Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/3138312e3139312e39362e302f32322d3234203d3e20323636303033.roa
File:                     3138312e3139312e39362e302f32322d3234203d3e20323636303033.roa (raw, json)
Hash identifier:          ouykXzPRNsYCQM+hnU3e9vCWYySs9GJ6EFSj/I6ZcFY=
Subject key identifier:   B4:CC:B8:50:04:BB:E1:BA:8F:DA:25:FD:A1:1B:FA:D4:EE:08:0B:E4
Certificate issuer:       /CN=AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4
Certificate serial:       1420404D4619A72146F43C4D36F21252B616EAC6
Authority key identifier: AA:07:8E:8F:5E:A4:EF:EF:8E:70:03:E0:A9:B2:11:65:B5:AB:81:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/3138312e3139312e39362e302f32322d3234203d3e20323636303033.roa
Signing time:             Thu 04 Jul 2024 22:04:42 +0000
ROA not before:           Thu 04 Jul 2024 21:59:42 +0000
ROA not after:            Thu 03 Jul 2025 22:04:42 +0000
asID:                     266003
IP address blocks:        181.191.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.crl
                          rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 07:16:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:20:40:4d:46:19:a7:21:46:f4:3c:4d:36:f2:12:52:b6:16:ea:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4
        Validity
            Not Before: Jul  4 21:59:42 2024 GMT
            Not After : Jul  3 22:04:42 2025 GMT
        Subject: CN=B4CCB85004BBE1BA8FDA25FDA11BFAD4EE080BE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:0c:b4:a0:19:48:3f:42:68:66:97:c2:fe:07:
                    bd:7b:b1:84:44:2f:62:05:91:54:fb:66:e3:90:39:
                    4b:4a:13:59:14:09:be:f8:15:75:90:02:13:75:01:
                    7c:02:27:72:91:4f:c4:cb:d1:6e:2c:15:84:a4:21:
                    93:99:88:08:e6:db:29:68:65:31:c2:ff:ad:b4:8b:
                    ff:3e:cf:60:d1:2b:38:1c:36:95:cb:1a:ff:07:a8:
                    3e:65:d7:16:17:ce:18:6a:5c:a3:7e:06:61:6c:00:
                    8b:7b:50:fd:4c:8e:49:08:6a:e0:62:ac:c1:48:a1:
                    15:e1:92:48:61:4c:2c:27:46:a0:79:2c:9d:8f:fa:
                    a0:c2:40:06:13:dc:30:b2:2b:ab:e4:e7:85:fe:0b:
                    ec:13:c8:8c:ef:ce:d4:42:77:7a:2a:85:3b:3a:1e:
                    62:ef:fb:64:c4:bc:07:23:48:17:b7:b3:62:97:b9:
                    20:d1:67:34:17:4d:10:51:16:5a:41:bf:23:e5:09:
                    63:f4:f2:11:ea:ec:4f:da:52:ff:dc:07:ab:e4:60:
                    b2:49:db:c7:b0:7e:71:1d:f6:e2:73:2c:34:3a:45:
                    b8:c8:ff:ea:f1:2c:7d:3e:65:bd:1b:ce:42:15:f6:
                    bc:80:b1:89:99:d2:1e:0d:cb:89:9a:0a:cc:a0:fd:
                    eb:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:CC:B8:50:04:BB:E1:BA:8F:DA:25:FD:A1:1B:FA:D4:EE:08:0B:E4
            X509v3 Authority Key Identifier:
                keyid:AA:07:8E:8F:5E:A4:EF:EF:8E:70:03:E0:A9:B2:11:65:B5:AB:81:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/3138312e3139312e39362e302f32322d3234203d3e20323636303033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:b1:bd:f3:bf:b8:68:8a:4c:36:64:cc:d2:ae:55:5b:0a:1e:
         d3:ff:e1:9e:bb:c9:c0:fe:44:00:d3:53:1e:1a:6e:e4:95:7a:
         1a:0b:39:f0:5c:2e:bf:a5:84:d6:a1:5a:02:e7:25:14:3d:de:
         8b:1f:4a:92:ce:a3:f7:1b:b5:50:66:0f:0a:83:16:13:ee:28:
         5d:51:ad:42:a4:48:b1:a9:5e:d5:e5:ab:ec:69:a0:42:aa:4c:
         68:3e:da:84:a1:60:dc:45:b5:4a:2d:23:7b:4f:ce:01:fa:d8:
         e6:c9:b7:d6:30:dd:aa:c1:45:b7:10:55:f5:c0:c0:d9:bc:14:
         d9:c2:e1:71:bd:fc:f7:cf:30:d2:31:0b:fe:f0:f0:7f:1e:13:
         6c:8d:8f:63:75:3d:cd:01:9b:02:26:9a:6d:43:79:b3:95:9d:
         87:ec:6c:31:61:f5:4a:d8:6e:98:40:f3:71:fc:4f:5c:df:ad:
         09:2e:4c:2f:dd:63:9a:82:5f:2f:b2:0c:9c:43:e7:87:e2:25:
         0b:cb:7f:13:e3:e8:a8:de:41:99:e4:f6:b4:de:e0:ba:03:a2:
         47:54:24:f0:7b:5a:c6:71:61:0a:90:d0:07:34:c8:43:3e:8d:
         d7:5a:a4:6f:fd:10:52:fe:2a:08:75:a2:52:d3:d6:db:95:ee:
         82:c4:a1:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:43:54 2025 by rpki-client