Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3138312e3232352e3138302e302f32322d3234203d3e203238323031.roa
File:                     3138312e3232352e3138302e302f32322d3234203d3e203238323031.roa (raw, json)
Hash identifier:          hBRSe3EDM0zAR3+2YtaGkfSdt8boSpxMWoe6Yjz7Sd0=
Subject key identifier:   E5:33:53:49:4E:E7:06:25:6E:6A:E0:F6:6E:9C:59:26:65:63:3C:3C
Certificate issuer:       /CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Certificate serial:       02D5EA9FAB9631D8FFBDAE03787158FD39B03D2F
Authority key identifier: AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3138312e3232352e3138302e302f32322d3234203d3e203238323031.roa
Signing time:             Wed 10 Apr 2024 12:39:44 +0000
ROA not before:           Wed 10 Apr 2024 12:34:44 +0000
ROA not after:            Wed 09 Apr 2025 12:39:44 +0000
asID:                     28201
IP address blocks:        181.225.180.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
                          rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:27:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:d5:ea:9f:ab:96:31:d8:ff:bd:ae:03:78:71:58:fd:39:b0:3d:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
        Validity
            Not Before: Apr 10 12:34:44 2024 GMT
            Not After : Apr  9 12:39:44 2025 GMT
        Subject: CN=E53353494EE706256E6AE0F66E9C592665633C3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:42:ff:84:fc:58:ad:14:f1:08:40:f1:12:2b:
                    e3:43:7d:a6:ef:91:b2:f6:ee:bf:e5:95:0b:85:5b:
                    14:99:3d:0f:45:68:54:d6:62:ea:0b:fe:1a:e8:13:
                    01:ed:c3:4e:bb:09:68:9c:d9:c8:8c:97:98:37:18:
                    79:f2:aa:9e:14:80:7a:a8:8d:78:88:3e:9b:e3:f9:
                    b9:6a:4b:df:40:4e:bc:cf:b9:35:ca:83:79:21:63:
                    c0:6f:34:e3:44:97:d9:dc:4a:52:0b:30:d9:ce:16:
                    c0:9d:dd:cd:df:0d:40:68:49:c0:6d:f8:4b:65:df:
                    a8:02:e5:b9:42:eb:6d:40:05:b4:3e:a1:77:51:44:
                    63:fe:67:89:8f:a6:6f:7d:da:83:e0:e0:4a:d2:c0:
                    52:d1:84:ed:47:0b:01:2d:aa:9c:f5:9c:f3:d9:69:
                    f0:13:ad:6c:39:8b:47:10:e2:b6:17:69:15:d6:95:
                    2f:b0:aa:96:d2:00:d9:8a:24:b2:a6:0d:2e:3c:ed:
                    13:d2:bf:fe:67:49:b9:96:0e:86:48:c2:11:43:18:
                    fa:f2:da:08:28:ad:c7:ae:a3:b1:ac:ed:e3:87:b1:
                    00:d9:ab:27:b5:d1:d5:17:85:6b:3e:9d:53:25:50:
                    d3:5a:cb:f7:2a:eb:03:a8:ce:69:8e:97:78:78:f9:
                    5a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:33:53:49:4E:E7:06:25:6E:6A:E0:F6:6E:9C:59:26:65:63:3C:3C
            X509v3 Authority Key Identifier:
                keyid:AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3138312e3232352e3138302e302f32322d3234203d3e203238323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:32:4a:28:a8:5e:de:0e:bd:bd:7b:a0:d9:0d:8f:61:9e:ab:
         bf:9a:40:b6:6b:95:06:b6:4a:55:9e:a9:76:9e:6b:36:d6:26:
         6c:b0:d2:75:19:03:b6:49:20:5f:ea:0b:0d:8e:47:b8:d0:bd:
         2b:9d:ee:19:bc:5e:3e:83:2a:7a:e7:84:8f:98:8d:60:1c:d4:
         97:3d:a9:c7:35:11:49:aa:f0:66:a8:5a:04:4c:3b:3d:70:ac:
         8f:36:21:29:d1:de:03:b5:df:4e:15:bd:fb:70:17:62:e0:97:
         91:3e:05:a0:dc:64:69:bc:96:05:90:72:1f:ad:6e:9e:4a:7b:
         ae:ea:55:4f:0d:1d:76:d0:8b:16:3e:61:37:88:9b:fd:1a:53:
         02:af:d7:21:ba:83:e3:b0:cc:7e:67:cb:11:47:f2:0d:c5:6f:
         a2:05:49:63:ad:25:b5:c2:dc:c5:bf:0f:83:74:1d:6c:61:5a:
         61:77:1a:9e:41:2b:2e:65:c5:8f:e8:1b:ab:21:47:53:47:4e:
         a9:6b:68:93:3f:d2:14:36:7e:9d:f2:d0:b3:19:fe:ff:d8:82:
         1e:17:44:60:b7:57:80:32:9d:e7:db:9b:05:c1:d3:95:f7:3b:
         27:ae:17:df:26:17:28:6a:b6:3a:f3:8c:12:df:ea:d1:bd:e3:
         bd:5a:0f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:01 2024 by rpki-client on console-ams.rpki-client.org