Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/1/3138312e3233332e3139302e302f32342d3234203d3e20323731353537.roa
File:                     3138312e3233332e3139302e302f32342d3234203d3e20323731353537.roa (raw, json)
Hash identifier:          ZV+Gi67b9UzAgDbQDlMCT4OUuLlBVeEpGGo8OWFOjvM=
Subject key identifier:   73:27:00:ED:3E:56:DC:E1:7A:4A:78:3B:E2:03:C0:46:F2:F0:FA:84
Certificate issuer:       /CN=8EAA354A58DA25563FA50D71839B6A66106FB7D8
Certificate serial:       51E5BC67E8ABF2A71CF0DE4EF917D438307897BF
Authority key identifier: 8E:AA:35:4A:58:DA:25:56:3F:A5:0D:71:83:9B:6A:66:10:6F:B7:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAA354A58DA25563FA50D71839B6A66106FB7D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/1/3138312e3233332e3139302e302f32342d3234203d3e20323731353537.roa
Signing time:             Thu 04 Apr 2024 16:40:26 +0000
ROA not before:           Thu 04 Apr 2024 16:35:26 +0000
ROA not after:            Thu 03 Apr 2025 16:40:26 +0000
asID:                     271557
IP address blocks:        181.233.190.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/1/8EAA354A58DA25563FA50D71839B6A66106FB7D8.crl
                          rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/1/8EAA354A58DA25563FA50D71839B6A66106FB7D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAA354A58DA25563FA50D71839B6A66106FB7D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:48:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:e5:bc:67:e8:ab:f2:a7:1c:f0:de:4e:f9:17:d4:38:30:78:97:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EAA354A58DA25563FA50D71839B6A66106FB7D8
        Validity
            Not Before: Apr  4 16:35:26 2024 GMT
            Not After : Apr  3 16:40:26 2025 GMT
        Subject: CN=732700ED3E56DCE17A4A783BE203C046F2F0FA84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:32:c3:47:e6:9f:ba:91:8a:69:68:6e:61:b4:
                    d4:91:45:08:2a:40:d9:95:41:e3:bf:f6:34:80:b2:
                    aa:b2:21:f3:f1:49:25:4d:5f:22:44:76:0e:9e:ce:
                    38:a1:46:8f:7c:73:78:6c:c6:be:b7:00:2f:2f:a2:
                    cd:d3:44:20:c8:70:80:ca:58:e4:4c:fb:82:5d:5b:
                    9c:b1:9c:17:8f:4e:66:23:f9:aa:f4:a7:a7:80:5e:
                    25:5a:11:f7:ea:04:01:f4:15:2d:24:d0:11:d1:c5:
                    e3:f7:bf:3a:60:4b:9b:74:9a:5b:90:42:67:8c:fb:
                    09:d0:b3:74:8a:69:97:48:d9:2a:d8:64:ba:9a:0a:
                    86:18:90:68:78:81:81:e9:53:d4:a6:4a:41:ca:85:
                    48:aa:4f:41:e2:f4:d8:62:bf:18:56:f4:43:70:65:
                    0a:04:fd:0e:bf:bf:9f:31:62:7c:c4:ff:a2:2c:9a:
                    64:95:15:5a:98:ec:fa:8f:70:3b:cc:1e:c8:27:91:
                    81:e2:b8:e0:00:6e:7b:bb:4f:be:d5:f5:05:fe:53:
                    4d:3e:6d:5b:64:e6:cb:4c:6a:30:03:32:b6:af:fd:
                    22:b9:28:bf:5f:c1:f5:63:e1:a3:84:49:3a:41:b8:
                    a5:f2:ad:33:75:35:66:8c:19:0e:cc:ba:10:dc:bb:
                    89:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:27:00:ED:3E:56:DC:E1:7A:4A:78:3B:E2:03:C0:46:F2:F0:FA:84
            X509v3 Authority Key Identifier:
                keyid:8E:AA:35:4A:58:DA:25:56:3F:A5:0D:71:83:9B:6A:66:10:6F:B7:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/1/8EAA354A58DA25563FA50D71839B6A66106FB7D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAA354A58DA25563FA50D71839B6A66106FB7D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/1/3138312e3233332e3139302e302f32342d3234203d3e20323731353537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:31:44:82:af:cb:fd:1a:39:2d:52:cd:50:53:b1:ff:a0:d4:
         41:9c:08:68:8d:88:ae:c6:5f:5e:f6:04:4a:9c:cc:48:bf:d4:
         b6:61:70:fa:9c:a3:1f:8d:c2:af:46:ea:bd:b2:56:7f:6b:02:
         4a:0b:fd:94:0b:a0:7f:a8:5d:ea:41:02:d0:bb:4a:47:20:2e:
         57:49:94:e7:cc:b4:83:2b:8d:4d:6c:29:19:3a:f1:5f:9f:f6:
         b3:f6:60:c7:09:51:14:68:25:83:05:92:db:ff:b6:fd:0b:e9:
         8f:49:44:0d:13:0d:8c:0c:74:16:c3:c7:51:74:29:04:1b:dd:
         d8:e2:55:1b:88:ab:dd:b3:f9:16:b5:1e:26:c0:c3:4e:3b:b9:
         3d:ba:3e:fe:26:09:1b:6b:0c:2a:ba:bb:3e:84:01:40:99:ea:
         2c:58:cd:76:f3:7c:01:bf:e7:ec:0d:e9:1f:80:68:83:c1:4a:
         c3:d3:bc:67:7e:6f:f1:78:ee:17:37:74:11:11:aa:88:e3:43:
         d8:fa:a2:7c:90:1f:ec:f2:96:57:34:f8:4d:e4:1e:05:cb:37:
         78:34:a8:da:de:57:ae:10:f6:2c:e1:45:1d:96:b0:48:80:29:
         9f:81:16:86:75:74:34:c0:ec:a2:a0:3e:38:c8:6b:1d:54:0b:
         95:c9:51:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:34 2024 by rpki-client on console-fra.rpki-client.org