Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/1/3138312e3233332e3139312e302f32342d3234203d3e20323731353537.roa
File:                     3138312e3233332e3139312e302f32342d3234203d3e20323731353537.roa (raw, json)
Hash identifier:          wDiRE2wl4gD1xJEPk7PZJfGoEImGy+DemqBPSnHLiik=
Subject key identifier:   67:D3:E6:3D:AC:84:34:6B:A9:E7:13:36:F9:1F:49:E2:63:44:B5:EF
Certificate issuer:       /CN=8EAA354A58DA25563FA50D71839B6A66106FB7D8
Certificate serial:       2EF4EFDF586F7EA3C60154996539A74782A50858
Authority key identifier: 8E:AA:35:4A:58:DA:25:56:3F:A5:0D:71:83:9B:6A:66:10:6F:B7:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAA354A58DA25563FA50D71839B6A66106FB7D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/1/3138312e3233332e3139312e302f32342d3234203d3e20323731353537.roa
Signing time:             Thu 04 Apr 2024 16:40:23 +0000
ROA not before:           Thu 04 Apr 2024 16:35:23 +0000
ROA not after:            Thu 03 Apr 2025 16:40:23 +0000
asID:                     271557
IP address blocks:        181.233.191.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/1/8EAA354A58DA25563FA50D71839B6A66106FB7D8.crl
                          rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/1/8EAA354A58DA25563FA50D71839B6A66106FB7D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAA354A58DA25563FA50D71839B6A66106FB7D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:48:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:f4:ef:df:58:6f:7e:a3:c6:01:54:99:65:39:a7:47:82:a5:08:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EAA354A58DA25563FA50D71839B6A66106FB7D8
        Validity
            Not Before: Apr  4 16:35:23 2024 GMT
            Not After : Apr  3 16:40:23 2025 GMT
        Subject: CN=67D3E63DAC84346BA9E71336F91F49E26344B5EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d1:0b:73:d3:78:dc:80:8e:93:30:38:17:11:
                    44:8c:92:df:e8:3f:60:4e:d4:ae:03:13:95:7f:22:
                    4d:1b:ff:d3:7b:82:82:a3:77:31:77:b6:ce:a3:63:
                    4f:36:2e:7c:c7:63:0b:21:94:90:22:57:ce:1e:f1:
                    d2:2e:fa:af:f0:2b:8e:96:e0:72:99:f3:ce:40:b4:
                    7e:90:60:2c:ba:67:18:e5:eb:c9:97:7f:83:77:df:
                    00:ad:bb:73:31:fe:4f:fe:3a:f5:7c:23:99:1d:5e:
                    09:7c:8f:72:ff:03:86:5b:2a:99:fb:96:0c:bb:9b:
                    fb:51:5e:7e:ae:fd:30:16:65:88:6c:c7:56:ab:84:
                    4a:f5:dc:42:d3:00:b0:cb:a0:a4:45:6a:85:b3:09:
                    f2:8a:6d:ea:ba:81:b9:82:58:6e:57:41:05:d6:a0:
                    f5:53:9a:8f:80:dc:bb:50:1d:18:8a:f7:11:0b:ab:
                    40:0e:86:45:58:71:cd:90:ac:05:bb:75:73:fc:69:
                    38:41:6d:28:df:56:4f:b9:d2:e8:08:9c:94:bb:d9:
                    d3:e4:6b:e3:03:02:40:36:f1:32:e3:56:1c:0f:78:
                    18:f7:e0:7c:2e:0c:01:e1:b5:1d:09:6d:35:5d:12:
                    bc:0b:85:a8:17:8b:32:81:82:72:a7:ef:6c:01:d4:
                    0f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:D3:E6:3D:AC:84:34:6B:A9:E7:13:36:F9:1F:49:E2:63:44:B5:EF
            X509v3 Authority Key Identifier:
                keyid:8E:AA:35:4A:58:DA:25:56:3F:A5:0D:71:83:9B:6A:66:10:6F:B7:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/1/8EAA354A58DA25563FA50D71839B6A66106FB7D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAA354A58DA25563FA50D71839B6A66106FB7D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/1/3138312e3233332e3139312e302f32342d3234203d3e20323731353537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:77:76:1c:00:54:c0:12:dc:4d:45:ac:3e:b4:51:3e:e3:e5:
         ca:82:45:bc:c5:ee:0f:be:c5:01:7d:e8:21:05:4c:75:0f:ee:
         08:c0:13:fb:bd:18:52:c1:3c:57:17:2d:23:ef:12:3b:3e:a6:
         f6:a2:d6:a3:fd:55:5d:27:51:84:f0:e8:43:00:be:83:4b:80:
         ab:0d:57:e8:20:cf:d6:72:7a:2c:4a:43:bc:e6:29:42:8f:15:
         46:36:c0:42:36:0d:e4:af:1a:4f:0c:96:e5:a2:ac:9d:b0:8f:
         3c:af:1b:1a:9a:db:2e:12:dc:da:cf:20:6d:d1:5c:bb:91:72:
         b0:ff:18:51:22:c9:f3:96:26:90:5b:f4:a5:fe:d8:57:d9:7d:
         16:36:c6:33:e9:c4:82:4d:3e:8e:92:94:c6:7e:00:9e:c2:e9:
         36:cb:3a:ea:d4:8a:03:d1:32:48:5e:e3:8e:da:84:73:5e:ad:
         63:48:4c:8f:f8:a0:80:7f:98:8d:7e:b3:44:7d:fb:11:d8:3a:
         7c:2b:40:42:ac:c4:c5:1a:96:0a:fa:1d:3f:5f:47:ff:0f:18:
         d6:d6:23:6f:bc:f9:99:76:d9:8a:a6:8a:db:a9:13:11:87:33:
         63:1c:9f:8d:b5:13:cf:ea:df:e8:63:99:84:b4:fc:db:7c:0c:
         9f:b9:7b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:34 2024 by rpki-client on console-fra.rpki-client.org