Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/1/3138312e3233332e3138382e302f32322d3232203d3e20323731353537.roa
File:                     3138312e3233332e3138382e302f32322d3232203d3e20323731353537.roa (raw, json)
Hash identifier:          /UjanSDHIb++L8X6xLF8te2/s6YqmjAoPrcIy0o2WYg=
Subject key identifier:   A1:D7:1E:07:EB:C4:7D:6F:D9:9B:CA:B2:31:EF:D9:AD:2F:48:7D:33
Certificate issuer:       /CN=8EAA354A58DA25563FA50D71839B6A66106FB7D8
Certificate serial:       63A55BE5C809C5C90BC123688657CD0372C65961
Authority key identifier: 8E:AA:35:4A:58:DA:25:56:3F:A5:0D:71:83:9B:6A:66:10:6F:B7:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAA354A58DA25563FA50D71839B6A66106FB7D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/1/3138312e3233332e3138382e302f32322d3232203d3e20323731353537.roa
Signing time:             Thu 04 Apr 2024 16:40:25 +0000
ROA not before:           Thu 04 Apr 2024 16:35:25 +0000
ROA not after:            Thu 03 Apr 2025 16:40:25 +0000
asID:                     271557
IP address blocks:        181.233.188.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/1/8EAA354A58DA25563FA50D71839B6A66106FB7D8.crl
                          rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/1/8EAA354A58DA25563FA50D71839B6A66106FB7D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAA354A58DA25563FA50D71839B6A66106FB7D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:48:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:a5:5b:e5:c8:09:c5:c9:0b:c1:23:68:86:57:cd:03:72:c6:59:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EAA354A58DA25563FA50D71839B6A66106FB7D8
        Validity
            Not Before: Apr  4 16:35:25 2024 GMT
            Not After : Apr  3 16:40:25 2025 GMT
        Subject: CN=A1D71E07EBC47D6FD99BCAB231EFD9AD2F487D33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:67:18:5f:06:3d:df:57:f2:06:50:8d:10:2d:
                    ac:e4:2b:f5:e3:f8:be:07:f1:3f:2f:81:6f:e7:7d:
                    f8:f2:85:86:e4:70:d8:a9:b0:7b:0a:10:a2:0e:b3:
                    b8:1a:4b:fd:85:a5:3b:00:3e:4c:d0:62:64:4f:70:
                    9a:da:2b:e3:76:7a:37:fb:c3:9b:0a:82:d8:ab:f5:
                    b8:70:a5:80:31:2b:28:89:b8:01:0a:f3:c8:34:c6:
                    36:86:b6:d3:5f:5c:09:f7:b3:03:79:76:4a:a2:7d:
                    2f:50:ee:71:f3:ab:f8:33:bc:0b:a8:37:85:52:36:
                    0b:20:33:cb:69:16:a0:c0:14:69:0e:be:ab:54:66:
                    02:1d:73:ec:0e:d4:a1:05:65:11:44:e0:0d:b1:5f:
                    5e:96:d7:41:35:76:0d:5b:d1:de:99:35:52:24:65:
                    9d:26:e7:0c:aa:85:08:79:cc:85:e6:fa:90:c7:a4:
                    24:f6:56:b7:e7:ee:dc:b3:a7:71:c7:39:01:c0:a5:
                    7f:09:98:5b:b8:15:d8:e9:fa:e4:ad:b3:10:f9:72:
                    fd:fd:e6:0b:50:ad:94:0a:6f:e4:38:e4:65:80:b3:
                    80:b0:d5:95:77:8e:cb:f5:d3:75:b1:a1:09:2a:42:
                    c0:f5:ad:7a:ed:31:72:5f:f5:77:49:25:f9:23:a9:
                    f8:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:D7:1E:07:EB:C4:7D:6F:D9:9B:CA:B2:31:EF:D9:AD:2F:48:7D:33
            X509v3 Authority Key Identifier:
                keyid:8E:AA:35:4A:58:DA:25:56:3F:A5:0D:71:83:9B:6A:66:10:6F:B7:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/1/8EAA354A58DA25563FA50D71839B6A66106FB7D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAA354A58DA25563FA50D71839B6A66106FB7D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/1/3138312e3233332e3138382e302f32322d3232203d3e20323731353537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:b8:c8:02:00:b9:c2:ec:cc:c2:f4:e0:26:32:d7:63:77:1f:
         5f:28:ef:c5:5c:45:43:82:7e:54:62:0d:b0:d5:31:f4:95:61:
         8d:44:e7:5a:6c:07:a2:17:b2:7b:da:a3:53:03:ca:51:db:5c:
         ea:84:1f:02:17:bf:28:32:b2:a6:91:c9:36:72:22:d6:38:6f:
         f1:72:98:85:01:0b:15:5d:06:ba:3f:27:6a:a8:a3:88:7d:ed:
         48:0f:8c:2c:4a:b4:88:5a:a0:4d:7b:69:3c:d6:a7:d3:14:39:
         25:48:03:89:bb:33:2c:8d:56:4d:a3:0f:90:6d:99:c4:e0:07:
         1f:9e:0b:a0:c8:9b:72:c4:70:32:14:0d:70:d1:8f:07:73:98:
         5d:27:72:9e:bc:66:67:b8:2e:ad:be:84:b4:6d:06:34:92:5c:
         3d:d8:5a:74:ba:48:e4:0c:d1:77:00:43:fe:65:97:59:37:c9:
         6b:40:a2:e1:b2:87:85:ae:2a:46:24:59:20:31:67:e1:03:d7:
         32:27:04:3d:7e:9f:09:0a:45:e4:3e:c4:58:a7:e9:88:eb:30:
         44:67:ea:0e:98:94:dc:e0:1e:c3:31:96:c4:29:d9:fa:7e:e8:
         d5:3a:5e:86:6e:e0:77:f5:24:55:f3:6b:5b:9b:0f:b3:83:c5:
         9f:96:26:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:34 2024 by rpki-client on console-fra.rpki-client.org