Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/1/3138312e3233332e3138382e302f32342d3234203d3e20323731353537.roa
File:                     3138312e3233332e3138382e302f32342d3234203d3e20323731353537.roa (raw, json)
Hash identifier:          G9XfQNyoYfLZJ+EOPaVKX1GC8NYoT4J9eehX9aoLUIw=
Subject key identifier:   EA:15:F0:A0:5F:CA:00:A3:22:9D:BC:62:62:87:51:D5:26:46:D7:1F
Certificate issuer:       /CN=8EAA354A58DA25563FA50D71839B6A66106FB7D8
Certificate serial:       235DAB1BD705E4CD2D8114B7622689CCF14FBF90
Authority key identifier: 8E:AA:35:4A:58:DA:25:56:3F:A5:0D:71:83:9B:6A:66:10:6F:B7:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAA354A58DA25563FA50D71839B6A66106FB7D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/1/3138312e3233332e3138382e302f32342d3234203d3e20323731353537.roa
Signing time:             Thu 04 Apr 2024 16:40:22 +0000
ROA not before:           Thu 04 Apr 2024 16:35:22 +0000
ROA not after:            Thu 03 Apr 2025 16:40:22 +0000
asID:                     271557
IP address blocks:        181.233.188.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/1/8EAA354A58DA25563FA50D71839B6A66106FB7D8.crl
                          rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/1/8EAA354A58DA25563FA50D71839B6A66106FB7D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAA354A58DA25563FA50D71839B6A66106FB7D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 00:52:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:5d:ab:1b:d7:05:e4:cd:2d:81:14:b7:62:26:89:cc:f1:4f:bf:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EAA354A58DA25563FA50D71839B6A66106FB7D8
        Validity
            Not Before: Apr  4 16:35:22 2024 GMT
            Not After : Apr  3 16:40:22 2025 GMT
        Subject: CN=EA15F0A05FCA00A3229DBC62628751D52646D71F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e8:91:50:39:e7:ed:c4:b2:5f:2c:8c:1c:01:
                    67:b3:8a:db:53:d1:aa:f9:95:4a:5e:dc:62:ec:d7:
                    10:cc:38:07:d8:02:95:9b:3e:cf:c8:b0:47:82:ee:
                    9d:37:5f:51:3d:e7:ac:86:d2:d0:1e:fd:3d:cf:70:
                    76:f1:a2:90:23:15:df:3f:28:e2:64:33:d4:65:ed:
                    b3:40:2d:9f:4d:c6:11:cc:b1:92:e8:88:cc:f2:22:
                    6f:a4:f7:52:39:b3:b2:32:12:5a:91:0d:86:57:98:
                    2c:f8:82:96:8a:b2:a9:16:b4:56:f2:c2:5d:e3:5a:
                    7e:16:ae:df:75:a8:15:20:21:98:1c:6e:23:7a:8e:
                    c0:f7:1e:8a:ce:6c:51:c5:34:d4:a3:91:ac:e5:23:
                    3e:8e:5d:fc:21:df:3a:f0:59:7e:8e:85:57:cf:21:
                    04:00:fa:42:e6:1f:e9:7e:ed:c6:4d:da:8a:a2:85:
                    37:b0:7d:32:3e:2f:97:7b:70:e1:0f:e5:34:e3:c9:
                    64:ea:be:95:fe:24:ef:a3:fe:00:65:21:d9:1b:b7:
                    98:1d:5d:86:72:da:8f:ac:89:49:3b:eb:31:0e:f6:
                    c4:ff:c7:c3:e5:b9:3d:07:e7:f7:64:51:db:9d:8c:
                    30:c4:15:2c:06:51:05:6e:49:64:43:1f:32:7b:df:
                    1d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:15:F0:A0:5F:CA:00:A3:22:9D:BC:62:62:87:51:D5:26:46:D7:1F
            X509v3 Authority Key Identifier:
                keyid:8E:AA:35:4A:58:DA:25:56:3F:A5:0D:71:83:9B:6A:66:10:6F:B7:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/1/8EAA354A58DA25563FA50D71839B6A66106FB7D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAA354A58DA25563FA50D71839B6A66106FB7D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/1/3138312e3233332e3138382e302f32342d3234203d3e20323731353537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:fa:d0:67:bf:d4:4f:42:29:6e:39:e5:bf:65:f1:5d:4f:16:
         f6:a6:08:05:09:a7:55:d2:1f:b5:a3:81:3e:48:45:af:e5:6f:
         70:55:52:d6:1d:42:c0:27:e8:b0:23:03:2e:66:35:28:96:d7:
         30:57:f3:c7:22:28:25:d7:a8:b5:f1:1d:3f:52:2b:2e:23:f7:
         8a:ce:f0:6f:93:0d:3a:12:56:2e:ea:d6:c4:40:5c:ca:5c:32:
         fc:6e:cc:94:07:6c:51:c9:34:2f:5d:45:73:32:4b:f3:91:18:
         66:92:b7:5e:8d:35:55:bd:2a:3a:61:be:c5:7f:19:ca:00:43:
         c1:2f:c1:4e:be:31:61:5c:8e:0b:ef:b5:56:f5:30:54:4c:49:
         c5:41:6a:4d:a8:8c:f3:8a:21:2a:42:d3:a8:c4:6e:bd:0c:b4:
         44:72:3f:53:a5:0a:3c:57:79:9c:4e:01:aa:49:57:21:76:b5:
         62:a4:be:fa:f6:6d:13:46:5c:be:07:7f:3b:73:29:6a:b9:79:
         4f:26:68:e2:3d:d5:46:0b:a3:97:ed:ba:0f:b3:bc:d0:8f:77:
         c6:77:91:d4:ea:db:93:ef:4e:06:74:57:00:c0:e3:5c:94:de:
         ce:f2:d5:a1:f5:38:84:2d:c4:5f:1d:ee:09:4d:d5:a0:1c:5f:
         79:a0:0c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:25:34 2024 by rpki-client on console-ams.rpki-client.org