Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/3138312e3232352e3136382e302f32332d3233203d3e20323730393638.roa
File:                     3138312e3232352e3136382e302f32332d3233203d3e20323730393638.roa (raw, json)
Hash identifier:          ZDAVlVtPVgwimXXsL5WY3nJw+Arp3tuDxGS2cG15SUk=
Subject key identifier:   6C:69:4B:AB:55:DE:E2:23:8A:7D:89:58:B4:A9:27:82:1B:3A:6C:EF
Certificate issuer:       /CN=D17816B530FEC6F7B82440893F151739594318FA
Certificate serial:       128B4B69654C79E89C6FFEA8E4BAC2731605C801
Authority key identifier: D1:78:16:B5:30:FE:C6:F7:B8:24:40:89:3F:15:17:39:59:43:18:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D17816B530FEC6F7B82440893F151739594318FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/3138312e3232352e3136382e302f32332d3233203d3e20323730393638.roa
Signing time:             Wed 20 Nov 2024 19:34:50 +0000
ROA not before:           Wed 20 Nov 2024 19:29:50 +0000
ROA not after:            Wed 19 Nov 2025 19:34:50 +0000
asID:                     270968
IP address blocks:        181.225.168.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/D17816B530FEC6F7B82440893F151739594318FA.crl
                          rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/D17816B530FEC6F7B82440893F151739594318FA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D17816B530FEC6F7B82440893F151739594318FA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 02:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:8b:4b:69:65:4c:79:e8:9c:6f:fe:a8:e4:ba:c2:73:16:05:c8:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D17816B530FEC6F7B82440893F151739594318FA
        Validity
            Not Before: Nov 20 19:29:50 2024 GMT
            Not After : Nov 19 19:34:50 2025 GMT
        Subject: CN=6C694BAB55DEE2238A7D8958B4A927821B3A6CEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8a:b1:da:83:f3:f2:da:b5:22:96:43:89:af:
                    ff:d9:f9:d4:29:58:96:5c:6b:71:d0:e3:8a:24:46:
                    a3:cc:e2:ac:3d:2a:d3:c4:fb:8c:60:e6:50:46:c4:
                    d9:d3:31:78:30:8f:dc:de:25:a4:94:ea:34:bc:4b:
                    a4:80:70:a4:b5:b3:cb:1a:47:17:e0:ee:e7:1d:41:
                    dd:45:2e:41:f9:28:8a:10:70:94:8a:a4:a4:92:cd:
                    5f:59:ed:34:13:7f:0b:eb:93:f9:73:a3:5a:8f:c0:
                    27:c3:6c:42:c3:ef:c8:23:f8:ee:3f:b5:d5:05:95:
                    23:57:2e:4a:92:90:9e:28:c4:6e:1b:84:b4:e9:1d:
                    29:ee:a7:a5:47:97:24:f4:e3:5d:94:93:b0:6b:5b:
                    81:96:64:1a:29:56:cd:63:6d:ce:99:31:fb:e5:51:
                    a6:e4:7c:97:7f:48:4d:75:70:a5:07:68:7d:6d:11:
                    51:85:e7:43:74:44:41:31:1d:db:5a:3a:18:c1:c2:
                    e6:c9:64:3a:29:da:ac:bc:ef:3c:94:54:42:09:fe:
                    e2:6c:58:1f:96:50:c0:b2:d0:9b:fd:8c:43:08:b8:
                    f4:94:f5:92:6f:5f:1e:17:4e:31:8e:b3:d4:72:dc:
                    ac:41:3b:ae:72:dd:f4:cc:a6:d3:5d:24:41:c3:74:
                    6e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:69:4B:AB:55:DE:E2:23:8A:7D:89:58:B4:A9:27:82:1B:3A:6C:EF
            X509v3 Authority Key Identifier:
                keyid:D1:78:16:B5:30:FE:C6:F7:B8:24:40:89:3F:15:17:39:59:43:18:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/D17816B530FEC6F7B82440893F151739594318FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D17816B530FEC6F7B82440893F151739594318FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/3138312e3232352e3136382e302f32332d3233203d3e20323730393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:53:31:93:f6:cf:bb:15:25:aa:c9:31:76:3d:7e:82:fd:a4:
         be:46:02:c9:24:5b:01:c2:94:9b:88:12:1e:84:be:7f:1b:cf:
         9f:be:a9:5a:c7:be:e6:68:ef:cc:b2:68:86:8f:f1:06:91:04:
         2b:9f:2d:80:e5:f6:07:50:ad:7e:8b:2c:c0:91:cf:96:26:e0:
         34:79:6d:ae:78:16:85:88:4f:c7:8a:aa:b7:3c:31:3b:88:6b:
         a2:69:6b:80:c8:41:8d:81:24:24:1c:24:ab:17:59:f4:a8:37:
         d5:1e:8a:16:52:ac:d3:f9:bb:40:97:77:ce:d0:da:a1:c3:48:
         0d:ac:5e:bb:76:fc:1f:1a:fa:f8:5b:89:7b:77:70:69:4a:c8:
         bb:0b:51:ff:64:0d:40:ee:cc:5b:db:fe:d6:5c:2c:b8:c2:96:
         c9:fc:6a:24:66:9a:e1:6e:a8:d4:cf:c4:98:15:34:f6:13:18:
         0c:be:02:98:7b:1c:c0:5c:63:54:89:f3:4e:84:f0:66:c5:93:
         58:26:db:be:97:1a:e2:f3:3d:d4:65:8c:e2:de:3f:5b:27:21:
         26:43:24:0b:d1:92:ba:8c:f7:d4:4b:4c:61:83:35:e1:3c:43:
         de:06:24:17:b6:2f:4c:d0:c2:71:fc:4c:5a:f0:30:41:06:a9:
         ff:bf:e3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:52:47 2024 by rpki-client on console-ams.rpki-client.org