Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GAvVRDuEX7Kff8t8CWmkDny9Wy9WpxBDE9NxcUSBKXBV/1/3138312e3232342e382e302f32322d3234203d3e20323731343234.roa
File:                     3138312e3232342e382e302f32322d3234203d3e20323731343234.roa (raw, json)
Hash identifier:          Poft7l8OvKEJuG3pIpSfUDWChFB3LA6evMOUzRqqtUw=
Subject key identifier:   45:27:11:AD:57:9C:02:67:33:7D:54:E3:AB:25:2B:4A:F8:56:CD:9F
Certificate issuer:       /CN=2887539E3355747F47C7CA2F86A1FFEF1A17FE08
Certificate serial:       72CC6247D459C9CCBA8A55DDA68DF7AC98996AF4
Authority key identifier: 28:87:53:9E:33:55:74:7F:47:C7:CA:2F:86:A1:FF:EF:1A:17:FE:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2887539E3355747F47C7CA2F86A1FFEF1A17FE08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GAvVRDuEX7Kff8t8CWmkDny9Wy9WpxBDE9NxcUSBKXBV/1/3138312e3232342e382e302f32322d3234203d3e20323731343234.roa
Signing time:             Wed 03 Apr 2024 18:31:04 +0000
ROA not before:           Wed 03 Apr 2024 18:26:04 +0000
ROA not after:            Wed 02 Apr 2025 18:31:04 +0000
asID:                     271424
IP address blocks:        181.224.8.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GAvVRDuEX7Kff8t8CWmkDny9Wy9WpxBDE9NxcUSBKXBV/1/2887539E3355747F47C7CA2F86A1FFEF1A17FE08.crl
                          rsync://rpki-repo.registro.br/repo/GAvVRDuEX7Kff8t8CWmkDny9Wy9WpxBDE9NxcUSBKXBV/1/2887539E3355747F47C7CA2F86A1FFEF1A17FE08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2887539E3355747F47C7CA2F86A1FFEF1A17FE08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:cc:62:47:d4:59:c9:cc:ba:8a:55:dd:a6:8d:f7:ac:98:99:6a:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2887539E3355747F47C7CA2F86A1FFEF1A17FE08
        Validity
            Not Before: Apr  3 18:26:04 2024 GMT
            Not After : Apr  2 18:31:04 2025 GMT
        Subject: CN=452711AD579C0267337D54E3AB252B4AF856CD9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c9:93:68:82:b5:84:c0:b6:09:1f:38:2c:14:
                    95:13:e6:40:a8:b8:31:2e:00:cf:dd:b8:56:59:ba:
                    4a:0f:65:be:cc:c0:ae:65:51:38:13:8b:d3:94:5b:
                    88:40:40:10:ee:13:a7:0d:2d:82:d6:e0:38:59:38:
                    a6:81:32:16:8c:88:13:49:4e:06:37:c0:4f:f7:0c:
                    2d:08:8a:f9:b1:24:52:b1:e9:10:09:62:de:88:25:
                    d8:d7:21:28:cd:c2:d5:7b:4e:c3:ab:91:00:0b:d7:
                    df:bd:77:41:e0:80:ca:95:e0:53:79:3c:59:ae:68:
                    e9:ee:d2:b7:d1:ef:0e:2e:38:5a:8c:ca:71:71:be:
                    e5:02:41:24:92:36:7e:a7:2d:d5:90:61:de:50:09:
                    32:ae:c0:f1:e2:53:11:61:31:a0:71:e9:46:81:a9:
                    24:ab:71:b7:4d:37:a1:80:c3:b4:6a:f3:96:81:72:
                    53:cb:3d:42:e2:ba:4e:36:99:ef:0b:8b:63:89:ab:
                    eb:18:50:7a:22:80:9e:c1:86:68:7a:6e:9d:97:e8:
                    83:80:35:0a:36:63:78:22:6a:75:c8:e0:2d:f6:96:
                    30:f5:74:b0:4d:85:34:88:58:b3:8e:30:60:bf:29:
                    7c:12:60:9f:58:bc:80:dd:72:d6:9f:2a:98:76:06:
                    2d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:27:11:AD:57:9C:02:67:33:7D:54:E3:AB:25:2B:4A:F8:56:CD:9F
            X509v3 Authority Key Identifier:
                keyid:28:87:53:9E:33:55:74:7F:47:C7:CA:2F:86:A1:FF:EF:1A:17:FE:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GAvVRDuEX7Kff8t8CWmkDny9Wy9WpxBDE9NxcUSBKXBV/1/2887539E3355747F47C7CA2F86A1FFEF1A17FE08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2887539E3355747F47C7CA2F86A1FFEF1A17FE08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GAvVRDuEX7Kff8t8CWmkDny9Wy9WpxBDE9NxcUSBKXBV/1/3138312e3232342e382e302f32322d3234203d3e20323731343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:47:d7:94:e3:61:fa:f8:f0:2c:51:bd:1b:ee:97:a7:13:0a:
         6e:a4:ab:5f:24:58:25:eb:be:08:41:87:fb:49:0f:3e:cb:ed:
         3d:95:73:7b:de:3a:54:3b:70:19:11:75:41:91:8f:bc:ca:b1:
         8a:a5:c1:dc:26:1b:43:78:8e:18:0e:0a:f7:ff:93:96:06:35:
         a6:31:76:ef:03:79:6e:c3:d4:87:52:a5:d3:09:cb:c2:3b:fb:
         d0:90:2b:06:7d:87:54:70:42:69:70:99:c1:57:ed:58:2b:a7:
         db:63:ea:1e:a9:6f:bf:7d:f4:18:22:7b:9b:e5:13:fc:3e:db:
         8c:c1:bd:cc:43:6c:2b:f2:e9:12:eb:7c:af:61:d1:4a:20:fd:
         cc:65:27:2c:8d:83:95:ac:a2:0c:9f:af:ae:c6:4c:97:d0:bf:
         de:24:77:38:f3:7c:b0:89:d8:7a:ba:de:27:27:b8:bd:ca:40:
         ef:3d:32:7e:e2:a0:0e:4b:ab:62:f1:8f:8c:99:3b:fb:18:83:
         6d:06:9c:a4:bb:21:bf:06:88:e3:6b:93:e4:54:d6:a8:8b:19:
         55:0a:18:c7:e0:18:a4:f1:77:5f:78:13:19:0c:9c:db:5a:60:
         e0:19:d4:5b:da:90:0c:04:63:68:ca:70:4f:3f:0c:b9:e2:f9:
         a8:b5:aa:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:45 2024 by rpki-client on console-fra.rpki-client.org