Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cn5jpWgU7NfBazeZPEL3pyLgUhkAEPBWGhP6utniEhXN/1/3138312e3137342e3235322e302f32322d3232203d3e20323731343438.roa
File:                     3138312e3137342e3235322e302f32322d3232203d3e20323731343438.roa (raw, json)
Hash identifier:          4CUM0FyZiFvsvPzOyQYt6HidmSY9y+eT44sBGdSgBAY=
Subject key identifier:   55:86:04:DC:6E:40:38:4B:DC:66:49:A2:DE:CF:71:CF:64:F5:A2:59
Certificate issuer:       /CN=558D17416B73E6E20D5942E510F11254EB2056A1
Certificate serial:       2C83A718C62E6D9722A76261752591B79E49A571
Authority key identifier: 55:8D:17:41:6B:73:E6:E2:0D:59:42:E5:10:F1:12:54:EB:20:56:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558D17416B73E6E20D5942E510F11254EB2056A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cn5jpWgU7NfBazeZPEL3pyLgUhkAEPBWGhP6utniEhXN/1/3138312e3137342e3235322e302f32322d3232203d3e20323731343438.roa
Signing time:             Fri 12 Apr 2024 01:53:45 +0000
ROA not before:           Fri 12 Apr 2024 01:48:45 +0000
ROA not after:            Fri 11 Apr 2025 01:53:45 +0000
asID:                     271448
IP address blocks:        181.174.252.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cn5jpWgU7NfBazeZPEL3pyLgUhkAEPBWGhP6utniEhXN/1/558D17416B73E6E20D5942E510F11254EB2056A1.crl
                          rsync://rpki-repo.registro.br/repo/Cn5jpWgU7NfBazeZPEL3pyLgUhkAEPBWGhP6utniEhXN/1/558D17416B73E6E20D5942E510F11254EB2056A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558D17416B73E6E20D5942E510F11254EB2056A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:83:a7:18:c6:2e:6d:97:22:a7:62:61:75:25:91:b7:9e:49:a5:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558D17416B73E6E20D5942E510F11254EB2056A1
        Validity
            Not Before: Apr 12 01:48:45 2024 GMT
            Not After : Apr 11 01:53:45 2025 GMT
        Subject: CN=558604DC6E40384BDC6649A2DECF71CF64F5A259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4a:70:58:f7:ad:b3:5b:a5:af:5a:1d:09:9a:
                    7e:b9:c7:c5:22:5c:3c:15:9e:dd:3d:78:63:b5:ad:
                    93:9a:28:f4:1e:9c:6f:71:aa:5b:e3:0d:50:87:d8:
                    28:8d:21:b3:31:9e:93:a3:1b:a7:2b:a0:38:7e:a5:
                    f0:b7:42:46:55:68:83:d1:3d:4f:15:9b:c6:0e:29:
                    a4:d7:3f:18:d9:a7:b8:fd:48:c0:7f:07:12:e0:d0:
                    5e:50:93:d5:70:2f:33:57:a1:44:a7:bc:3f:95:57:
                    73:cc:c5:c6:44:22:30:f3:d8:69:a8:2d:e9:12:d2:
                    d0:ce:41:eb:d2:a7:a2:7b:06:1c:04:af:e6:00:c1:
                    ba:09:46:6c:eb:3f:3f:f1:19:fa:40:5f:42:73:e7:
                    01:98:a8:3c:44:16:0b:b0:88:06:f1:90:46:e0:53:
                    a1:91:55:24:e8:8f:c7:02:aa:37:2c:4d:ac:57:d2:
                    62:c8:f1:ec:ea:a9:5b:ef:55:82:00:f5:18:c2:0a:
                    b7:a3:d6:9e:f7:a7:2a:a5:57:07:27:28:d1:3f:37:
                    c6:e8:11:a5:ff:49:da:7b:27:21:05:d5:4c:e0:f5:
                    49:42:15:e4:d9:9c:16:65:89:55:fb:b9:aa:23:c1:
                    c2:d3:8b:11:91:d9:0d:95:a7:e9:96:0a:20:a6:b2:
                    e6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:86:04:DC:6E:40:38:4B:DC:66:49:A2:DE:CF:71:CF:64:F5:A2:59
            X509v3 Authority Key Identifier:
                keyid:55:8D:17:41:6B:73:E6:E2:0D:59:42:E5:10:F1:12:54:EB:20:56:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cn5jpWgU7NfBazeZPEL3pyLgUhkAEPBWGhP6utniEhXN/1/558D17416B73E6E20D5942E510F11254EB2056A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558D17416B73E6E20D5942E510F11254EB2056A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cn5jpWgU7NfBazeZPEL3pyLgUhkAEPBWGhP6utniEhXN/1/3138312e3137342e3235322e302f32322d3232203d3e20323731343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:82:82:4b:cf:5c:54:ca:4a:a4:d0:5e:8f:50:2a:2b:81:7d:
         66:49:18:90:3f:ad:b7:34:ee:09:e3:ed:3e:7d:c0:90:f7:00:
         89:f6:e5:6b:0c:30:66:e3:cd:ef:0c:0c:2f:34:cd:7a:53:82:
         2c:0d:11:b5:95:e8:63:17:9c:79:e0:f7:b9:b3:ab:5b:44:5d:
         e2:09:46:e0:34:72:85:a1:3e:c5:3c:b3:57:d5:33:74:ed:a9:
         10:72:5f:91:24:16:47:64:64:ed:63:5f:9f:60:c1:c0:26:64:
         f1:ea:fb:ac:8c:7d:75:ea:3d:8c:9d:c1:0f:4d:ec:67:4a:99:
         30:38:4f:2a:50:28:80:8e:93:2d:aa:bd:89:ef:f0:fc:bb:03:
         7d:c5:ab:c7:dc:fd:b3:04:d9:47:cb:92:32:d3:b5:23:1d:ed:
         8f:a5:06:78:89:38:78:cc:59:60:c5:73:16:c1:70:ee:68:f4:
         bc:7f:fa:be:dc:70:c2:fa:02:76:8a:51:63:a5:4e:af:ed:4d:
         90:6d:3d:99:3b:5b:5f:a4:27:f8:4c:da:71:18:fe:7d:86:df:
         c6:31:f8:bb:98:47:f1:95:a3:6b:8e:38:71:a0:ef:3b:83:49:
         7e:a1:59:92:56:af:bd:6f:1d:27:6d:03:ec:a9:9d:2b:b0:fd:
         cb:9d:60:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:08 2024 by rpki-client on console-ams.rpki-client.org