Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/1/3138312e3233332e3138382e302f32332d3233203d3e20323731353537.roa
File:                     3138312e3233332e3138382e302f32332d3233203d3e20323731353537.roa (raw, json)
Hash identifier:          zcIJbABuwJ+9doapg9ZFZ8AjtIB5mx17fa/7PBcsPk4=
Subject key identifier:   90:64:DD:BC:26:59:30:3B:F8:EA:06:21:62:F6:0C:A1:4D:B8:FD:1F
Certificate issuer:       /CN=8EAA354A58DA25563FA50D71839B6A66106FB7D8
Certificate serial:       7314F9E20A5790061FE9F99A047620AF6F97D373
Authority key identifier: 8E:AA:35:4A:58:DA:25:56:3F:A5:0D:71:83:9B:6A:66:10:6F:B7:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAA354A58DA25563FA50D71839B6A66106FB7D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/1/3138312e3233332e3138382e302f32332d3233203d3e20323731353537.roa
Signing time:             Thu 11 Apr 2024 19:52:29 +0000
ROA not before:           Thu 11 Apr 2024 19:47:29 +0000
ROA not after:            Thu 10 Apr 2025 19:52:29 +0000
asID:                     271557
IP address blocks:        181.233.188.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/1/8EAA354A58DA25563FA50D71839B6A66106FB7D8.crl
                          rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/1/8EAA354A58DA25563FA50D71839B6A66106FB7D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAA354A58DA25563FA50D71839B6A66106FB7D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 00:52:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:14:f9:e2:0a:57:90:06:1f:e9:f9:9a:04:76:20:af:6f:97:d3:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EAA354A58DA25563FA50D71839B6A66106FB7D8
        Validity
            Not Before: Apr 11 19:47:29 2024 GMT
            Not After : Apr 10 19:52:29 2025 GMT
        Subject: CN=9064DDBC2659303BF8EA062162F60CA14DB8FD1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:16:e2:17:aa:70:1c:52:1a:11:c3:c3:62:79:
                    12:44:58:ea:c9:a9:1b:10:7a:3e:12:08:3b:5e:01:
                    a4:ae:47:b6:89:81:fc:58:e0:6d:ce:d5:f9:bd:82:
                    52:d2:e3:37:65:4d:bc:4d:63:35:9f:56:8b:6e:ce:
                    76:3a:17:b4:0e:48:90:f0:f0:80:70:9e:14:67:4d:
                    e9:2c:f3:29:f5:d0:62:ce:8c:a7:fc:2a:15:31:98:
                    b3:d7:b5:0b:04:a8:34:d0:6b:f5:6f:16:33:85:34:
                    d4:a8:d8:0f:4e:f8:2a:fd:7a:c7:27:0b:d3:b4:6c:
                    1e:70:13:3e:7a:01:3e:ef:c9:da:5f:2e:d1:77:38:
                    74:f3:38:9b:26:a0:67:50:93:ee:7e:f9:18:95:90:
                    53:06:32:df:8f:7a:9c:1b:95:62:2c:33:27:80:4d:
                    1a:3d:b8:36:77:7b:bc:74:34:6b:74:c7:92:bc:fb:
                    12:dd:af:fe:03:87:25:22:a2:a2:6d:6d:f7:14:73:
                    57:dc:a4:05:5c:c8:7e:e4:29:c9:94:72:bc:0e:42:
                    07:78:bb:33:39:7a:ad:2d:a4:15:d7:f5:ba:f9:73:
                    22:57:37:c6:c2:63:3f:34:1d:5e:89:78:16:2c:c5:
                    a7:e8:96:16:d0:0a:37:00:a6:19:f6:79:4c:29:b4:
                    2b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:64:DD:BC:26:59:30:3B:F8:EA:06:21:62:F6:0C:A1:4D:B8:FD:1F
            X509v3 Authority Key Identifier:
                keyid:8E:AA:35:4A:58:DA:25:56:3F:A5:0D:71:83:9B:6A:66:10:6F:B7:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/1/8EAA354A58DA25563FA50D71839B6A66106FB7D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAA354A58DA25563FA50D71839B6A66106FB7D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/1/3138312e3233332e3138382e302f32332d3233203d3e20323731353537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:cb:58:19:6c:a9:d5:f1:ee:50:59:0b:dc:e3:a6:11:13:27:
         9e:aa:29:6d:28:c8:4c:b7:0f:ee:ab:10:49:2e:3d:f6:75:1b:
         44:ea:1f:ef:8c:84:0d:bd:9a:cb:b8:66:f8:cf:8a:81:57:ce:
         71:0b:86:e8:0d:f4:1f:bc:4f:18:e7:b4:da:b0:f2:8f:05:cf:
         c1:e1:39:0c:d2:0c:d0:b5:5f:d5:fc:a7:5f:23:eb:5d:3f:31:
         ac:85:5d:49:8c:e5:61:c4:e0:ed:b1:c3:08:13:b5:ae:ca:95:
         ec:6f:b1:9a:50:0b:18:e0:d7:95:c1:c1:09:55:38:9c:bb:5e:
         70:c8:9b:3c:b3:b0:b3:d7:28:f0:a6:d9:00:19:14:27:48:d3:
         37:38:d8:8f:27:ec:1e:99:81:56:8f:92:ab:18:67:6c:63:e5:
         41:1c:8d:f9:f8:f0:d9:7b:6d:51:93:6b:43:0d:c5:3b:a4:a0:
         9f:83:43:b1:c3:b6:fd:22:b4:01:4d:6e:83:3f:25:12:82:eb:
         87:58:14:07:cf:61:f3:8f:41:9c:f6:7d:f9:9d:fa:cb:a5:5c:
         59:df:b8:27:15:23:69:04:cb:f2:6e:e4:ab:a9:a6:8b:60:ae:
         97:dd:e4:f7:25:4c:72:2f:78:bf:4c:6c:01:08:86:1e:44:1c:
         5e:3d:f4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:25:34 2024 by rpki-client on console-ams.rpki-client.org