Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cn5jpWgU7NfBazeZPEL3pyLgUhkAEPBWGhP6utniEhXN/1/3138312e3137342e3235342e302f32342d3234203d3e20323731343438.roa
File:                     3138312e3137342e3235342e302f32342d3234203d3e20323731343438.roa (raw, json)
Hash identifier:          znjRk9BxjW24Jo6W+3mzzR2yMyXByOFee1cvKTF11ig=
Subject key identifier:   BF:F3:B3:5F:08:9A:62:6C:49:36:11:74:FE:F5:D7:29:36:17:A7:A7
Certificate issuer:       /CN=558D17416B73E6E20D5942E510F11254EB2056A1
Certificate serial:       2BEA4AD43FC690272765AA676768A7A7EE488189
Authority key identifier: 55:8D:17:41:6B:73:E6:E2:0D:59:42:E5:10:F1:12:54:EB:20:56:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558D17416B73E6E20D5942E510F11254EB2056A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cn5jpWgU7NfBazeZPEL3pyLgUhkAEPBWGhP6utniEhXN/1/3138312e3137342e3235342e302f32342d3234203d3e20323731343438.roa
Signing time:             Fri 12 Apr 2024 01:53:44 +0000
ROA not before:           Fri 12 Apr 2024 01:48:44 +0000
ROA not after:            Fri 11 Apr 2025 01:53:44 +0000
asID:                     271448
IP address blocks:        181.174.254.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cn5jpWgU7NfBazeZPEL3pyLgUhkAEPBWGhP6utniEhXN/1/558D17416B73E6E20D5942E510F11254EB2056A1.crl
                          rsync://rpki-repo.registro.br/repo/Cn5jpWgU7NfBazeZPEL3pyLgUhkAEPBWGhP6utniEhXN/1/558D17416B73E6E20D5942E510F11254EB2056A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558D17416B73E6E20D5942E510F11254EB2056A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:ea:4a:d4:3f:c6:90:27:27:65:aa:67:67:68:a7:a7:ee:48:81:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558D17416B73E6E20D5942E510F11254EB2056A1
        Validity
            Not Before: Apr 12 01:48:44 2024 GMT
            Not After : Apr 11 01:53:44 2025 GMT
        Subject: CN=BFF3B35F089A626C49361174FEF5D7293617A7A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:89:a6:a9:64:83:31:a6:93:d5:c2:a3:3b:a3:
                    3b:de:30:36:af:51:ed:4b:23:80:a6:9d:d5:66:e1:
                    f5:8f:46:63:dc:6d:17:97:80:68:fd:fa:ab:14:33:
                    05:09:f8:c1:67:45:94:1f:56:82:56:76:98:62:30:
                    f4:22:df:80:0b:ea:9f:b0:61:97:31:80:9d:67:40:
                    da:27:2f:58:44:34:f9:30:8c:5d:52:04:30:0b:8e:
                    c8:41:e8:7f:67:09:23:95:31:44:cf:44:87:7c:40:
                    96:c7:e4:e5:b4:ca:d2:ab:d9:76:ea:7b:4d:2c:fd:
                    4b:68:5d:f6:86:c1:da:65:68:b1:90:0d:c5:4a:1b:
                    4a:09:98:aa:0f:54:56:11:90:a1:58:eb:b1:60:10:
                    ce:e0:95:53:e6:4c:6c:3e:b9:ce:21:1d:c7:91:e0:
                    1f:17:04:fe:b1:b5:42:5b:a4:f0:86:81:68:38:31:
                    28:b0:e8:e0:12:b4:6e:aa:b3:aa:c1:1b:0c:73:7c:
                    a4:91:01:85:ab:70:d2:53:2a:f9:53:01:94:9f:b6:
                    61:5c:d7:6c:ec:a5:7e:9d:03:5c:63:be:e0:27:de:
                    71:62:6f:b0:67:7a:23:98:98:4e:37:80:62:51:22:
                    3e:2b:e1:e1:ca:52:e3:ad:9e:a1:5e:b5:a0:ab:4b:
                    9d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:F3:B3:5F:08:9A:62:6C:49:36:11:74:FE:F5:D7:29:36:17:A7:A7
            X509v3 Authority Key Identifier:
                keyid:55:8D:17:41:6B:73:E6:E2:0D:59:42:E5:10:F1:12:54:EB:20:56:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cn5jpWgU7NfBazeZPEL3pyLgUhkAEPBWGhP6utniEhXN/1/558D17416B73E6E20D5942E510F11254EB2056A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558D17416B73E6E20D5942E510F11254EB2056A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cn5jpWgU7NfBazeZPEL3pyLgUhkAEPBWGhP6utniEhXN/1/3138312e3137342e3235342e302f32342d3234203d3e20323731343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:a9:f8:f8:c9:98:40:54:ca:ef:a5:2c:74:c1:a7:46:32:84:
         22:5a:a1:e3:2f:35:d4:ce:35:c2:f7:c6:86:aa:4d:ea:d5:98:
         23:17:85:95:ea:1f:c9:4f:cc:47:d4:56:0f:fa:f3:be:3b:85:
         47:35:2f:85:9e:be:10:e2:95:0b:f6:4d:bd:e9:62:12:a6:f7:
         a3:a6:72:99:e3:fa:18:e7:79:cc:dc:9e:9e:0a:4d:73:f8:b3:
         e1:fe:74:16:5d:be:f9:16:5c:af:d4:f8:93:83:15:e8:f1:59:
         9f:71:d5:be:28:49:03:2d:fa:dd:4d:da:35:2b:01:10:77:87:
         8a:56:bc:41:96:33:53:8d:2e:d5:ec:6d:d6:ce:7e:61:e2:b5:
         4f:85:d4:71:b4:f1:ff:65:4a:27:19:73:3e:d4:bc:47:ca:db:
         8d:f7:b3:56:1e:27:93:69:78:ca:c5:90:b8:85:cd:f5:c8:f1:
         3a:5f:54:bd:c4:79:15:07:31:0b:12:e9:90:40:2e:2a:60:7a:
         b1:5d:f7:42:2f:d2:8e:72:c3:9a:db:6b:fa:3a:f3:b8:cb:66:
         e1:40:b3:f9:21:a4:bf:73:2f:e7:f4:32:90:a1:3e:b9:b5:a0:
         ca:6b:d5:ad:a8:f3:50:18:5d:51:93:ac:6b:99:72:d7:1f:a6:
         6d:fb:ae:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:08 2024 by rpki-client on console-ams.rpki-client.org