Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/1/3138312e3233332e3138392e302f32342d3234203d3e20323731353537.roa
File:                     3138312e3233332e3138392e302f32342d3234203d3e20323731353537.roa (raw, json)
Hash identifier:          PBGSjD/b0493uPvlqtajgrdd/5yOYiW+lT7CiEpv6/g=
Subject key identifier:   0A:AF:41:70:2C:22:D9:88:B3:B1:F5:01:68:14:FE:2D:A6:41:35:B8
Certificate issuer:       /CN=8EAA354A58DA25563FA50D71839B6A66106FB7D8
Certificate serial:       3525BE4FC7122EF8A95217697AA8434BB8C19786
Authority key identifier: 8E:AA:35:4A:58:DA:25:56:3F:A5:0D:71:83:9B:6A:66:10:6F:B7:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAA354A58DA25563FA50D71839B6A66106FB7D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/1/3138312e3233332e3138392e302f32342d3234203d3e20323731353537.roa
Signing time:             Thu 04 Apr 2024 16:40:23 +0000
ROA not before:           Thu 04 Apr 2024 16:35:23 +0000
ROA not after:            Thu 03 Apr 2025 16:40:23 +0000
asID:                     271557
IP address blocks:        181.233.189.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/1/8EAA354A58DA25563FA50D71839B6A66106FB7D8.crl
                          rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/1/8EAA354A58DA25563FA50D71839B6A66106FB7D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAA354A58DA25563FA50D71839B6A66106FB7D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 00:52:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:25:be:4f:c7:12:2e:f8:a9:52:17:69:7a:a8:43:4b:b8:c1:97:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EAA354A58DA25563FA50D71839B6A66106FB7D8
        Validity
            Not Before: Apr  4 16:35:23 2024 GMT
            Not After : Apr  3 16:40:23 2025 GMT
        Subject: CN=0AAF41702C22D988B3B1F5016814FE2DA64135B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4f:23:ff:3d:d3:8a:ad:a4:ba:f3:1d:ee:76:
                    56:66:42:77:ea:85:f6:f7:9b:79:96:94:5a:b9:5f:
                    51:c8:c5:7c:95:b1:05:c6:46:9d:32:d5:d1:f6:76:
                    00:41:0b:cc:87:6f:a2:e5:5c:63:d6:a7:f2:1d:2d:
                    b4:57:d3:14:64:0b:e5:0b:3f:38:68:6d:bd:ca:b9:
                    9c:5f:8b:3a:8e:b8:06:90:9b:7a:ea:3e:84:0c:42:
                    c0:09:86:0a:6c:06:d5:13:36:de:71:38:18:e5:a8:
                    09:dc:28:d2:79:2b:ab:62:e2:37:f0:36:b1:ed:6d:
                    f1:07:08:b1:df:b7:55:c7:5f:ab:08:2d:23:5f:86:
                    73:68:ff:4f:d9:72:b4:74:6c:05:9e:8d:71:7e:df:
                    69:1b:2f:3d:0d:7c:0c:46:6d:7c:61:dd:5f:1e:e2:
                    b2:1d:16:86:2e:c5:a3:fc:63:62:39:03:46:a2:9b:
                    ef:06:7f:be:79:ff:f6:35:65:b9:c7:ec:44:e5:33:
                    bb:a7:85:eb:1e:72:52:8c:7b:12:dc:af:ee:84:b9:
                    50:9a:fc:30:df:10:86:4d:f5:8b:e5:35:7e:35:1b:
                    c4:7c:37:6d:dd:11:97:bd:2d:89:6b:0c:52:aa:dd:
                    66:d2:dd:09:bf:66:ba:e4:a6:9b:38:11:b5:b8:61:
                    81:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:AF:41:70:2C:22:D9:88:B3:B1:F5:01:68:14:FE:2D:A6:41:35:B8
            X509v3 Authority Key Identifier:
                keyid:8E:AA:35:4A:58:DA:25:56:3F:A5:0D:71:83:9B:6A:66:10:6F:B7:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/1/8EAA354A58DA25563FA50D71839B6A66106FB7D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAA354A58DA25563FA50D71839B6A66106FB7D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/1/3138312e3233332e3138392e302f32342d3234203d3e20323731353537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:d3:84:f3:80:ed:47:db:d6:7f:0c:4e:a5:7f:28:75:10:c1:
         7b:5a:ca:9c:8a:23:d6:a2:50:76:5b:0b:c9:77:19:6e:66:3a:
         7a:18:b4:f8:1d:21:68:84:bb:b6:8a:e8:d2:f1:2f:1b:a8:48:
         79:20:06:1f:f4:07:e4:7f:52:cb:2f:fb:24:ac:1a:13:9a:e8:
         98:d0:e3:c8:ec:73:df:7a:93:55:2c:f3:d9:95:d0:59:bf:63:
         75:21:1b:6d:98:45:ae:53:6c:4a:b8:6b:b9:f2:85:c0:f9:63:
         4e:93:f9:7e:1d:06:58:ec:8a:05:d2:0f:21:62:81:cd:b7:07:
         f6:0b:31:79:bf:9b:e8:82:5a:6b:c7:c8:3d:ee:19:b5:d6:01:
         92:b4:cf:54:e3:66:a8:67:d2:b0:30:a1:08:7c:65:63:9f:67:
         23:f3:9d:2c:5e:ab:d0:4a:99:0d:9a:8f:cc:f0:af:eb:8b:c6:
         ca:d8:27:13:8f:fe:fb:6f:53:57:02:cb:fb:b1:3c:7b:fd:e2:
         ff:d1:60:52:dc:eb:66:19:e1:fa:c8:54:e5:4d:63:3d:52:6e:
         87:e9:2b:ab:51:e7:cf:9a:ab:5b:8d:b7:5d:e1:de:1d:a2:d1:
         5e:5e:f4:e3:13:c7:58:3e:2b:8e:06:c1:f7:2d:54:fc:34:5e:
         cd:2c:aa:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:25:34 2024 by rpki-client on console-ams.rpki-client.org