Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/3138312e3233322e3233322e302f32322d3233203d3e20323732353438.roa
File:                     3138312e3233322e3233322e302f32322d3233203d3e20323732353438.roa (raw, json)
Hash identifier:          OA47yZPSEOsG8FciXQrI+5zuOdqVQAOZOPUQbLUacVM=
Subject key identifier:   D7:38:22:8D:59:E2:D0:07:6B:4C:17:0F:CC:FE:B8:6C:F9:14:49:35
Certificate issuer:       /CN=34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F
Certificate serial:       0234CD07DC7D5E6711227CA3975CAA80AE2B30B1
Authority key identifier: 34:29:6A:C0:27:4C:9E:18:FF:A1:DE:6A:76:D8:E8:B8:EF:7F:D3:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/3138312e3233322e3233322e302f32322d3233203d3e20323732353438.roa
Signing time:             Thu 29 Aug 2024 13:15:17 +0000
ROA not before:           Thu 29 Aug 2024 13:10:17 +0000
ROA not after:            Thu 28 Aug 2025 13:15:17 +0000
asID:                     272548
IP address blocks:        181.232.232.0/22 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.crl
                          rsync://rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 09:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:34:cd:07:dc:7d:5e:67:11:22:7c:a3:97:5c:aa:80:ae:2b:30:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F
        Validity
            Not Before: Aug 29 13:10:17 2024 GMT
            Not After : Aug 28 13:15:17 2025 GMT
        Subject: CN=D738228D59E2D0076B4C170FCCFEB86CF9144935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c7:b3:39:ec:65:4f:68:14:1b:47:19:28:5f:
                    3b:35:55:46:a0:f9:a1:95:60:5f:6c:b4:20:4d:1a:
                    b1:75:ea:8b:21:37:39:2f:38:82:1d:07:7d:16:fa:
                    f6:87:72:00:06:0d:43:0f:2c:76:40:30:97:40:35:
                    3e:46:61:30:52:d5:30:62:7c:88:27:11:10:c0:0b:
                    3e:6b:1e:cb:f0:e2:a4:18:db:3e:31:51:10:de:c4:
                    5f:bb:95:1b:fe:1f:5e:a6:b1:99:6f:02:05:0b:2d:
                    e1:d5:4c:a2:0e:3f:19:46:fe:0d:2a:8a:7d:a4:53:
                    3d:03:c1:28:96:3c:2d:d7:fc:76:4c:cc:08:aa:54:
                    1d:8c:1e:7d:6f:ab:d9:dc:64:12:3f:0f:c9:3d:b4:
                    c6:18:66:1b:e5:5f:cb:80:a6:19:8a:47:e1:81:9d:
                    44:d5:99:65:d3:83:4d:9a:dc:cb:b8:35:13:e2:b7:
                    5b:fa:47:55:8c:f3:55:5c:78:ec:72:cb:4f:28:ca:
                    37:a4:31:3f:73:c2:c4:c6:f0:cf:30:20:f0:97:ff:
                    2c:cf:8e:e0:c5:85:42:5f:e7:f0:91:20:90:3a:68:
                    93:4b:8e:1d:c6:c5:66:86:8e:08:42:15:e8:4e:18:
                    3e:4d:d3:9d:25:43:1b:b8:65:d2:13:f8:7b:af:06:
                    3a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:38:22:8D:59:E2:D0:07:6B:4C:17:0F:CC:FE:B8:6C:F9:14:49:35
            X509v3 Authority Key Identifier:
                keyid:34:29:6A:C0:27:4C:9E:18:FF:A1:DE:6A:76:D8:E8:B8:EF:7F:D3:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/3138312e3233322e3233322e302f32322d3233203d3e20323732353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c9:42:2d:0a:4b:ff:d7:b0:72:db:e2:cd:c5:a1:fb:89:94:e5:
         ec:cb:f9:6a:2b:10:45:07:7b:ec:78:01:59:13:db:3f:4b:96:
         09:0c:91:8d:16:b1:85:87:1d:fa:dc:ed:a9:51:32:28:77:fa:
         bf:c6:fa:e6:88:3f:7b:2d:b4:6a:8f:32:18:42:ad:f5:05:6b:
         c7:8b:88:e7:7f:51:77:44:4e:d2:fd:cd:4e:6a:b0:9d:99:81:
         e7:aa:c7:b4:82:65:49:b4:ff:62:52:66:02:81:d7:58:bc:8c:
         6f:c2:c1:dc:35:11:b4:e8:97:32:43:51:76:a5:a5:95:c1:77:
         d7:ac:06:ab:f6:ef:cf:3c:78:29:27:11:5e:c5:a7:78:8f:ec:
         e3:e6:f6:44:95:d3:56:34:10:f5:a0:62:3c:b2:de:a7:00:67:
         74:ad:53:fc:7c:3b:60:88:da:54:94:ec:70:2a:51:29:d5:38:
         89:de:87:42:24:44:a2:df:15:ab:85:05:9f:08:bb:5e:c9:31:
         63:1f:b8:e9:26:15:31:a5:95:cc:a6:30:31:38:27:b3:2a:f7:
         6b:6d:86:7d:d6:33:87:45:1c:96:24:1c:95:5b:68:5b:28:85:
         dd:4d:96:32:95:dd:68:59:0b:eb:3f:59:a7:f4:fd:62:ae:8e:
         7b:60:84:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 10:31:33 2024 by rpki-client on console-fra.rpki-client.org