Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/1/3138312e3233322e3132382e302f32322d3234203d3e20323731353132.roa
File:                     3138312e3233322e3132382e302f32322d3234203d3e20323731353132.roa (raw, json)
Hash identifier:          r+H73vaGuCEfODi5eClmd/31eBFRpp4vdG6hZ8Q8oS4=
Subject key identifier:   B0:AC:42:5A:B9:20:36:82:35:2C:78:C0:3D:04:53:61:6E:D4:82:BB
Certificate issuer:       /CN=DD01CCF18E70CFC5DB5B0F2DA098EAF53196CBD1
Certificate serial:       33496B87CB33C1A997D92AA09151A10D0B93EEBA
Authority key identifier: DD:01:CC:F1:8E:70:CF:C5:DB:5B:0F:2D:A0:98:EA:F5:31:96:CB:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD01CCF18E70CFC5DB5B0F2DA098EAF53196CBD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/1/3138312e3233322e3132382e302f32322d3234203d3e20323731353132.roa
Signing time:             Thu 04 Apr 2024 23:09:11 +0000
ROA not before:           Thu 04 Apr 2024 23:04:11 +0000
ROA not after:            Thu 03 Apr 2025 23:09:11 +0000
asID:                     271512
IP address blocks:        181.232.128.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/1/DD01CCF18E70CFC5DB5B0F2DA098EAF53196CBD1.crl
                          rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/1/DD01CCF18E70CFC5DB5B0F2DA098EAF53196CBD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD01CCF18E70CFC5DB5B0F2DA098EAF53196CBD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:18:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:49:6b:87:cb:33:c1:a9:97:d9:2a:a0:91:51:a1:0d:0b:93:ee:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD01CCF18E70CFC5DB5B0F2DA098EAF53196CBD1
        Validity
            Not Before: Apr  4 23:04:11 2024 GMT
            Not After : Apr  3 23:09:11 2025 GMT
        Subject: CN=B0AC425AB9203682352C78C03D0453616ED482BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d2:b9:e0:4a:9c:dc:14:40:ff:0f:2f:98:19:
                    d7:91:f8:21:3a:d3:80:85:8e:b2:fe:58:1b:f9:5b:
                    2b:6d:66:64:1a:4c:59:81:24:f3:85:aa:77:dc:a7:
                    7c:ff:db:e4:88:f0:ce:9f:e8:c5:93:b2:f4:e7:de:
                    f4:02:3d:83:59:24:67:05:2a:a0:1f:ac:01:97:17:
                    02:5b:c9:32:47:a0:e3:cc:f7:3a:95:08:6a:b3:d5:
                    24:ad:58:59:de:d8:04:1a:17:ff:52:d6:64:55:83:
                    f1:72:38:51:e5:b1:72:31:37:56:1a:45:ee:ac:5b:
                    03:39:bc:b7:2b:30:b7:c7:9d:82:64:79:52:37:67:
                    74:52:77:71:53:15:d4:f4:38:1b:2e:6a:47:cc:37:
                    15:1e:50:dd:4d:43:b0:d2:d9:e6:35:fb:b5:8d:aa:
                    5f:c7:98:6f:10:45:c3:15:6e:ed:3f:59:99:a7:b2:
                    d1:6a:02:31:64:12:c8:77:a5:2b:eb:74:a2:e2:d4:
                    61:12:d7:58:db:4b:3a:62:f9:e2:99:3f:95:ba:1c:
                    ea:52:33:87:42:94:9d:29:4c:2d:88:60:74:cd:bd:
                    72:fe:a2:38:45:2d:5d:6f:89:a8:99:d0:4d:c4:62:
                    01:3a:3b:2e:7b:2f:00:24:2c:9e:9c:b8:57:6c:61:
                    22:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:AC:42:5A:B9:20:36:82:35:2C:78:C0:3D:04:53:61:6E:D4:82:BB
            X509v3 Authority Key Identifier:
                keyid:DD:01:CC:F1:8E:70:CF:C5:DB:5B:0F:2D:A0:98:EA:F5:31:96:CB:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/1/DD01CCF18E70CFC5DB5B0F2DA098EAF53196CBD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD01CCF18E70CFC5DB5B0F2DA098EAF53196CBD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/1/3138312e3233322e3132382e302f32322d3234203d3e20323731353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:c5:d8:65:b1:95:52:48:8d:61:e7:58:39:5f:04:44:d6:61:
         68:0a:05:d4:d0:b1:cc:34:ab:8e:78:ab:27:ed:a6:a6:a3:95:
         7c:99:21:0d:40:ac:f3:97:ad:39:ad:e6:4b:e3:c9:20:9d:82:
         e4:af:9c:13:9c:55:14:99:b1:f5:d7:cc:1f:cd:d2:b1:70:1a:
         e2:f2:7b:7f:e2:25:53:ef:01:45:eb:11:bf:1e:99:89:61:37:
         8d:5c:be:d4:b0:f0:d3:cb:5e:11:cb:2c:e0:03:fa:0f:61:ab:
         94:c6:64:0e:21:2a:6b:f6:25:f4:d4:83:0a:23:9b:21:6c:5f:
         c1:cb:a4:82:77:3f:7a:5b:ae:d8:1b:2e:58:45:39:e1:11:b3:
         d7:71:fd:fa:98:96:df:34:00:c1:03:b0:4a:95:a8:e6:e2:cc:
         cf:ee:cc:23:e1:fb:f5:eb:61:81:32:d4:12:53:d1:d3:dc:38:
         84:7e:26:e9:7f:11:37:5a:ec:a3:e3:fc:6a:cc:57:ae:41:2b:
         cb:b2:b1:04:4f:bd:ec:44:80:b4:0c:ba:fd:34:d2:13:d3:70:
         82:6e:8c:10:04:48:34:99:27:30:d0:e1:99:28:f4:3a:65:b1:
         be:a8:07:e0:de:15:d7:0d:67:8a:fc:09:2d:77:91:c8:91:6a:
         28:e1:ce:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:32 2024 by rpki-client on console-ams.rpki-client.org