Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/0/3138312e3139312e38342e302f32322d3234203d3e20323635393938.roa
File:                     3138312e3139312e38342e302f32322d3234203d3e20323635393938.roa (raw, json)
Hash identifier:          XRnyxqeWor6zsOJOEe1DH7+2Zro+JWbwllL/176Q16g=
Subject key identifier:   3D:A2:78:4A:73:0C:EF:2C:84:75:59:E5:88:FD:57:8E:D4:01:2B:77
Certificate issuer:       /CN=964E4683BB2B2596300F81FEBD9EA9DB505AF025
Certificate serial:       39E42FC458CA24FBDE565C69BC0E1EAA1DF7D0CE
Authority key identifier: 96:4E:46:83:BB:2B:25:96:30:0F:81:FE:BD:9E:A9:DB:50:5A:F0:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/964E4683BB2B2596300F81FEBD9EA9DB505AF025.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/0/3138312e3139312e38342e302f32322d3234203d3e20323635393938.roa
Signing time:             Tue 16 Jul 2024 18:37:29 +0000
ROA not before:           Tue 16 Jul 2024 18:32:29 +0000
ROA not after:            Tue 15 Jul 2025 18:37:29 +0000
asID:                     265998
IP address blocks:        181.191.84.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/0/964E4683BB2B2596300F81FEBD9EA9DB505AF025.crl
                          rsync://rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/0/964E4683BB2B2596300F81FEBD9EA9DB505AF025.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/964E4683BB2B2596300F81FEBD9EA9DB505AF025.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:e4:2f:c4:58:ca:24:fb:de:56:5c:69:bc:0e:1e:aa:1d:f7:d0:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=964E4683BB2B2596300F81FEBD9EA9DB505AF025
        Validity
            Not Before: Jul 16 18:32:29 2024 GMT
            Not After : Jul 15 18:37:29 2025 GMT
        Subject: CN=3DA2784A730CEF2C847559E588FD578ED4012B77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1a:f9:ce:1c:b0:ae:08:b0:32:f8:7a:3e:5c:
                    16:2b:96:e2:b1:10:16:d3:6a:de:a3:bf:d4:a9:a7:
                    d7:14:3d:f5:87:51:a1:76:48:c7:a1:dd:73:cd:8f:
                    79:bf:a1:1b:cf:f9:e0:89:52:27:11:36:ac:95:a1:
                    2c:d5:42:97:95:0b:9f:f3:71:fb:54:23:87:c4:ba:
                    a7:6f:8c:bc:39:41:fc:e9:aa:c1:38:66:2f:1b:52:
                    6e:ed:8f:6d:38:7a:b0:89:38:17:72:c7:83:cf:9c:
                    a8:65:54:d1:a3:5c:7f:fc:eb:a2:ed:34:c4:d2:c9:
                    5f:36:d4:f8:b7:1d:6f:bf:dc:a9:0f:5f:7e:42:d3:
                    99:b3:f0:80:0a:47:87:de:66:bd:b2:9c:a5:ab:5c:
                    b8:40:d8:bb:0e:71:17:7e:6e:26:d7:9f:6a:b5:b8:
                    12:83:fc:e5:f8:d6:76:b4:ae:2c:fd:2c:d7:53:a5:
                    d0:ff:46:12:1a:5b:4e:65:5f:51:63:39:6d:ba:dd:
                    11:21:e9:2c:b4:1f:00:29:24:4d:76:cd:e8:50:29:
                    f7:7f:c7:09:3b:98:11:0d:d0:36:7a:59:6b:87:1c:
                    2e:ce:d5:b2:f8:0b:25:7c:ae:3d:c1:38:e4:3a:a0:
                    71:08:2a:11:91:69:f9:c7:51:26:54:17:b1:5f:f6:
                    2c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A2:78:4A:73:0C:EF:2C:84:75:59:E5:88:FD:57:8E:D4:01:2B:77
            X509v3 Authority Key Identifier:
                keyid:96:4E:46:83:BB:2B:25:96:30:0F:81:FE:BD:9E:A9:DB:50:5A:F0:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/0/964E4683BB2B2596300F81FEBD9EA9DB505AF025.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/964E4683BB2B2596300F81FEBD9EA9DB505AF025.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/0/3138312e3139312e38342e302f32322d3234203d3e20323635393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:93:7d:9c:e1:76:f2:90:69:25:e4:71:b9:89:ca:10:25:44:
         dc:11:44:af:52:77:de:13:59:01:87:5c:b1:dd:22:dd:e9:0d:
         1a:15:ac:59:a7:c4:db:b6:96:03:28:c1:53:8f:c7:d1:02:a0:
         97:7b:aa:37:e5:85:3c:4f:ad:b2:2b:6d:7f:d1:0d:79:d4:bb:
         7e:5c:f6:e6:30:8e:5f:cd:65:ff:5b:87:0c:2a:c6:2d:33:80:
         1b:48:e7:35:10:89:2a:18:44:22:8e:0d:0e:97:ee:38:c4:d1:
         5a:f1:d1:14:63:d3:cc:c9:83:ad:e8:09:79:e5:c3:d0:56:7b:
         d4:5c:4e:1d:e9:f1:25:65:b7:b0:66:91:50:19:db:bb:64:59:
         44:b2:e7:1d:46:52:12:d9:45:43:2c:f2:bb:bc:c5:36:c2:3a:
         9a:bb:4d:dc:db:44:93:4a:0f:c4:2a:f4:cc:8d:90:cb:b9:cf:
         18:d9:88:d1:6e:e2:3a:78:26:09:85:30:aa:2f:0c:ac:06:a9:
         07:cc:b4:71:e0:ea:53:08:83:d0:0c:5c:94:62:69:8e:5b:58:
         bd:eb:29:55:2a:b5:f5:34:bd:f1:38:f6:2b:6e:be:1a:b7:19:
         f6:2e:c3:1f:83:a7:7e:f4:d3:d0:eb:1f:35:b3:ce:07:f3:43:
         1d:3c:85:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:56:35 2024 by rpki-client on console-fra.rpki-client.org