Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/3138312e3232352e3137302e302f32332d3233203d3e20323730393638.roa
File:                     3138312e3232352e3137302e302f32332d3233203d3e20323730393638.roa (raw, json)
Hash identifier:          NbIBafyNYQK3iwnTjcy+ilI4tOqz5R1/Db5YFUTacYI=
Subject key identifier:   FE:34:53:25:6C:74:B6:8E:B0:F6:09:8A:97:F6:7B:23:A7:BB:E4:F2
Certificate issuer:       /CN=D17816B530FEC6F7B82440893F151739594318FA
Certificate serial:       6B780F33947F616B94787105D559AA109E415F0E
Authority key identifier: D1:78:16:B5:30:FE:C6:F7:B8:24:40:89:3F:15:17:39:59:43:18:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D17816B530FEC6F7B82440893F151739594318FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/3138312e3232352e3137302e302f32332d3233203d3e20323730393638.roa
Signing time:             Wed 20 Nov 2024 19:34:42 +0000
ROA not before:           Wed 20 Nov 2024 19:29:42 +0000
ROA not after:            Wed 19 Nov 2025 19:34:42 +0000
asID:                     270968
IP address blocks:        181.225.170.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/D17816B530FEC6F7B82440893F151739594318FA.crl
                          rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/D17816B530FEC6F7B82440893F151739594318FA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D17816B530FEC6F7B82440893F151739594318FA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 19:58:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:78:0f:33:94:7f:61:6b:94:78:71:05:d5:59:aa:10:9e:41:5f:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D17816B530FEC6F7B82440893F151739594318FA
        Validity
            Not Before: Nov 20 19:29:42 2024 GMT
            Not After : Nov 19 19:34:42 2025 GMT
        Subject: CN=FE3453256C74B68EB0F6098A97F67B23A7BBE4F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ce:33:22:15:17:42:88:7e:69:b6:a9:1a:40:
                    38:27:05:4d:d6:c0:50:9c:8b:cf:08:ad:b0:69:cd:
                    43:8c:e6:d5:9f:33:84:d3:8f:86:bb:8d:c0:09:84:
                    0c:65:77:3d:fe:54:f8:d1:cd:5d:81:e7:d4:e0:90:
                    61:0d:f5:77:d6:d9:76:d7:28:4c:78:7f:8a:1e:ab:
                    4c:e3:7a:ce:73:b5:3d:31:30:0b:4d:23:0e:82:d9:
                    47:3f:f7:23:47:c7:85:b6:95:0f:aa:8e:4a:22:27:
                    bf:b1:98:5b:01:65:38:5a:a2:3e:2b:73:57:b4:92:
                    a5:af:1c:39:10:ff:37:56:74:90:e2:7d:5a:e1:8d:
                    99:f5:29:5f:5b:7f:1b:d7:ab:ce:dc:c7:8d:7b:41:
                    2b:e9:2f:f0:a7:fd:16:14:17:f0:6b:88:33:1a:8e:
                    1e:79:a0:ff:50:7a:17:20:c7:73:d5:f1:ad:5a:c9:
                    6d:cc:c1:df:0a:1c:b4:a7:96:6f:33:c1:08:6a:bc:
                    36:59:68:be:86:a6:27:14:5f:33:5b:e6:39:85:b3:
                    37:ea:a7:fc:1f:0f:c4:6a:eb:9b:03:f3:c4:b0:32:
                    ae:8e:4e:e7:0d:89:eb:4a:2a:ff:75:13:c7:30:ac:
                    da:5b:e7:4e:73:8c:eb:2d:df:2f:16:99:11:12:2c:
                    a5:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:34:53:25:6C:74:B6:8E:B0:F6:09:8A:97:F6:7B:23:A7:BB:E4:F2
            X509v3 Authority Key Identifier:
                keyid:D1:78:16:B5:30:FE:C6:F7:B8:24:40:89:3F:15:17:39:59:43:18:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/D17816B530FEC6F7B82440893F151739594318FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D17816B530FEC6F7B82440893F151739594318FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/3138312e3232352e3137302e302f32332d3233203d3e20323730393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:23:e0:38:4d:e7:9a:f4:ff:82:28:09:87:48:54:5d:1f:ed:
         ee:1c:a9:f0:26:0a:75:76:77:f8:76:bd:dd:d5:da:dd:2e:32:
         7f:08:d5:25:5e:5c:7f:3b:97:c1:0a:fd:48:c4:17:e9:bc:20:
         ed:a8:69:1e:90:ca:17:9e:5c:79:81:40:95:07:30:e2:c0:63:
         84:f7:17:f7:4f:40:83:5a:05:64:50:2e:f2:2f:50:05:f8:59:
         f2:07:e5:e7:55:a0:54:ba:27:67:6e:80:ff:9d:48:58:16:12:
         73:e2:e5:ea:75:3b:58:d3:b1:d4:90:67:44:53:c2:3b:7d:fe:
         e6:c4:d0:46:ac:50:c2:94:5d:7e:ce:40:05:43:eb:b6:7f:2f:
         c1:8f:a8:9f:64:3a:cd:e5:5c:5d:60:ad:7b:d4:52:ed:be:6a:
         7f:c0:0e:25:43:fa:4e:ae:87:2c:c7:76:00:98:b7:bc:16:c9:
         7b:30:db:f6:cd:00:09:ec:34:04:c0:d3:ea:9c:b1:f1:dd:44:
         c2:c6:4b:61:4f:97:4f:14:1e:16:b5:c9:6f:ee:33:34:5a:3b:
         39:2a:74:18:f5:58:41:a2:51:6f:ac:b3:ac:6f:d7:27:ad:57:
         97:ce:1b:57:f8:4f:b6:3e:03:f9:9d:11:86:09:f9:20:05:87:
         78:42:20:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 18:58:06 2024 by rpki-client on console-fra.rpki-client.org