Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/3138312e3232342e35342e302f32342d3234203d3e20323636333132.roa
File:                     3138312e3232342e35342e302f32342d3234203d3e20323636333132.roa (raw, json)
Hash identifier:          4q3y5rIgyR+ACiQ9VRu96wOCkI5Ajf36RFvW2GE9sfI=
Subject key identifier:   3D:B9:3B:48:92:5D:91:74:B5:D3:58:82:51:04:32:5F:DB:F2:3B:F9
Certificate issuer:       /CN=0A2DC9F591D32599C3AB0561CB8DEF59C396C055
Certificate serial:       3AFB5AD07791C4EA7F4E28D70FA00BFC764529BB
Authority key identifier: 0A:2D:C9:F5:91:D3:25:99:C3:AB:05:61:CB:8D:EF:59:C3:96:C0:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/3138312e3232342e35342e302f32342d3234203d3e20323636333132.roa
Signing time:             Wed 26 Jun 2024 15:08:12 +0000
ROA not before:           Wed 26 Jun 2024 15:03:12 +0000
ROA not after:            Wed 25 Jun 2025 15:08:12 +0000
asID:                     266312
IP address blocks:        181.224.54.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.crl
                          rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 03 Jul 2024 13:03:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:fb:5a:d0:77:91:c4:ea:7f:4e:28:d7:0f:a0:0b:fc:76:45:29:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A2DC9F591D32599C3AB0561CB8DEF59C396C055
        Validity
            Not Before: Jun 26 15:03:12 2024 GMT
            Not After : Jun 25 15:08:12 2025 GMT
        Subject: CN=3DB93B48925D9174B5D358825104325FDBF23BF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e9:38:3f:72:97:d0:e0:cd:d3:19:89:eb:cb:
                    f8:3e:1e:51:05:9b:64:bb:5b:94:e8:2e:cb:6d:4a:
                    00:cf:92:ae:14:03:79:f0:8b:26:79:6a:2b:1d:1c:
                    47:bc:dc:db:48:35:ea:3e:03:68:34:a2:40:fa:68:
                    97:f5:8a:4f:ef:78:0f:13:83:03:1d:65:24:2d:6c:
                    30:8f:b9:d9:f6:07:da:80:ae:b7:10:91:00:36:91:
                    1d:6c:03:dc:38:b0:a7:40:8d:aa:30:8a:fc:87:13:
                    23:b3:c8:99:17:a7:01:e8:18:23:46:ca:c6:77:41:
                    ff:f9:aa:7e:71:a3:a9:07:f8:f1:7f:73:d7:5d:e2:
                    85:3e:46:14:17:9b:1e:5c:91:c6:a9:f4:9b:ec:95:
                    57:50:33:2f:4e:ab:39:e4:35:fd:7e:c7:fa:d8:aa:
                    df:a7:06:e6:76:6f:5c:44:63:3e:d7:a2:ca:1c:c5:
                    9a:b8:8f:77:96:11:c8:26:81:a7:0d:19:01:d3:4c:
                    c3:5e:c1:0e:b6:81:4a:12:a7:a0:5c:f5:cd:cb:0a:
                    b0:3b:9e:c4:37:6a:aa:77:b3:0b:8f:85:26:fe:59:
                    a8:67:02:d1:1a:35:8e:1e:d3:cc:d5:c4:da:70:fc:
                    39:05:73:b2:d6:c2:8c:ad:b2:f2:ed:e2:d5:be:84:
                    1a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B9:3B:48:92:5D:91:74:B5:D3:58:82:51:04:32:5F:DB:F2:3B:F9
            X509v3 Authority Key Identifier:
                keyid:0A:2D:C9:F5:91:D3:25:99:C3:AB:05:61:CB:8D:EF:59:C3:96:C0:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/3138312e3232342e35342e302f32342d3234203d3e20323636333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:d1:88:4e:96:69:be:43:08:54:66:fd:d7:63:c7:76:4d:2b:
         f3:1d:23:cc:f0:d8:33:86:72:47:86:cc:f9:eb:f3:20:5a:ee:
         ad:4a:2e:9a:5b:d0:7b:db:d2:6c:26:e0:ca:24:99:75:8e:90:
         35:d3:10:a6:60:89:5f:5b:d9:98:37:30:20:31:1e:72:74:92:
         d9:95:d6:28:1b:4b:36:14:ec:ae:1b:54:2c:22:89:09:fa:df:
         36:66:c8:2d:34:7d:29:ba:95:6a:65:51:60:3e:89:1f:29:71:
         95:ea:c2:83:f4:0b:3e:9f:ac:ff:23:e5:0f:28:41:51:9d:52:
         3d:66:2f:21:fe:b0:2e:3c:88:f4:7e:7d:b9:a7:0a:08:34:42:
         38:62:ae:3f:1b:02:7b:37:06:ce:75:74:96:13:91:4c:5c:9f:
         b6:c1:ab:50:c8:c7:f1:06:9e:01:01:af:3e:5a:bf:09:ea:c9:
         c4:73:9b:f3:3c:b2:1c:b4:b2:b3:a2:74:33:14:01:fe:7a:99:
         5c:53:fa:24:19:62:cc:e4:4e:ce:69:d8:40:78:16:2f:bb:7c:
         b9:c5:4c:f0:06:f1:ab:86:bf:00:0f:13:5f:37:56:74:6d:d8:
         c1:75:e1:a5:5c:2b:b7:96:7d:c7:d0:d9:d3:84:37:1c:c5:8f:
         fa:55:7c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 14:01:07 2024 by rpki-client on console-fra.rpki-client.org