Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/1/3138312e3233332e3139302e302f32332d3233203d3e20323731353537.roa
File:                     3138312e3233332e3139302e302f32332d3233203d3e20323731353537.roa (raw, json)
Hash identifier:          nO4fQvR5zcamhoz6sOGTcmhs7Tty5uh7IWmwBDcRDFM=
Subject key identifier:   D2:99:C9:9B:10:46:C7:7D:46:F8:7D:9C:B2:84:18:38:87:A2:80:29
Certificate issuer:       /CN=8EAA354A58DA25563FA50D71839B6A66106FB7D8
Certificate serial:       66C4C0EE2CE9A097190C82973425BA3542322313
Authority key identifier: 8E:AA:35:4A:58:DA:25:56:3F:A5:0D:71:83:9B:6A:66:10:6F:B7:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAA354A58DA25563FA50D71839B6A66106FB7D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/1/3138312e3233332e3139302e302f32332d3233203d3e20323731353537.roa
Signing time:             Thu 11 Apr 2024 19:52:33 +0000
ROA not before:           Thu 11 Apr 2024 19:47:33 +0000
ROA not after:            Thu 10 Apr 2025 19:52:33 +0000
asID:                     271557
IP address blocks:        181.233.190.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/1/8EAA354A58DA25563FA50D71839B6A66106FB7D8.crl
                          rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/1/8EAA354A58DA25563FA50D71839B6A66106FB7D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAA354A58DA25563FA50D71839B6A66106FB7D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 00:52:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:c4:c0:ee:2c:e9:a0:97:19:0c:82:97:34:25:ba:35:42:32:23:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EAA354A58DA25563FA50D71839B6A66106FB7D8
        Validity
            Not Before: Apr 11 19:47:33 2024 GMT
            Not After : Apr 10 19:52:33 2025 GMT
        Subject: CN=D299C99B1046C77D46F87D9CB284183887A28029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:19:93:66:c7:bb:10:74:da:5b:97:92:15:15:
                    75:cb:b9:de:7d:b5:1d:d2:70:85:fc:af:c0:69:ad:
                    1f:11:06:e9:64:2c:8c:cb:d4:9a:3f:9b:77:e9:83:
                    f8:5d:65:ef:ed:61:3b:99:b7:e1:78:cb:36:0c:18:
                    20:a5:ae:38:86:6e:7e:18:3d:03:57:7d:d3:fd:98:
                    a7:47:19:3e:4d:6f:9a:fb:09:95:8c:82:af:08:3e:
                    e7:e0:52:20:29:11:97:7a:ec:9e:b0:78:8b:9a:28:
                    e4:bd:17:dc:be:c6:42:ec:2f:b4:5d:3f:d0:9c:b7:
                    91:84:61:ca:84:66:8d:b1:29:bf:48:08:75:0e:33:
                    68:06:b3:cf:7f:37:85:19:97:42:6c:97:44:b9:a7:
                    87:88:cd:32:a1:62:3b:be:92:4f:92:72:b7:de:e0:
                    4f:00:04:16:50:e0:7d:8b:21:ea:e4:d1:a4:7a:23:
                    d3:bc:c6:75:04:44:83:ee:b0:87:39:65:8c:cf:8f:
                    f2:18:8c:0f:3b:5d:42:87:a3:af:b1:1d:bb:c2:93:
                    4d:a1:35:ac:3e:92:a1:73:ef:5a:cb:24:d5:3d:45:
                    37:2e:ff:ff:22:a0:07:ee:bf:26:56:d4:c9:04:fa:
                    e8:ed:4d:0f:c6:3c:23:41:27:9f:9b:5d:d0:6c:96:
                    66:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:99:C9:9B:10:46:C7:7D:46:F8:7D:9C:B2:84:18:38:87:A2:80:29
            X509v3 Authority Key Identifier:
                keyid:8E:AA:35:4A:58:DA:25:56:3F:A5:0D:71:83:9B:6A:66:10:6F:B7:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/1/8EAA354A58DA25563FA50D71839B6A66106FB7D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAA354A58DA25563FA50D71839B6A66106FB7D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/1/3138312e3233332e3139302e302f32332d3233203d3e20323731353537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:ad:df:af:3e:87:ab:3b:96:c8:8b:d5:1e:39:c5:34:05:2b:
         6b:60:75:2f:e0:34:03:b5:30:a0:1c:4d:0e:91:f7:bd:e7:fb:
         93:41:fa:47:78:ed:f6:84:74:4b:ee:90:15:80:f7:ee:29:aa:
         cc:62:3e:bc:f1:df:da:76:c0:7d:4c:d1:ce:52:32:f4:87:c5:
         62:34:e2:79:c9:2f:b8:0b:e2:e2:81:02:64:0b:85:ca:dc:12:
         66:40:cf:fd:d6:87:91:36:f6:58:4c:6b:cd:08:0e:1f:90:3d:
         a8:85:67:b8:f0:c5:5b:a4:25:8f:02:01:7b:05:1c:ad:b8:3e:
         6a:02:21:ef:82:9f:e7:6c:89:31:81:b8:03:41:7a:95:2b:28:
         62:f7:7b:7d:be:2d:aa:54:8c:53:2f:6b:29:70:3b:c1:7a:48:
         cc:2b:c6:70:3d:b2:1c:00:6c:59:44:08:90:05:88:dd:e5:31:
         ac:25:5a:c2:18:fc:36:66:ee:1e:ad:db:91:c0:d2:6b:30:d0:
         d1:bd:c0:f6:2a:db:c4:40:52:49:1b:7a:ca:4f:6d:15:51:b4:
         e0:32:66:d5:f9:b4:7d:93:87:13:26:b2:a3:60:38:74:63:b0:
         99:fe:84:c7:fa:ba:96:eb:c5:3d:78:41:6b:f1:6c:6b:02:ff:
         8d:4c:dc:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:15:52 2024 by rpki-client on console-fra.rpki-client.org