Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/3230312e3138322e3233362e302f32322d3332203d3e20323637353439.roa
File:                     3230312e3138322e3233362e302f32322d3332203d3e20323637353439.roa (raw, json)
Hash identifier:          e7y+DT0rxLPwCoaQhPPN5eu2MMSAQHufYUsJe42LgU8=
Subject key identifier:   21:78:0C:86:8C:68:41:22:C9:4A:DB:6A:E9:1F:BC:A1:96:C7:B5:1E
Certificate issuer:       /CN=942F2D5AE55B7215DFCCA79C552D223D29B71DFF
Certificate serial:       52FA9DB2F2264795313C66932534EDA711DA828E
Authority key identifier: 94:2F:2D:5A:E5:5B:72:15:DF:CC:A7:9C:55:2D:22:3D:29:B7:1D:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/3230312e3138322e3233362e302f32322d3332203d3e20323637353439.roa
Signing time:             Fri 05 Apr 2024 01:23:06 +0000
ROA not before:           Fri 05 Apr 2024 01:18:06 +0000
ROA not after:            Fri 04 Apr 2025 01:23:06 +0000
asID:                     267549
IP address blocks:        201.182.236.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.crl
                          rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:fa:9d:b2:f2:26:47:95:31:3c:66:93:25:34:ed:a7:11:da:82:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=942F2D5AE55B7215DFCCA79C552D223D29B71DFF
        Validity
            Not Before: Apr  5 01:18:06 2024 GMT
            Not After : Apr  4 01:23:06 2025 GMT
        Subject: CN=21780C868C684122C94ADB6AE91FBCA196C7B51E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3f:fa:ab:50:33:8c:e6:41:1d:63:c7:60:93:
                    0f:00:3a:2e:cf:44:c2:de:15:5d:18:57:59:c7:88:
                    0c:e6:e4:38:49:69:c4:09:4e:ca:21:cc:0c:27:f3:
                    78:78:f3:d2:c2:a0:90:51:f0:de:ec:d9:cb:be:da:
                    00:46:0e:59:14:56:60:fc:89:18:5e:84:56:86:8a:
                    d9:6a:70:8b:7c:5e:99:a3:ac:a0:87:e6:4d:f5:c6:
                    df:d8:09:e2:7e:0c:cc:eb:78:5b:f3:b5:15:84:81:
                    37:e5:39:57:17:f9:13:1c:2b:eb:2b:c9:e0:dc:7e:
                    6d:0b:ad:8f:7f:3a:b4:7e:b5:c8:6d:fd:aa:0d:99:
                    bc:25:db:12:a7:c7:41:11:27:b6:bc:9d:53:43:b4:
                    da:f0:54:12:35:0a:44:1a:2d:77:b7:9b:83:fa:83:
                    f8:b5:f8:9c:36:e1:de:f2:2c:65:14:c2:a6:a3:2c:
                    ac:f9:f5:86:f2:96:53:02:e3:bf:4e:30:d7:6b:3a:
                    48:ff:c6:d3:14:22:6c:9c:37:00:0e:64:d4:21:2a:
                    47:fb:fa:22:5e:62:66:06:ed:50:18:f0:53:41:ac:
                    36:27:28:6e:85:d0:e0:64:e4:ad:8b:c1:1c:1f:57:
                    07:f6:a1:a1:57:45:43:e3:37:48:dd:5a:90:ed:b4:
                    e5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:78:0C:86:8C:68:41:22:C9:4A:DB:6A:E9:1F:BC:A1:96:C7:B5:1E
            X509v3 Authority Key Identifier:
                keyid:94:2F:2D:5A:E5:5B:72:15:DF:CC:A7:9C:55:2D:22:3D:29:B7:1D:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/3230312e3138322e3233362e302f32322d3332203d3e20323637353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b6:fe:ce:66:84:a6:1a:02:74:e2:26:e8:e5:38:c1:0b:3f:e4:
         27:6e:c6:57:dc:6b:ee:76:ce:b9:d0:96:57:93:80:04:58:89:
         24:30:2b:0c:90:41:0b:9b:9b:55:d7:2e:21:5f:df:82:b6:ae:
         59:8e:81:7c:bb:11:1f:bb:eb:e9:89:70:ac:c3:16:f4:67:ab:
         29:12:79:3b:44:40:19:18:9a:37:26:23:76:24:e1:38:74:44:
         aa:06:ea:9c:ff:64:51:76:fc:2c:5c:43:31:17:d7:21:6a:5a:
         6f:06:25:f3:4b:25:ef:83:d6:60:3c:73:21:37:37:05:ca:0e:
         d4:94:d8:c7:b3:c9:59:f5:4e:a0:60:b9:ed:16:e8:62:1b:c2:
         18:c4:c9:0e:e2:a0:70:12:f9:61:95:c0:9f:57:af:e1:36:e8:
         3e:73:e4:5d:21:59:18:4d:dc:69:d5:3b:b4:cc:31:88:68:c2:
         14:cc:e7:41:d7:f7:a2:55:c2:51:b2:35:bf:05:ed:7f:1c:03:
         60:c7:43:0d:bf:bb:e9:1c:1a:9e:79:92:2f:87:48:cb:db:ea:
         5a:2e:85:d0:af:50:02:f0:a7:a5:2b:4d:7f:da:ba:bf:2d:35:
         ea:66:ae:ca:d9:db:d3:4f:fa:62:08:02:c4:4b:2f:df:ab:4c:
         e7:c9:51:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:47 2024 by rpki-client on console-ams.rpki-client.org