Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/3138312e3139312e37362e302f32322d3234203d3e20323637343532.roa
File:                     3138312e3139312e37362e302f32322d3234203d3e20323637343532.roa (raw, json)
Hash identifier:          qmV0QMNR0KTDvJ9KgQGCeMmp73Bm7vSU5Ru0h8/NDD8=
Subject key identifier:   BA:71:31:AF:0F:17:62:04:10:BD:9D:E5:0F:2B:1A:B4:3C:41:49:7C
Certificate issuer:       /CN=0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98
Certificate serial:       5771676101AA8753CD40FF1CEA88D01ADEF8C377
Authority key identifier: 0D:EB:92:F3:30:7B:0E:94:CC:70:D9:B2:1B:50:F6:FE:21:35:CD:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/3138312e3139312e37362e302f32322d3234203d3e20323637343532.roa
Signing time:             Mon 08 Jul 2024 19:43:07 +0000
ROA not before:           Mon 08 Jul 2024 19:38:07 +0000
ROA not after:            Mon 07 Jul 2025 19:43:07 +0000
asID:                     267452
IP address blocks:        181.191.76.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 16 Nov 2024 21:52:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:71:67:61:01:aa:87:53:cd:40:ff:1c:ea:88:d0:1a:de:f8:c3:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98
        Validity
            Not Before: Jul  8 19:38:07 2024 GMT
            Not After : Jul  7 19:43:07 2025 GMT
        Subject: CN=BA7131AF0F17620410BD9DE50F2B1AB43C41497C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4d:95:f8:ba:27:ea:74:81:51:cd:85:32:2a:
                    f0:ad:03:5f:af:97:ca:1f:5c:4b:ec:f7:a6:19:76:
                    b1:d5:3b:f6:00:a1:47:76:08:95:e4:0c:a6:22:8f:
                    25:26:d4:c5:f3:f3:3b:b9:d6:e6:52:91:16:64:8d:
                    6d:a1:a5:31:22:3f:fd:59:37:46:67:c6:9e:03:bf:
                    8f:57:00:fd:84:76:79:5d:0a:4f:6f:1f:70:67:66:
                    22:3a:2f:2f:99:c2:a4:93:9a:2b:f3:2a:c5:f7:a4:
                    5f:d7:9a:ef:e1:aa:5c:42:bf:c5:d9:bc:20:43:36:
                    73:cf:29:ba:b1:57:d4:90:b8:72:49:97:88:0c:8a:
                    11:df:00:85:8d:1e:4e:f5:0f:6b:37:62:9f:e4:51:
                    16:88:14:bf:68:a2:4d:6b:b6:12:04:64:01:32:b4:
                    f3:97:d9:66:52:ba:c4:68:86:e9:8c:d6:ed:02:84:
                    a9:72:36:62:2d:12:88:7e:36:07:c4:29:db:89:bf:
                    dd:3b:05:e2:e3:33:ad:b1:a4:f6:dc:bd:ac:bb:90:
                    02:b6:07:a4:29:b2:10:ee:e9:95:2d:d3:2d:e3:8c:
                    a3:dc:1e:84:1e:4c:b6:3d:d0:ff:c9:73:da:90:76:
                    72:ea:ed:22:93:eb:88:b4:e9:08:6e:78:79:e4:16:
                    90:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:71:31:AF:0F:17:62:04:10:BD:9D:E5:0F:2B:1A:B4:3C:41:49:7C
            X509v3 Authority Key Identifier:
                keyid:0D:EB:92:F3:30:7B:0E:94:CC:70:D9:B2:1B:50:F6:FE:21:35:CD:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/3138312e3139312e37362e302f32322d3234203d3e20323637343532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:db:80:cb:db:25:25:80:71:b0:d8:90:d3:d4:46:b3:34:47:
         33:05:15:81:e2:62:3b:14:7a:10:22:75:33:35:1e:60:7b:56:
         5f:0b:5d:f7:ad:03:2d:d2:28:42:84:38:5a:c4:9b:76:fa:60:
         1a:3d:e0:36:bd:1c:b0:0e:42:09:55:40:b3:ea:8e:85:48:1a:
         ff:c2:42:0e:9d:91:7e:25:0b:fb:88:05:c4:0a:a6:e5:d7:1e:
         14:05:ca:df:d2:54:da:1f:d3:29:23:4c:8e:35:8b:45:0c:6b:
         c4:70:7c:2b:27:24:24:5b:17:95:82:58:ce:4b:28:08:76:20:
         31:b5:05:e8:18:ec:e2:71:86:78:c1:e4:6e:f3:3b:5c:7e:6f:
         fe:26:c2:11:34:43:37:6c:20:58:b8:30:9f:80:c8:43:a7:74:
         a4:01:29:ff:fa:08:24:e6:31:dc:ae:db:a6:bc:79:a6:d1:13:
         59:73:c7:7c:c2:73:e8:51:7a:14:3a:c1:d5:f7:ec:30:b5:65:
         15:91:9c:a9:ae:c6:ca:ae:55:5e:d0:12:26:dd:b1:2f:bb:2d:
         2d:44:8a:50:81:88:69:6a:40:69:e0:a2:fa:b4:51:b8:fe:3e:
         21:ad:c3:12:63:1a:11:08:14:db:39:06:35:43:f4:55:ec:53:
         4a:38:da:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 16 02:55:59 2024 by rpki-client on console-ams.rpki-client.org