Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fiyp5F5QszMYofbxZz9KwZvnBVqSNEdWt4gMqUDKi8uR/0/3138312e3137342e3234382e302f32322d3232203d3e20323731353239.roa
File:                     3138312e3137342e3234382e302f32322d3232203d3e20323731353239.roa (raw, json)
Hash identifier:          cJTVI0UWYz/4B7/pNmOFwM+SFS8R4wxB/l1nRbrUlLw=
Subject key identifier:   2C:D2:4D:0B:F4:ED:4F:4F:64:F4:0B:3B:D8:1F:5A:2C:CF:34:9A:CE
Certificate issuer:       /CN=D6E6294D1D9502F3C7F5F894B597837779B8D3E0
Certificate serial:       291150148F7230C2E74B320362A9E114B88C2291
Authority key identifier: D6:E6:29:4D:1D:95:02:F3:C7:F5:F8:94:B5:97:83:77:79:B8:D3:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6E6294D1D9502F3C7F5F894B597837779B8D3E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fiyp5F5QszMYofbxZz9KwZvnBVqSNEdWt4gMqUDKi8uR/0/3138312e3137342e3234382e302f32322d3232203d3e20323731353239.roa
Signing time:             Thu 15 Aug 2024 20:01:33 +0000
ROA not before:           Thu 15 Aug 2024 19:56:33 +0000
ROA not after:            Thu 14 Aug 2025 20:01:33 +0000
asID:                     271529
IP address blocks:        181.174.248.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fiyp5F5QszMYofbxZz9KwZvnBVqSNEdWt4gMqUDKi8uR/0/D6E6294D1D9502F3C7F5F894B597837779B8D3E0.crl
                          rsync://rpki-repo.registro.br/repo/Fiyp5F5QszMYofbxZz9KwZvnBVqSNEdWt4gMqUDKi8uR/0/D6E6294D1D9502F3C7F5F894B597837779B8D3E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6E6294D1D9502F3C7F5F894B597837779B8D3E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 02:06:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:11:50:14:8f:72:30:c2:e7:4b:32:03:62:a9:e1:14:b8:8c:22:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6E6294D1D9502F3C7F5F894B597837779B8D3E0
        Validity
            Not Before: Aug 15 19:56:33 2024 GMT
            Not After : Aug 14 20:01:33 2025 GMT
        Subject: CN=2CD24D0BF4ED4F4F64F40B3BD81F5A2CCF349ACE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:07:f5:5d:66:6e:22:6f:10:2d:4f:5b:4f:d9:
                    9c:6b:8b:99:92:52:2b:b9:0e:03:e7:84:60:d4:e5:
                    40:10:64:62:34:49:da:21:44:e1:99:f3:65:34:9f:
                    a6:05:86:f3:a1:c5:37:84:05:29:5f:f1:31:11:44:
                    dc:c7:8d:68:79:87:92:b6:35:74:c8:a7:ed:ae:f1:
                    ea:ce:5d:39:12:e3:ca:87:c7:10:a5:0f:92:a2:fb:
                    3a:00:21:de:5d:a1:c0:f5:0b:51:b2:5d:81:ec:1a:
                    20:68:2e:29:dd:67:15:b8:60:0e:c7:83:e0:d3:d7:
                    c2:4f:88:ec:35:b7:95:84:28:f1:d6:64:aa:6b:f3:
                    30:4b:dd:30:42:1b:cb:8d:37:c3:40:5c:60:7b:ec:
                    90:1e:7f:7a:48:3e:ea:f8:7b:c0:3e:ac:ef:78:34:
                    32:c1:6b:db:a6:4f:1b:b3:0b:80:83:ae:b2:67:b9:
                    e7:b0:41:92:a1:a4:48:0f:9f:38:00:47:0e:6a:f4:
                    28:65:88:77:9b:a7:73:d8:ce:87:60:0d:50:40:a2:
                    98:5c:14:72:29:07:1c:8d:0c:fe:d6:47:42:98:ec:
                    a1:f8:87:23:18:df:30:f8:1e:9e:84:0f:86:b6:54:
                    44:16:6f:86:ed:ec:25:5b:e6:ce:c8:1b:24:2a:b5:
                    30:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:D2:4D:0B:F4:ED:4F:4F:64:F4:0B:3B:D8:1F:5A:2C:CF:34:9A:CE
            X509v3 Authority Key Identifier:
                keyid:D6:E6:29:4D:1D:95:02:F3:C7:F5:F8:94:B5:97:83:77:79:B8:D3:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fiyp5F5QszMYofbxZz9KwZvnBVqSNEdWt4gMqUDKi8uR/0/D6E6294D1D9502F3C7F5F894B597837779B8D3E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6E6294D1D9502F3C7F5F894B597837779B8D3E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fiyp5F5QszMYofbxZz9KwZvnBVqSNEdWt4gMqUDKi8uR/0/3138312e3137342e3234382e302f32322d3232203d3e20323731353239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:be:58:9b:6a:82:42:dd:73:7c:ed:e5:b0:f1:a5:00:67:dc:
         d1:af:d6:44:8c:c8:75:c9:49:a2:be:7d:39:52:17:ac:82:98:
         22:0c:95:bf:10:ff:49:ee:cd:3f:1e:6b:7a:10:41:ad:b4:89:
         9a:ba:79:68:28:92:8d:2f:c2:90:cb:c4:ef:26:ea:65:a9:c4:
         d2:f2:b7:fd:a9:9a:d9:37:50:88:41:5f:67:fc:e2:66:2c:99:
         05:58:7e:f2:3e:a5:b7:a8:e5:74:af:83:64:9e:50:fe:ad:88:
         3f:af:0b:2a:ba:50:76:51:37:b2:c4:d8:13:97:28:da:3c:34:
         8d:65:3e:6a:13:85:ec:3d:5f:9a:d8:83:dc:67:2c:14:bf:2f:
         15:c0:8e:8f:6d:1d:94:73:b9:12:9e:07:3c:f2:4c:68:9c:cd:
         62:d5:a3:03:d9:76:1e:b8:d1:89:58:9d:65:29:22:7e:3d:db:
         f4:d0:0d:45:a0:5f:29:b7:5d:e6:df:aa:a4:4d:20:35:f2:38:
         ab:f2:e5:78:dd:49:28:f9:3a:14:8c:ed:c3:cf:9e:d9:c9:ae:
         c1:46:13:52:ad:e9:e9:9e:52:66:12:df:8f:70:14:d2:7b:5a:
         bd:39:fb:33:8f:d8:85:b5:fb:c3:71:17:b9:c2:71:53:70:d6:
         ee:01:e1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:35:52 2024 by rpki-client on console-fra.rpki-client.org