Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/3138312e3139312e35302e302f32332d3233203d3e20323637343533.roa
File:                     3138312e3139312e35302e302f32332d3233203d3e20323637343533.roa (raw, json)
Hash identifier:          yPOkScd7WsmIoOPoncumWo1o1+G+9IhaxmiJ/wCpFTc=
Subject key identifier:   33:15:7E:02:04:55:6C:EC:53:55:DA:F6:6B:71:93:FC:0B:7E:55:C5
Certificate issuer:       /CN=72798A16F3C8F86B911CA44A91126AF678AB4DA9
Certificate serial:       4730EA70FDEF9FF8EA8A4F0C6EA2BAC7F40CC0FD
Authority key identifier: 72:79:8A:16:F3:C8:F8:6B:91:1C:A4:4A:91:12:6A:F6:78:AB:4D:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72798A16F3C8F86B911CA44A91126AF678AB4DA9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/3138312e3139312e35302e302f32332d3233203d3e20323637343533.roa
Signing time:             Tue 01 Oct 2024 21:13:11 +0000
ROA not before:           Tue 01 Oct 2024 21:08:11 +0000
ROA not after:            Tue 30 Sep 2025 21:13:11 +0000
asID:                     267453
IP address blocks:        181.191.50.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/72798A16F3C8F86B911CA44A91126AF678AB4DA9.crl
                          rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/72798A16F3C8F86B911CA44A91126AF678AB4DA9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72798A16F3C8F86B911CA44A91126AF678AB4DA9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:30:ea:70:fd:ef:9f:f8:ea:8a:4f:0c:6e:a2:ba:c7:f4:0c:c0:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72798A16F3C8F86B911CA44A91126AF678AB4DA9
        Validity
            Not Before: Oct  1 21:08:11 2024 GMT
            Not After : Sep 30 21:13:11 2025 GMT
        Subject: CN=33157E0204556CEC5355DAF66B7193FC0B7E55C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d8:8b:5c:69:8c:54:e5:38:5e:13:a3:94:dc:
                    f1:4e:f8:3a:fd:2d:f2:2b:74:88:6a:b0:34:c6:60:
                    2e:b4:62:24:d2:f0:1e:0e:e1:72:19:da:ad:24:01:
                    76:28:96:41:e8:27:e6:4b:a9:66:42:fd:a0:45:bd:
                    58:55:54:7b:fe:6d:20:aa:50:f0:2b:b6:cf:8b:bd:
                    87:bb:31:e3:49:9a:1d:86:44:72:23:b1:cd:08:06:
                    4e:29:fd:a0:01:07:64:49:28:75:91:55:71:6e:06:
                    85:40:cb:f3:fb:1d:d0:05:2c:c6:cd:b4:10:96:e4:
                    26:8b:42:4d:04:24:ca:58:a1:fa:b0:dc:6a:00:e2:
                    06:e5:d1:d9:df:96:87:a3:eb:dd:2d:38:fb:2f:ed:
                    d8:2f:80:b6:cc:e2:5b:3f:99:e5:db:76:b8:c8:3f:
                    94:b6:ad:f3:79:16:75:93:ac:34:e4:31:6c:95:2e:
                    cc:b9:10:b1:a6:c2:b6:3f:b1:64:c9:db:1e:19:3f:
                    1c:da:66:a1:03:06:82:50:26:6d:0e:d4:6d:34:c0:
                    e4:61:9b:29:9e:61:19:c9:e9:0e:41:9b:25:f2:60:
                    db:84:1f:19:8b:03:45:ed:f6:d3:8b:24:37:3a:ab:
                    23:7e:a2:53:34:af:1f:c5:e4:e0:60:dd:d9:e8:ac:
                    d3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:15:7E:02:04:55:6C:EC:53:55:DA:F6:6B:71:93:FC:0B:7E:55:C5
            X509v3 Authority Key Identifier:
                keyid:72:79:8A:16:F3:C8:F8:6B:91:1C:A4:4A:91:12:6A:F6:78:AB:4D:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/72798A16F3C8F86B911CA44A91126AF678AB4DA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72798A16F3C8F86B911CA44A91126AF678AB4DA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/3138312e3139312e35302e302f32332d3233203d3e20323637343533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:82:c1:09:5c:fa:95:51:d9:53:ac:35:ea:59:a7:a8:63:a8:
         03:e7:be:88:0d:7f:6f:cd:ae:c9:5e:38:3a:ed:12:45:73:46:
         fb:78:0a:68:6b:bc:e0:49:dc:62:f1:ed:d7:44:60:b2:2b:38:
         a5:7a:2b:0d:e0:23:5f:b2:9d:38:b9:d4:f1:79:6d:db:9f:c3:
         c2:34:c2:c5:19:c0:f9:d9:fa:5e:e4:b4:7f:2b:dc:4d:98:c8:
         ec:e4:48:ed:05:f5:70:61:84:7a:34:df:80:54:be:b5:9c:f1:
         f1:db:08:6b:39:74:aa:e1:fa:36:eb:3c:09:f0:01:fd:c7:f2:
         85:8b:e3:dd:a9:61:77:1e:10:b3:aa:1b:1a:81:19:59:06:5e:
         76:83:cd:3a:59:b6:8e:64:0e:91:e2:c8:f6:57:39:5b:6b:d4:
         c0:c9:70:26:41:75:96:15:ac:4a:8d:2d:fd:09:c4:7b:14:e5:
         3b:40:36:43:6d:c6:bb:d3:59:9b:69:b6:3e:7b:c1:5b:90:9d:
         ee:28:b0:7f:90:cc:41:43:9d:1c:b2:83:e0:53:7a:23:1e:e5:
         34:0e:ce:b3:cb:10:85:ac:2f:f9:7b:e6:e4:39:2f:39:3a:51:
         05:cf:05:e9:17:90:8f:c0:67:75:d8:57:26:d9:5e:76:75:99:
         f6:99:ee:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:22:35 2024 by rpki-client on console-fra.rpki-client.org