Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/1/3230312e3135392e3136332e302f32342d3234203d3e20323730373933.roa
File:                     3230312e3135392e3136332e302f32342d3234203d3e20323730373933.roa (raw, json)
Hash identifier:          yB8ropM8ck1tituymdOwumRdoAbqxltIvJ0N0EmKuGQ=
Subject key identifier:   1D:CC:ED:4F:47:AA:BE:B5:E7:A3:96:3C:27:22:7E:30:38:F9:50:22
Certificate issuer:       /CN=B44441CC8BE361C80B2B79E2EB78406E56E536AD
Certificate serial:       2500C9A7D82DBC264747B56004EDAC8ECB50F1B4
Authority key identifier: B4:44:41:CC:8B:E3:61:C8:0B:2B:79:E2:EB:78:40:6E:56:E5:36:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B44441CC8BE361C80B2B79E2EB78406E56E536AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/1/3230312e3135392e3136332e302f32342d3234203d3e20323730373933.roa
Signing time:             Thu 04 Apr 2024 22:37:33 +0000
ROA not before:           Thu 04 Apr 2024 22:32:33 +0000
ROA not after:            Thu 03 Apr 2025 22:37:33 +0000
asID:                     270793
IP address blocks:        201.159.163.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/1/B44441CC8BE361C80B2B79E2EB78406E56E536AD.crl
                          rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/1/B44441CC8BE361C80B2B79E2EB78406E56E536AD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B44441CC8BE361C80B2B79E2EB78406E56E536AD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:00:c9:a7:d8:2d:bc:26:47:47:b5:60:04:ed:ac:8e:cb:50:f1:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B44441CC8BE361C80B2B79E2EB78406E56E536AD
        Validity
            Not Before: Apr  4 22:32:33 2024 GMT
            Not After : Apr  3 22:37:33 2025 GMT
        Subject: CN=1DCCED4F47AABEB5E7A3963C27227E3038F95022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:81:ed:d8:6e:2d:1d:f1:82:57:49:16:31:8c:
                    a1:db:17:ce:04:11:1c:ee:e7:31:0d:9f:21:13:e5:
                    de:76:26:6a:9b:70:48:93:97:d8:89:c6:4f:fd:9f:
                    84:0e:8f:59:ff:c9:a7:57:92:e1:df:25:1b:39:ec:
                    6c:eb:07:36:e5:70:97:9b:62:3b:f5:96:77:ae:01:
                    bd:03:a8:7f:23:97:bb:77:49:b0:bc:94:53:bf:9a:
                    2b:81:94:8c:a7:18:37:67:eb:f5:95:b0:b5:b5:fa:
                    d7:b3:31:7d:bc:aa:03:a0:31:b3:cf:ab:57:44:39:
                    5e:44:a7:c9:f4:cf:58:27:c0:d0:89:7d:c5:25:10:
                    e4:d0:30:50:d8:3e:a7:ff:99:41:8b:c3:1e:ca:27:
                    5d:7e:84:7a:08:77:ec:df:7d:c0:e0:ff:b1:99:52:
                    57:aa:13:a4:c9:75:cd:34:dd:e1:d3:09:8a:74:36:
                    21:b9:5d:23:9a:c5:63:8c:d1:b9:b5:66:c4:04:d2:
                    24:50:cf:19:a6:e5:d8:92:1a:bb:85:7f:b2:24:aa:
                    8e:5f:00:80:fe:30:4d:ff:11:75:08:02:e9:51:27:
                    33:c1:a7:c1:c6:3b:95:16:24:33:ca:63:07:c0:29:
                    28:46:95:85:e0:4a:93:c1:5f:9d:d1:37:c8:36:3c:
                    de:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:CC:ED:4F:47:AA:BE:B5:E7:A3:96:3C:27:22:7E:30:38:F9:50:22
            X509v3 Authority Key Identifier:
                keyid:B4:44:41:CC:8B:E3:61:C8:0B:2B:79:E2:EB:78:40:6E:56:E5:36:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/1/B44441CC8BE361C80B2B79E2EB78406E56E536AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B44441CC8BE361C80B2B79E2EB78406E56E536AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/1/3230312e3135392e3136332e302f32342d3234203d3e20323730373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:b0:d0:22:52:7b:d7:7c:2b:43:82:0b:78:e5:c2:55:37:d0:
         99:a9:3d:cb:ef:51:e5:e5:18:bf:4f:fd:e2:84:e3:e5:b4:24:
         6c:55:7c:f3:61:5a:58:8e:1b:40:f2:15:35:b7:ac:c1:2b:94:
         18:c7:c8:8a:34:85:fe:83:ca:23:b8:bf:92:73:df:17:0c:5d:
         d3:77:ac:13:51:ee:b3:a4:cf:ff:2a:58:fa:19:d5:df:3b:29:
         f7:af:81:73:b7:db:af:b1:93:d5:c4:63:69:12:e8:25:60:e1:
         c9:88:b9:3c:99:03:e6:e7:b5:1b:65:07:ba:a5:26:aa:e0:c8:
         c8:6b:52:96:f0:fb:07:1d:5e:85:e3:76:62:a2:26:82:66:3e:
         b3:b0:b8:31:94:68:da:0e:65:bc:50:00:1e:65:4a:19:a9:c9:
         d8:41:36:0a:8a:41:db:80:4f:c1:e2:53:61:2c:99:27:c0:86:
         a7:7c:54:3d:8e:f0:c5:35:d5:59:cb:29:48:84:2d:eb:19:60:
         bd:f3:1a:80:10:d2:59:eb:4d:eb:57:84:41:a0:6c:3b:e1:ae:
         24:13:ae:57:3d:c2:ac:ab:e9:41:86:35:da:ce:c7:cf:6d:e8:
         7c:b2:7c:02:a3:79:9b:b6:96:c4:65:dd:60:e3:11:2a:4e:66:
         9d:7f:41:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 06:50:48 2024 by rpki-client on console-fra.rpki-client.org