Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/3138312e3137342e3232322e302f32342d3234203d3e20323731353632.roa
File:                     3138312e3137342e3232322e302f32342d3234203d3e20323731353632.roa (raw, json)
Hash identifier:          QQ/6wR1il6Q5HQgYeu0FLsS5MlwixETghqwE+w1C5ZQ=
Subject key identifier:   08:12:E5:E5:51:1E:49:0B:9D:FA:CA:97:C1:E2:CE:56:A4:2C:1B:41
Certificate issuer:       /CN=28FD1B2EA86D54440B540540BCE5870F080BB4A8
Certificate serial:       3490D906380872D3BC08C4967EE6FA804DEBA9D7
Authority key identifier: 28:FD:1B:2E:A8:6D:54:44:0B:54:05:40:BC:E5:87:0F:08:0B:B4:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/3138312e3137342e3232322e302f32342d3234203d3e20323731353632.roa
Signing time:             Wed 03 Apr 2024 19:24:11 +0000
ROA not before:           Wed 03 Apr 2024 19:19:11 +0000
ROA not after:            Wed 02 Apr 2025 19:24:11 +0000
asID:                     271562
IP address blocks:        181.174.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.crl
                          rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:90:d9:06:38:08:72:d3:bc:08:c4:96:7e:e6:fa:80:4d:eb:a9:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28FD1B2EA86D54440B540540BCE5870F080BB4A8
        Validity
            Not Before: Apr  3 19:19:11 2024 GMT
            Not After : Apr  2 19:24:11 2025 GMT
        Subject: CN=0812E5E5511E490B9DFACA97C1E2CE56A42C1B41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ce:0c:1a:53:17:9c:69:4a:8f:3f:93:dd:32:
                    9c:ab:d0:4a:85:91:76:3a:cc:c2:9c:47:e3:62:02:
                    f2:26:86:93:f8:3f:0c:2c:e4:15:4f:62:90:c6:eb:
                    b4:5f:98:1f:80:fa:13:85:bd:a0:5c:30:19:54:84:
                    3e:cb:19:af:44:bf:08:42:e9:4f:2e:96:d1:eb:58:
                    09:da:71:0b:d3:31:bd:c5:8e:66:fa:8b:01:66:ef:
                    40:92:ea:d1:68:0a:fd:8d:1e:be:99:6d:d0:91:75:
                    27:e7:16:b1:69:f5:1f:cf:26:e1:c6:54:5c:ab:50:
                    54:c4:20:6f:fb:20:79:49:74:78:d9:76:22:e2:56:
                    51:0c:7e:11:6d:2e:12:3a:3a:b3:20:e9:eb:a5:bb:
                    b6:62:14:97:0f:6f:66:8d:b5:fa:7f:21:d3:28:4a:
                    f3:47:92:19:aa:74:2d:05:a7:2f:54:a9:e5:f4:0b:
                    ea:93:bd:a3:f1:00:f7:b5:63:4f:62:41:6c:25:52:
                    95:41:11:12:92:53:0a:32:a9:39:8f:17:cd:bf:07:
                    34:de:a3:e4:88:06:97:d1:aa:aa:9d:a7:b0:dd:e6:
                    e7:f7:64:29:0e:ea:49:81:eb:a5:bc:8d:79:7e:1a:
                    c0:63:31:8f:53:68:07:23:c7:e1:69:36:56:51:be:
                    7a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:12:E5:E5:51:1E:49:0B:9D:FA:CA:97:C1:E2:CE:56:A4:2C:1B:41
            X509v3 Authority Key Identifier:
                keyid:28:FD:1B:2E:A8:6D:54:44:0B:54:05:40:BC:E5:87:0F:08:0B:B4:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/3138312e3137342e3232322e302f32342d3234203d3e20323731353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:ab:d3:8e:dc:65:30:d5:53:11:de:6d:8e:a8:72:72:8a:6c:
         e8:86:ab:45:3a:ca:0b:8c:01:b7:83:48:2f:da:9b:8d:2a:bf:
         48:be:a1:c9:2d:8e:67:1c:9b:f2:ce:0d:0a:d7:f8:d7:5b:7c:
         f2:b3:6b:e8:4e:b9:3a:8e:1e:5d:eb:44:cd:3e:25:34:39:7d:
         06:55:69:b4:84:b9:cc:c3:f5:a7:aa:9f:89:5d:6b:bb:89:af:
         7c:b0:7d:e0:09:11:df:93:81:05:62:75:4e:19:fa:0c:78:a2:
         80:dc:07:1e:97:e1:34:9d:da:a8:41:a4:cd:ae:b0:6e:01:18:
         2e:fa:98:ac:a0:cc:b3:7c:78:45:61:e2:af:05:18:a4:ce:6b:
         01:9c:0d:1a:77:64:27:04:c7:c4:88:cc:1e:63:7c:75:a0:c7:
         97:dd:a5:36:74:71:28:64:d2:09:41:f1:a2:6a:2a:7b:af:da:
         0a:e1:cb:89:92:20:77:7b:37:35:4d:21:3c:4e:82:7f:d6:3b:
         6c:66:1b:49:62:75:9c:19:65:29:26:6a:30:53:09:fe:5a:27:
         4b:83:25:d3:af:5e:13:ef:d8:c3:a7:2d:5e:30:93:69:b9:7d:
         42:9c:c6:4f:38:a2:47:98:48:5a:db:d8:5d:02:22:10:55:99:
         e0:06:ba:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:24 2024 by rpki-client on console-ams.rpki-client.org