Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/3138312e3233332e3137382e302f32332d3234203d3e20323731353030.roa
File:                     3138312e3233332e3137382e302f32332d3234203d3e20323731353030.roa (raw, json)
Hash identifier:          xAoRGeilCfJepIWjWI4Hrh7LwrWOzwIdj8xYgtVlVU8=
Subject key identifier:   53:4F:24:5F:AF:7A:56:DC:FE:30:DD:80:DA:2A:7A:2D:6C:BE:8D:6E
Certificate issuer:       /CN=249982A414DC7818B3DD0BE08F54211F76DC2061
Certificate serial:       549D6A7A94944F483B635B0FE9D0154FC845F46E
Authority key identifier: 24:99:82:A4:14:DC:78:18:B3:DD:0B:E0:8F:54:21:1F:76:DC:20:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/249982A414DC7818B3DD0BE08F54211F76DC2061.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/3138312e3233332e3137382e302f32332d3234203d3e20323731353030.roa
Signing time:             Mon 12 Aug 2024 06:24:14 +0000
ROA not before:           Mon 12 Aug 2024 06:19:14 +0000
ROA not after:            Mon 11 Aug 2025 06:24:14 +0000
asID:                     271500
IP address blocks:        181.233.178.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/249982A414DC7818B3DD0BE08F54211F76DC2061.crl
                          rsync://rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/249982A414DC7818B3DD0BE08F54211F76DC2061.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/249982A414DC7818B3DD0BE08F54211F76DC2061.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 19:30:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:9d:6a:7a:94:94:4f:48:3b:63:5b:0f:e9:d0:15:4f:c8:45:f4:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249982A414DC7818B3DD0BE08F54211F76DC2061
        Validity
            Not Before: Aug 12 06:19:14 2024 GMT
            Not After : Aug 11 06:24:14 2025 GMT
        Subject: CN=534F245FAF7A56DCFE30DD80DA2A7A2D6CBE8D6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ed:07:79:fa:8a:2b:5d:63:9c:57:e4:cd:28:
                    ef:a4:ff:3b:40:61:13:2e:63:a5:b8:83:54:39:44:
                    5d:e7:2d:f4:0b:ec:1b:07:1b:d0:40:1d:38:25:79:
                    a4:c1:8b:0f:50:8d:bb:75:62:bd:d0:62:f7:d4:0f:
                    48:54:b7:e1:3c:5a:76:bd:d9:6d:f4:b8:4e:4e:31:
                    b7:b0:f8:ed:ab:fd:68:65:bf:64:c4:52:12:3e:06:
                    01:b6:e7:c2:5c:a2:09:d7:68:de:56:ad:08:dd:0d:
                    7f:c1:b1:fd:b3:6d:3c:43:60:12:ca:61:46:9f:cd:
                    71:1f:de:b5:65:71:73:8a:0e:e7:c1:c9:44:e2:87:
                    c0:56:7f:8f:30:d7:fc:d8:d0:9c:e8:18:8e:5d:dd:
                    7b:a3:1b:cb:83:e9:ac:c6:33:c1:e9:ff:d4:75:b0:
                    40:be:c5:b3:c7:ed:4d:31:07:e6:68:c0:f3:85:66:
                    28:d9:89:ba:57:7e:cf:c2:62:3d:75:df:35:f7:16:
                    10:c5:58:f5:aa:3d:1f:cd:2f:0b:12:d5:6c:1f:9d:
                    12:27:84:9a:06:dd:44:67:11:78:c1:c9:d7:19:34:
                    f3:ea:be:36:2b:1f:e3:c5:49:05:b9:24:61:a6:83:
                    16:4e:ae:76:60:50:c1:47:a0:7b:76:49:72:6a:74:
                    34:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:4F:24:5F:AF:7A:56:DC:FE:30:DD:80:DA:2A:7A:2D:6C:BE:8D:6E
            X509v3 Authority Key Identifier:
                keyid:24:99:82:A4:14:DC:78:18:B3:DD:0B:E0:8F:54:21:1F:76:DC:20:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/249982A414DC7818B3DD0BE08F54211F76DC2061.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/249982A414DC7818B3DD0BE08F54211F76DC2061.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/3138312e3233332e3137382e302f32332d3234203d3e20323731353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:a4:89:5f:3c:a6:4b:a5:8d:d1:20:e0:df:67:7a:95:aa:d0:
         a7:24:f3:25:3c:ee:79:25:25:c7:31:55:74:90:de:37:c2:d9:
         d6:94:08:9e:6e:0a:c1:61:71:fc:16:ee:eb:0d:a9:20:31:0f:
         4b:fe:89:e8:cb:b1:15:43:18:fe:de:71:de:75:44:d9:63:41:
         f3:c7:3e:46:a2:ca:df:48:21:42:cc:3c:a0:cd:2e:da:a3:d2:
         c6:b4:0e:da:9d:05:03:1d:65:98:4d:c6:76:db:22:0e:82:67:
         ce:61:b7:ac:9c:5c:a9:66:d1:e2:0d:77:db:d7:e8:df:19:75:
         26:9e:3d:82:53:1e:a7:db:7a:6c:56:dd:c4:32:22:98:4b:20:
         25:c7:d9:53:1b:52:ff:ab:95:16:09:55:2a:00:70:33:d5:e3:
         48:94:41:d0:40:97:c2:cf:f8:8f:78:68:7f:f0:89:8f:bd:bd:
         1c:f1:3c:7d:f8:85:0c:19:c6:2f:a4:4a:5d:92:5a:05:90:21:
         07:d2:3a:49:b7:e3:0f:ff:5c:55:7a:5f:e0:a8:c9:08:74:d8:
         6f:63:73:78:6f:bc:1a:1b:30:6a:3f:a0:ae:c9:aa:21:ff:28:
         1d:94:f4:2a:a0:20:ae:3e:2c:11:03:95:92:21:ce:71:03:24:
         54:97:0c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:43:25 2024 by rpki-client on console-ams.rpki-client.org