Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/1/3138312e3137342e3231322e302f32322d3234203d3e20323731353438.roa
File:                     3138312e3137342e3231322e302f32322d3234203d3e20323731353438.roa (raw, json)
Hash identifier:          2SXkGgbeKsbwHEkSGrOc0o0/pPJg0YzaOHAC2ZoDwxw=
Subject key identifier:   D9:65:FD:46:FD:0D:54:9B:43:0C:29:42:67:F5:E3:AC:08:47:71:4E
Certificate issuer:       /CN=090868DBC98ADC1F6A723C3495F8BFBDF361207C
Certificate serial:       754CE793867879C1A2E457EAEADC047BB04A241F
Authority key identifier: 09:08:68:DB:C9:8A:DC:1F:6A:72:3C:34:95:F8:BF:BD:F3:61:20:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/090868DBC98ADC1F6A723C3495F8BFBDF361207C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/1/3138312e3137342e3231322e302f32322d3234203d3e20323731353438.roa
Signing time:             Wed 03 Apr 2024 22:44:39 +0000
ROA not before:           Wed 03 Apr 2024 22:39:39 +0000
ROA not after:            Wed 02 Apr 2025 22:44:39 +0000
asID:                     271548
IP address blocks:        181.174.212.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/1/090868DBC98ADC1F6A723C3495F8BFBDF361207C.crl
                          rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/1/090868DBC98ADC1F6A723C3495F8BFBDF361207C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/090868DBC98ADC1F6A723C3495F8BFBDF361207C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 10:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:4c:e7:93:86:78:79:c1:a2:e4:57:ea:ea:dc:04:7b:b0:4a:24:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=090868DBC98ADC1F6A723C3495F8BFBDF361207C
        Validity
            Not Before: Apr  3 22:39:39 2024 GMT
            Not After : Apr  2 22:44:39 2025 GMT
        Subject: CN=D965FD46FD0D549B430C294267F5E3AC0847714E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:54:b8:2a:b4:90:0b:a0:ce:9d:04:9e:7c:18:
                    43:08:45:8a:3d:3e:50:09:a7:09:e4:81:2a:c5:b0:
                    0f:05:54:09:ae:ed:5b:69:e8:d0:ac:a2:8a:91:6b:
                    d0:cc:af:dc:07:94:a0:f4:82:4d:a2:27:49:cb:cf:
                    ad:fb:13:4b:cc:a3:95:e3:4b:df:90:46:73:70:a1:
                    0c:ae:e8:6d:fe:66:7f:d5:e2:c6:46:fa:f7:5b:20:
                    00:86:bc:29:7f:38:c8:be:31:86:97:67:5a:a9:05:
                    10:db:57:56:6d:50:a5:6a:a8:48:e7:a3:16:ad:6f:
                    89:41:b3:ca:d4:7d:57:dc:26:a3:03:35:c5:36:4b:
                    5c:13:5e:57:f9:e8:e7:bc:04:f8:5d:a9:be:14:d1:
                    d1:d3:e5:5d:ba:f0:bc:b2:e8:9c:9b:58:3b:48:ca:
                    37:85:54:95:92:a4:e1:b6:d7:8e:77:2c:cb:9b:ee:
                    f1:9a:03:7f:1f:43:09:d1:06:e1:a3:15:67:4b:2e:
                    58:5c:38:99:43:6d:b2:ca:21:d8:cb:90:2d:73:11:
                    8c:18:d6:df:99:cb:b4:a6:82:73:93:8d:90:a6:fe:
                    f7:31:2b:7e:d0:92:a3:0c:8b:55:c2:67:de:40:b6:
                    03:48:35:11:cd:41:81:59:85:63:70:8a:5c:6e:9c:
                    42:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:65:FD:46:FD:0D:54:9B:43:0C:29:42:67:F5:E3:AC:08:47:71:4E
            X509v3 Authority Key Identifier:
                keyid:09:08:68:DB:C9:8A:DC:1F:6A:72:3C:34:95:F8:BF:BD:F3:61:20:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/1/090868DBC98ADC1F6A723C3495F8BFBDF361207C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/090868DBC98ADC1F6A723C3495F8BFBDF361207C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/1/3138312e3137342e3231322e302f32322d3234203d3e20323731353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:45:e5:59:77:17:27:85:a0:59:9c:1f:8c:91:37:13:9d:73:
         4e:ea:13:b0:17:9e:e8:8c:c7:bf:48:b1:dc:a4:6a:eb:c0:aa:
         b7:2b:29:cb:d7:6b:50:a9:de:c7:a6:d1:98:e3:53:c4:d8:2c:
         3a:64:a3:95:a0:b2:8c:cc:09:ef:4d:ad:7c:56:0f:ab:82:3a:
         27:45:30:d6:da:fe:69:13:ec:dd:0a:84:a2:01:1d:d8:36:33:
         bf:06:64:5f:3d:05:8c:e4:8b:24:f4:88:5c:16:2f:e7:5b:c2:
         90:89:ba:02:31:af:23:97:2d:3a:f8:9e:c7:4d:78:3a:c6:6c:
         d2:c1:b3:6f:d5:4f:58:35:b4:32:ea:d7:b7:0d:62:69:42:07:
         93:bb:8d:0e:4d:68:32:3f:0c:68:d0:67:dc:7c:64:f0:b6:de:
         f0:13:e8:8c:2e:86:da:a2:da:be:8e:5c:40:05:e4:30:67:ac:
         b4:00:b9:48:d2:74:17:97:56:3c:4e:e6:3a:24:6e:e6:3a:b3:
         4a:79:47:ba:40:52:fc:89:2a:ed:a0:cc:78:2b:95:2a:7d:c1:
         64:55:21:3b:ec:d3:da:a9:a3:a4:4d:14:9a:16:e0:da:b9:1a:
         23:ab:40:72:41:8c:6e:20:ee:67:94:8d:7d:7c:56:71:82:42:
         6b:ce:35:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 10:27:35 2024 by rpki-client on console-ams.rpki-client.org