Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/3230312e35342e3138362e302f32332d3234203d3e20323731303435.roa
File:                     3230312e35342e3138362e302f32332d3234203d3e20323731303435.roa (raw, json)
Hash identifier:          92Z0H73nMKStZ9S2kOzmTH6clXmbwpbZ6xajQavaHz4=
Subject key identifier:   8F:1E:3B:FB:48:2B:86:0F:88:74:18:91:8B:05:AD:73:F2:82:F8:BD
Certificate issuer:       /CN=22AB1A545CAF610816572F26872DE7E11F24C4BC
Certificate serial:       2AB3A8F0DAEE270AF3E6900A6B670FA175F9E6E5
Authority key identifier: 22:AB:1A:54:5C:AF:61:08:16:57:2F:26:87:2D:E7:E1:1F:24:C4:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22AB1A545CAF610816572F26872DE7E11F24C4BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/3230312e35342e3138362e302f32332d3234203d3e20323731303435.roa
Signing time:             Thu 04 Jul 2024 19:08:04 +0000
ROA not before:           Thu 04 Jul 2024 19:03:04 +0000
ROA not after:            Thu 03 Jul 2025 19:08:04 +0000
asID:                     271045
IP address blocks:        201.54.186.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/22AB1A545CAF610816572F26872DE7E11F24C4BC.crl
                          rsync://rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/22AB1A545CAF610816572F26872DE7E11F24C4BC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22AB1A545CAF610816572F26872DE7E11F24C4BC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:b3:a8:f0:da:ee:27:0a:f3:e6:90:0a:6b:67:0f:a1:75:f9:e6:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22AB1A545CAF610816572F26872DE7E11F24C4BC
        Validity
            Not Before: Jul  4 19:03:04 2024 GMT
            Not After : Jul  3 19:08:04 2025 GMT
        Subject: CN=8F1E3BFB482B860F887418918B05AD73F282F8BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:df:e9:47:6d:c0:b4:d1:e7:fa:39:20:7b:75:
                    49:48:2a:5b:84:93:4e:a0:af:bf:fa:5b:78:95:ac:
                    32:81:49:01:cc:72:0b:14:29:74:4f:69:b6:b3:07:
                    c6:3b:0c:66:d1:d8:be:fe:34:d3:63:bb:ce:e3:99:
                    2e:4b:b8:10:b2:4a:44:19:33:70:1f:a6:99:71:6a:
                    dc:62:fc:bc:53:8c:84:d4:b7:dd:86:9c:3d:1c:9c:
                    2c:4f:2b:be:fa:92:fd:40:00:98:60:0f:44:df:f7:
                    89:04:64:c7:7b:33:2a:02:fb:87:fa:a2:70:fb:c6:
                    e9:e5:08:0b:b3:6e:29:dc:15:fe:d6:55:55:3f:af:
                    fd:ee:17:ae:34:c9:b4:84:9c:89:be:f7:af:ff:00:
                    2b:e9:3e:0c:4a:e9:80:ee:6b:ad:85:c0:c1:db:60:
                    ae:95:32:2f:3b:01:a0:16:26:6c:c8:f7:c5:57:5c:
                    57:63:8b:b2:a1:58:fc:17:a5:01:0a:d1:2b:6d:80:
                    92:8b:a5:41:5e:52:92:83:e6:86:40:89:5c:f0:8e:
                    b8:dd:99:e3:c2:2d:53:34:c7:d8:8b:57:bf:d4:85:
                    12:22:0e:a1:38:39:17:e1:39:80:b9:58:f6:88:3e:
                    62:ac:d2:24:22:d5:7b:a4:01:68:b7:bb:e4:c0:cd:
                    c0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:1E:3B:FB:48:2B:86:0F:88:74:18:91:8B:05:AD:73:F2:82:F8:BD
            X509v3 Authority Key Identifier:
                keyid:22:AB:1A:54:5C:AF:61:08:16:57:2F:26:87:2D:E7:E1:1F:24:C4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/22AB1A545CAF610816572F26872DE7E11F24C4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22AB1A545CAF610816572F26872DE7E11F24C4BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/3230312e35342e3138362e302f32332d3234203d3e20323731303435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.54.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:dc:a1:89:e3:b5:26:c6:72:5e:e1:bb:7d:6f:c6:5a:c9:83:
         59:31:dc:63:94:0b:49:a7:cc:59:ee:16:0b:84:3b:af:66:5c:
         87:9a:4d:28:c7:b9:30:df:35:c4:10:5e:dc:cc:0e:99:6f:1d:
         31:5a:b4:3f:68:54:96:8c:6e:14:32:91:4b:25:35:b9:a3:50:
         ef:6d:0e:e6:e1:bb:77:f2:b7:d3:51:5c:8a:00:84:6a:49:0e:
         9f:c1:61:be:22:99:5e:5a:73:ae:c0:41:b0:05:d9:06:73:ad:
         24:79:f1:ec:30:2f:91:5c:61:6e:cb:81:95:15:d2:9e:2c:36:
         ff:e3:61:37:d4:aa:59:ec:65:d2:d3:86:26:d9:57:73:6a:78:
         2b:c6:4d:06:4e:b1:bd:14:89:f9:38:ca:f9:ed:87:ac:dc:c7:
         bf:a9:1d:8d:03:3f:74:d0:af:ce:27:12:92:28:d8:f1:30:ac:
         99:a0:c2:81:30:e2:3b:cf:f3:8e:e8:6d:cc:d4:6c:8f:93:d5:
         22:6e:63:ee:71:40:41:2c:c7:72:52:1f:37:f5:35:5c:4c:99:
         8a:5f:f2:2d:8b:0d:5c:60:12:0b:20:8a:c1:e0:88:bb:c9:ae:
         ad:c3:8e:6c:b9:df:52:c7:46:3a:df:fd:3e:ca:5d:07:7c:46:
         44:83:68:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:36:38 2024 by rpki-client on console-ams.rpki-client.org