Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/3138312e3139312e34392e302f32342d3234203d3e20323637343533.roa
File:                     3138312e3139312e34392e302f32342d3234203d3e20323637343533.roa (raw, json)
Hash identifier:          LNALTNK47+wU0x0s2FYLkEctRTFz0Y4Im66tGuUNnFs=
Subject key identifier:   96:94:5E:FB:37:E6:5A:DC:0B:E6:C4:6A:5F:81:AA:52:AF:70:6C:07
Certificate issuer:       /CN=72798A16F3C8F86B911CA44A91126AF678AB4DA9
Certificate serial:       600D03BD68E0FF28531D60CA937A200674DFB68A
Authority key identifier: 72:79:8A:16:F3:C8:F8:6B:91:1C:A4:4A:91:12:6A:F6:78:AB:4D:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72798A16F3C8F86B911CA44A91126AF678AB4DA9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/3138312e3139312e34392e302f32342d3234203d3e20323637343533.roa
Signing time:             Tue 01 Oct 2024 21:13:10 +0000
ROA not before:           Tue 01 Oct 2024 21:08:10 +0000
ROA not after:            Tue 30 Sep 2025 21:13:10 +0000
asID:                     267453
IP address blocks:        181.191.49.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/72798A16F3C8F86B911CA44A91126AF678AB4DA9.crl
                          rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/72798A16F3C8F86B911CA44A91126AF678AB4DA9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72798A16F3C8F86B911CA44A91126AF678AB4DA9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:0d:03:bd:68:e0:ff:28:53:1d:60:ca:93:7a:20:06:74:df:b6:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72798A16F3C8F86B911CA44A91126AF678AB4DA9
        Validity
            Not Before: Oct  1 21:08:10 2024 GMT
            Not After : Sep 30 21:13:10 2025 GMT
        Subject: CN=96945EFB37E65ADC0BE6C46A5F81AA52AF706C07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:eb:23:3c:c6:b7:36:80:87:51:f6:32:74:53:
                    a8:f6:2e:c7:85:c4:82:8f:30:5e:13:9f:7c:24:ba:
                    ff:61:57:d4:5c:ed:fa:b7:5f:0f:a0:5d:5c:30:a2:
                    fe:84:b6:ca:4d:54:3b:6a:f5:24:ee:57:62:4c:57:
                    66:da:58:79:9c:dd:bf:07:08:aa:ac:36:4e:37:37:
                    6d:97:37:b3:49:91:83:bd:86:13:5f:56:a0:26:52:
                    60:7f:d7:af:8c:ff:c2:20:d4:47:80:0b:0b:56:29:
                    cc:71:3f:3f:fe:80:f2:7a:28:84:db:ac:6d:88:f3:
                    d4:80:18:9e:fc:40:86:14:28:1b:e6:57:53:90:7b:
                    ff:39:ba:9e:2a:6d:ef:2e:8f:1c:fc:11:68:16:e9:
                    6d:7d:e7:d6:40:e2:6e:8d:1c:9f:c9:43:6c:53:ad:
                    a7:cb:fa:08:8d:41:0f:db:f0:2d:d4:e9:c0:9a:4f:
                    44:43:96:51:e2:06:be:29:26:1a:6a:e8:0c:49:b3:
                    62:7c:35:2a:a3:be:4d:a7:73:1c:8f:f3:36:a6:58:
                    7c:f5:86:be:d6:7f:f3:a1:60:57:23:79:01:0d:55:
                    08:9f:d2:09:4f:15:45:8c:06:17:6b:d3:89:01:84:
                    d3:65:00:ff:2b:47:45:f6:68:2a:ab:ae:f9:d7:dc:
                    96:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:94:5E:FB:37:E6:5A:DC:0B:E6:C4:6A:5F:81:AA:52:AF:70:6C:07
            X509v3 Authority Key Identifier:
                keyid:72:79:8A:16:F3:C8:F8:6B:91:1C:A4:4A:91:12:6A:F6:78:AB:4D:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/72798A16F3C8F86B911CA44A91126AF678AB4DA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72798A16F3C8F86B911CA44A91126AF678AB4DA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/3138312e3139312e34392e302f32342d3234203d3e20323637343533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:de:4d:2a:4d:03:d6:98:72:9a:cf:93:46:4a:b2:3c:e4:b7:
         f2:72:44:4c:29:73:1e:86:94:bc:f5:05:cc:4b:61:a0:c6:3f:
         a0:91:d3:e5:11:91:75:bc:c2:34:2f:dc:74:a6:c2:83:bd:81:
         1e:c3:e1:90:1d:c7:7f:a6:25:df:a5:17:7c:46:e5:a8:47:28:
         85:17:9e:bd:92:e0:b6:2a:76:ee:41:6d:e5:6a:38:69:3f:df:
         33:4b:a9:3f:a3:d1:e4:fb:d6:52:79:a6:7f:59:b6:0f:b9:cd:
         49:3f:89:72:92:f9:e4:3f:c8:2f:40:77:51:8d:aa:c8:4c:2c:
         a6:43:9e:b8:15:ba:83:0c:dd:5f:f9:4a:fe:4d:bf:c6:50:4a:
         ee:90:a5:fe:67:10:72:b8:ad:f1:41:58:62:e4:f5:68:73:71:
         a4:af:76:e0:6a:87:47:87:b1:ec:b0:0a:05:34:91:84:e4:19:
         cf:16:f8:90:8a:5c:36:09:2d:13:7e:15:a7:34:56:20:db:34:
         72:3a:76:b9:09:21:21:13:32:04:34:5f:3a:56:16:99:f4:7d:
         59:f4:7c:d0:69:bd:75:fa:9e:dc:b0:80:a6:69:60:4f:02:94:
         6f:6e:b7:3c:d1:0d:e0:03:a0:72:69:c0:e4:5c:3e:62:89:56:
         d7:68:48:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:44:53 2024 by rpki-client on console-ams.rpki-client.org