:F3:C8:F8:6B:91:1C:A4:4A:91:12:6A:F6:78:AB:4D:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/72798A16F3C8F86B911CA44A91126AF678AB4DA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72798A16F3C8F86B911CA44A91126AF678AB4DA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/3138312e3139312e34382e302f32322d3232203d3e20323637343533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:5a:d6:49:5b:3e:0e:3f:4d:02:0f:ea:09:ab:ee:8f:ac:43:
         81:34:95:10:84:85:c8:e2:96:88:92:ae:fd:8e:45:bf:1c:e7:
         a8:af:42:07:fd:b8:ac:0f:7c:93:7b:49:fb:fd:07:7b:45:92:
         ee:2d:61:f0:6a:6f:ed:b8:f1:f8:90:d9:ed:f5:7e:57:e9:b7:
         ac:cd:ab:2f:2b:06:22:7e:39:60:f5:e8:9c:a0:67:d0:20:ac:
         b9:c6:34:93:66:4b:79:c7:75:9b:49:82:39:c2:04:e6:27:d4:
         c4:ff:7e:3d:26:72:3a:ef:01:1b:2f:ad:01:7b:38:47:48:88:
         5d:c9:33:34:db:6d:53:bf:f4:78:85:d1:ec:8f:cf:eb:33:b4:
         d7:56:9d:10:76:09:e0:07:e8:07:70:85:6d:3c:20:f9:ef:aa:
         31:41:4f:8a:0d:43:1b:26:59:43:47:3f:63:5d:44:e2:8b:1b:
         4e:1f:68:b6:f8:9f:55:9c:3c:0d:d1:b1:bf:b9:f3:58:0a:bf:
         b4:42:cd:de:07:6f:ec:d4:db:ea:8e:e6:46:df:cd:09:e0:38:
         1d:b0:98:fe:f5:4d:53:14:88:f6:29:99:02:9e:83:9f:51:11:
         75:c8:9a:7c:5b:06:36:5a:30:f5:fc:76:2e:06:bd:21:d6:a9:
         c6:88:fb:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:44:53 2024 by rpki-client on console-ams.rpki-client.org