Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/1/3138312e3233322e3235302e302f32332d3234203d3e20323731353431.roa
File:                     3138312e3233322e3235302e302f32332d3234203d3e20323731353431.roa (raw, json)
Hash identifier:          WkhdiFlJFX/qAvMxcf6TKXATnIyRbWPbwSPB21ic9Bw=
Subject key identifier:   F9:4E:2E:E9:10:3E:E7:97:B5:F4:D9:45:9B:E9:AB:41:03:91:82:8D
Certificate issuer:       /CN=0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB
Certificate serial:       0B971AC10053A1F0637950A80C260E7D67BF824C
Authority key identifier: 0E:F7:13:1E:83:15:CF:BC:2A:0C:8E:B2:A6:84:48:B4:0D:F9:DD:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/1/3138312e3233322e3235302e302f32332d3234203d3e20323731353431.roa
Signing time:             Thu 04 Apr 2024 14:32:48 +0000
ROA not before:           Thu 04 Apr 2024 14:27:48 +0000
ROA not after:            Thu 03 Apr 2025 14:32:48 +0000
asID:                     271541
IP address blocks:        181.232.250.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.crl
                          rsync://rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:97:1a:c1:00:53:a1:f0:63:79:50:a8:0c:26:0e:7d:67:bf:82:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB
        Validity
            Not Before: Apr  4 14:27:48 2024 GMT
            Not After : Apr  3 14:32:48 2025 GMT
        Subject: CN=F94E2EE9103EE797B5F4D9459BE9AB410391828D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:53:a3:bb:f3:80:f1:e8:7e:63:e8:e3:32:92:
                    23:d0:6c:28:67:55:a9:e3:03:6b:33:af:d9:e9:21:
                    f3:6b:e3:1e:2e:e2:7d:7f:6b:7c:6f:c0:f6:9c:a0:
                    2d:41:d7:2f:84:ce:10:8d:8e:8a:db:1a:46:53:aa:
                    62:ff:fd:85:8c:1d:4b:46:3c:18:d3:7f:36:96:22:
                    29:b7:8e:55:26:da:cf:94:e5:6e:95:0f:34:44:9f:
                    e8:10:72:b6:69:b4:b7:e0:2a:d1:3e:9b:37:58:88:
                    dd:23:50:93:e8:78:b8:9c:a4:5d:19:e8:05:52:ff:
                    6b:06:94:cd:3f:51:a9:06:d6:0b:f1:bb:dd:f9:86:
                    67:ad:e9:05:8f:6b:49:74:40:5a:49:06:3a:ed:2d:
                    6a:64:cc:1a:e5:9b:f5:ed:72:e1:41:04:1d:c0:04:
                    67:af:f7:e1:d3:4a:49:3f:80:ef:83:d8:53:0a:c7:
                    de:87:fc:bc:e8:93:5e:c2:1c:aa:ed:f1:fb:27:4a:
                    24:e1:ba:99:93:32:af:a4:3d:d3:c9:ff:03:a3:dc:
                    d7:60:25:59:dd:5d:9a:2e:50:d3:41:21:8e:38:a4:
                    ab:09:35:ff:b0:2a:c7:30:87:87:66:90:c3:e0:1b:
                    86:68:0e:ee:e9:91:ac:b8:02:fc:bf:f1:7d:2e:55:
                    ab:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:4E:2E:E9:10:3E:E7:97:B5:F4:D9:45:9B:E9:AB:41:03:91:82:8D
            X509v3 Authority Key Identifier:
                keyid:0E:F7:13:1E:83:15:CF:BC:2A:0C:8E:B2:A6:84:48:B4:0D:F9:DD:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/1/3138312e3233322e3235302e302f32332d3234203d3e20323731353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:4d:5d:1b:15:0e:0c:08:af:9c:8e:3a:30:c0:6c:cf:52:af:
         07:20:6f:07:56:0c:00:64:cb:30:f8:d2:e2:24:40:53:d2:8d:
         27:f1:24:a2:78:f1:21:29:01:d3:84:27:3f:ae:4f:f9:6e:12:
         75:6f:58:bc:19:ea:fb:e2:ba:3e:13:f8:ee:e3:4b:68:0b:3d:
         bd:13:ca:5e:81:f1:b0:bc:f7:b7:e3:43:d0:f2:08:c5:56:56:
         d4:f0:ac:44:35:8d:32:fd:04:5a:e7:e3:06:d5:80:14:55:af:
         63:09:81:1c:85:a5:ec:ff:b8:ff:2e:e4:a1:7f:c8:63:50:ae:
         a9:aa:07:25:2c:26:24:a4:b8:ab:70:32:fd:dd:8c:d9:77:3f:
         d9:c2:54:99:d8:d5:e3:d6:7f:21:90:be:d7:fa:f1:7d:52:45:
         b7:f2:f6:b1:02:9c:b5:4a:8c:24:18:0d:3e:4c:a5:5c:a2:f6:
         c1:75:db:21:45:3b:23:3b:a3:82:58:fe:ea:e2:2b:6d:e1:9b:
         ed:61:af:39:01:13:90:84:9a:18:24:db:ae:49:58:62:7b:66:
         80:f1:5b:b1:fc:bf:34:b9:69:52:64:50:9b:1f:60:5b:0a:dc:
         25:06:db:34:e7:9e:bc:01:c0:8b:4b:fd:b6:a8:15:3c:74:c0:
         75:a1:e5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:32:43 2024 by rpki-client on console-ams.rpki-client.org