Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/3138312e3232342e35332e302f32342d3234203d3e20323636333132.roa
File:                     3138312e3232342e35332e302f32342d3234203d3e20323636333132.roa (raw, json)
Hash identifier:          OJGQL+D1xd10N/t+KyIak7B4zbCcdBv67aK/mjx1TAQ=
Subject key identifier:   01:5E:C5:32:AF:17:B3:C2:2B:68:D8:9E:69:DA:BA:5B:33:6E:C2:D2
Certificate issuer:       /CN=0A2DC9F591D32599C3AB0561CB8DEF59C396C055
Certificate serial:       1F11A58B1A75D1D7F37A73ACB9C6DB8EF2204487
Authority key identifier: 0A:2D:C9:F5:91:D3:25:99:C3:AB:05:61:CB:8D:EF:59:C3:96:C0:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/3138312e3232342e35332e302f32342d3234203d3e20323636333132.roa
Signing time:             Wed 26 Jun 2024 15:08:01 +0000
ROA not before:           Wed 26 Jun 2024 15:03:01 +0000
ROA not after:            Wed 25 Jun 2025 15:08:01 +0000
asID:                     266312
IP address blocks:        181.224.53.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.crl
                          rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 03 Jul 2024 13:03:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:11:a5:8b:1a:75:d1:d7:f3:7a:73:ac:b9:c6:db:8e:f2:20:44:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A2DC9F591D32599C3AB0561CB8DEF59C396C055
        Validity
            Not Before: Jun 26 15:03:01 2024 GMT
            Not After : Jun 25 15:08:01 2025 GMT
        Subject: CN=015EC532AF17B3C22B68D89E69DABA5B336EC2D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c0:16:1d:ed:89:a4:c8:ee:0b:ae:4a:6b:ff:
                    93:23:9f:f8:fb:60:35:ce:48:bf:f8:9f:8b:95:92:
                    73:5b:b5:53:c1:38:01:ef:cc:a9:a6:3b:d9:29:88:
                    04:b7:41:e7:45:3d:21:8a:a2:07:4d:fa:1f:a7:05:
                    0d:78:f5:b4:18:a7:21:c6:97:43:55:b5:c2:b4:a7:
                    c9:e7:e3:73:d4:37:12:14:af:ca:12:78:60:8e:5f:
                    8e:f2:13:35:d3:e0:fa:68:f6:da:65:f1:54:35:e6:
                    2f:71:cf:86:6f:40:af:6b:bf:3c:e3:cb:32:78:cd:
                    b8:68:f7:77:06:7a:b3:27:67:ff:2c:5c:da:a3:47:
                    76:b8:6c:ee:56:06:d2:b5:cb:5f:e9:cf:8b:0a:86:
                    40:32:e7:91:62:03:c1:f8:96:ec:37:d6:71:80:ae:
                    3a:38:67:81:3f:1f:31:e9:89:95:c2:9b:2b:7e:cf:
                    a5:49:22:e5:93:b9:7f:70:35:9f:9b:2d:64:84:7b:
                    71:e2:92:21:7c:b9:80:8a:fc:17:d8:9c:27:fc:e3:
                    33:f3:c4:f0:8b:2b:36:92:8e:ec:a8:d3:99:8d:92:
                    9a:fa:83:c1:7b:85:85:1c:ab:88:74:9a:0c:54:5c:
                    c1:22:ab:da:f5:f1:14:90:fb:6b:5f:c9:3a:3a:a4:
                    44:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:5E:C5:32:AF:17:B3:C2:2B:68:D8:9E:69:DA:BA:5B:33:6E:C2:D2
            X509v3 Authority Key Identifier:
                keyid:0A:2D:C9:F5:91:D3:25:99:C3:AB:05:61:CB:8D:EF:59:C3:96:C0:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/3138312e3232342e35332e302f32342d3234203d3e20323636333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:28:26:73:28:31:d7:2f:ef:77:eb:b2:5c:a8:32:69:53:06:
         ec:c8:0d:d8:2d:76:e9:43:39:74:60:4c:ca:92:ee:5f:4a:7f:
         b8:08:42:02:ad:a0:80:53:4c:bc:f2:71:36:cb:05:ef:bf:ba:
         db:37:e7:73:83:0e:57:73:11:d8:12:de:2d:26:4f:31:8d:95:
         b5:aa:30:51:09:5a:92:53:0b:42:db:56:69:80:81:c3:a3:90:
         26:06:47:6c:3e:5e:5a:17:12:4e:9f:f9:52:e9:90:33:08:7d:
         1c:05:cb:24:d3:f4:ae:71:1f:d8:73:97:4b:37:90:23:75:5c:
         5e:cb:70:8a:eb:d1:2a:d5:5f:f6:3a:4b:cd:8f:a7:5e:4b:a9:
         64:36:f1:8e:40:9b:d5:16:01:17:69:e1:91:f1:d7:63:86:36:
         80:00:d9:06:37:2a:64:8c:2d:73:bc:f4:64:88:0b:14:ba:1b:
         c6:08:e9:b5:4b:bb:d5:83:74:29:2a:bf:0b:7d:e5:2f:7f:ab:
         32:90:a0:53:83:80:5e:37:cd:e1:5e:16:f9:d3:fa:c0:b9:30:
         e0:39:24:c5:5c:b0:7b:3d:ac:aa:11:16:09:84:a9:6b:db:77:
         06:e0:42:88:bb:1c:d0:52:11:00:d2:a2:e1:90:64:5f:d5:3a:
         2a:3a:6e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 14:01:07 2024 by rpki-client on console-fra.rpki-client.org