Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/3138312e3139312e35302e302f32342d3234203d3e20323637343533.roa
File:                     3138312e3139312e35302e302f32342d3234203d3e20323637343533.roa (raw, json)
Hash identifier:          fXH9yUXq6FUNAbJqyz9K5L8CFiL7Z+c8lhG2SF0PyQE=
Subject key identifier:   ED:40:A1:1F:C3:A5:3B:45:8B:F4:12:51:26:88:E6:7F:08:68:93:F9
Certificate issuer:       /CN=72798A16F3C8F86B911CA44A91126AF678AB4DA9
Certificate serial:       7ABE78722068D573390949028DD741FC08863D78
Authority key identifier: 72:79:8A:16:F3:C8:F8:6B:91:1C:A4:4A:91:12:6A:F6:78:AB:4D:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72798A16F3C8F86B911CA44A91126AF678AB4DA9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/3138312e3139312e35302e302f32342d3234203d3e20323637343533.roa
Signing time:             Tue 01 Oct 2024 21:13:13 +0000
ROA not before:           Tue 01 Oct 2024 21:08:13 +0000
ROA not after:            Tue 30 Sep 2025 21:13:13 +0000
asID:                     267453
IP address blocks:        181.191.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/72798A16F3C8F86B911CA44A91126AF678AB4DA9.crl
                          rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/72798A16F3C8F86B911CA44A91126AF678AB4DA9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72798A16F3C8F86B911CA44A91126AF678AB4DA9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:be:78:72:20:68:d5:73:39:09:49:02:8d:d7:41:fc:08:86:3d:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72798A16F3C8F86B911CA44A91126AF678AB4DA9
        Validity
            Not Before: Oct  1 21:08:13 2024 GMT
            Not After : Sep 30 21:13:13 2025 GMT
        Subject: CN=ED40A11FC3A53B458BF412512688E67F086893F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f5:ae:b4:34:19:71:35:67:ee:06:db:d7:0d:
                    e8:d9:1b:5e:7a:08:6f:72:3b:ec:4f:a3:87:78:63:
                    44:9a:c3:4b:53:da:c6:db:94:9e:92:16:cb:dd:1c:
                    29:57:3f:25:6e:6c:aa:0e:aa:de:8d:4c:57:ad:02:
                    a0:f7:16:d2:3e:61:71:aa:09:ed:59:bd:b8:31:76:
                    f4:a3:63:24:13:35:b5:4a:03:e4:90:4c:13:6e:82:
                    1d:41:48:82:3e:86:8e:c4:1c:e1:63:27:c6:c4:96:
                    35:d1:72:64:72:7b:32:66:34:d1:ae:ad:75:5e:e9:
                    d6:3e:4a:7f:90:68:93:f4:9d:30:db:bd:fa:7f:61:
                    c8:4e:f5:6d:01:c2:05:c3:48:b3:c2:08:6e:01:ec:
                    99:24:cc:61:24:1a:75:5f:ef:ce:b4:54:91:02:f5:
                    de:2b:9a:47:bd:a1:fe:55:96:d0:3b:ea:89:21:88:
                    99:dc:68:b4:db:68:f9:5f:40:03:8a:cb:88:c2:3a:
                    75:98:dc:09:28:98:b9:0c:18:21:87:c5:88:83:71:
                    0d:f1:03:2c:ab:33:6c:f0:6f:e8:0a:53:bb:02:88:
                    64:37:aa:fa:cb:18:52:6e:c6:64:64:08:e8:c0:2d:
                    c8:a4:72:17:85:18:93:32:40:1d:60:45:51:ea:0f:
                    46:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:40:A1:1F:C3:A5:3B:45:8B:F4:12:51:26:88:E6:7F:08:68:93:F9
            X509v3 Authority Key Identifier:
                keyid:72:79:8A:16:F3:C8:F8:6B:91:1C:A4:4A:91:12:6A:F6:78:AB:4D:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/72798A16F3C8F86B911CA44A91126AF678AB4DA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72798A16F3C8F86B911CA44A91126AF678AB4DA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/3138312e3139312e35302e302f32342d3234203d3e20323637343533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:ed:4b:aa:ed:c7:69:9a:2d:ab:59:dc:fe:2d:74:09:44:76:
         f2:82:a3:33:9c:b5:52:55:5d:7c:40:cb:54:d3:ba:54:d2:44:
         9d:c4:9a:2b:8f:79:36:1c:c6:0e:b8:29:a3:07:f7:a4:6c:e5:
         10:45:54:ef:de:8b:a4:fd:2b:ba:39:db:69:dc:d2:69:f6:0c:
         95:83:e2:e0:95:35:11:c9:99:7a:27:8e:fb:69:34:23:33:e1:
         10:dc:bd:11:83:80:61:67:b2:05:37:eb:9a:74:d8:57:b0:74:
         8e:70:2c:8c:86:a1:0f:32:fc:fd:fb:bb:95:5e:4c:fb:2c:97:
         1a:48:2c:89:6f:1a:5e:66:ce:14:db:44:2d:0a:a2:c7:e0:b9:
         ca:2b:2b:58:77:c6:7b:e8:77:c9:fc:73:1f:07:48:cd:34:3d:
         5c:a1:50:85:c8:aa:6c:a2:f9:fc:20:0a:35:3b:c4:50:39:11:
         4f:6a:46:cf:b2:d8:df:b6:2d:0c:b5:f5:d1:43:a0:4e:bf:92:
         d3:72:2d:35:0c:31:70:4b:1e:8c:36:12:b9:e5:9c:8a:b5:0c:
         61:73:3c:36:30:ae:2e:3d:50:9c:fe:8f:fd:e3:ec:10:ee:4b:
         c5:4d:23:03:00:b6:c7:05:d5:23:5e:0c:33:9f:62:52:5d:26:
         3e:81:ad:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:22:35 2024 by rpki-client on console-fra.rpki-client.org