Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/3138312e3138392e382e302f32322d3232203d3e20323731333830.roa
File:                     3138312e3138392e382e302f32322d3232203d3e20323731333830.roa (raw, json)
Hash identifier:          XGvNl3yE55p03Or1m6Ri2EpAX/PiXIS4wVWGfeGlmUc=
Subject key identifier:   CA:C4:2D:A5:95:BD:37:9E:DE:15:F0:4E:18:9F:71:9A:91:46:F9:E2
Certificate issuer:       /CN=4AB61C2BEB228083B61C39B853C001DD574DE2FB
Certificate serial:       655E06570BCBCF203CC784624C85178B9F156BD7
Authority key identifier: 4A:B6:1C:2B:EB:22:80:83:B6:1C:39:B8:53:C0:01:DD:57:4D:E2:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/3138312e3138392e382e302f32322d3232203d3e20323731333830.roa
Signing time:             Thu 04 Apr 2024 13:38:35 +0000
ROA not before:           Thu 04 Apr 2024 13:33:35 +0000
ROA not after:            Thu 03 Apr 2025 13:38:35 +0000
asID:                     271380
IP address blocks:        181.189.8.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.crl
                          rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:5e:06:57:0b:cb:cf:20:3c:c7:84:62:4c:85:17:8b:9f:15:6b:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AB61C2BEB228083B61C39B853C001DD574DE2FB
        Validity
            Not Before: Apr  4 13:33:35 2024 GMT
            Not After : Apr  3 13:38:35 2025 GMT
        Subject: CN=CAC42DA595BD379EDE15F04E189F719A9146F9E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:86:a0:c6:03:c1:38:62:3b:a1:91:be:af:a7:
                    ca:47:03:30:ff:62:a5:9c:47:15:1d:d2:ae:a8:54:
                    09:fd:d9:12:54:df:54:b6:f2:db:79:2c:c0:a3:c2:
                    fb:5d:49:5b:05:4b:21:31:5f:96:e0:4e:d8:e7:b6:
                    b8:c8:7f:56:d8:cb:3f:d6:e9:8f:70:3f:35:42:21:
                    5a:00:2c:0c:bd:15:14:fb:82:52:de:37:5b:6f:f6:
                    0d:5b:d6:00:3e:ca:53:b7:11:c4:51:d8:b0:87:81:
                    cd:7f:fc:d0:f4:39:01:c6:0a:d7:d9:d6:8c:af:a4:
                    9b:e2:0d:4b:2b:c8:3b:34:cc:e8:66:52:6a:d4:ae:
                    90:9b:68:25:30:ec:41:93:69:f4:e2:cc:01:bc:72:
                    cc:0b:90:45:54:25:b4:13:2d:ea:1b:4b:27:a9:51:
                    3c:1c:fc:9f:e2:17:29:e7:88:78:bf:ab:80:e6:6d:
                    cb:61:a4:19:9a:23:7b:d2:b9:c5:60:9d:1c:07:be:
                    6d:37:be:fd:a0:69:e0:c4:17:76:cf:24:1b:d7:dd:
                    d9:89:84:d2:2d:4b:98:d2:66:12:6d:3f:59:29:a1:
                    3d:c6:63:11:38:07:4b:e9:9f:39:02:05:98:ab:41:
                    26:84:60:6f:31:98:d7:68:fd:c0:49:2f:23:8d:e4:
                    95:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:C4:2D:A5:95:BD:37:9E:DE:15:F0:4E:18:9F:71:9A:91:46:F9:E2
            X509v3 Authority Key Identifier:
                keyid:4A:B6:1C:2B:EB:22:80:83:B6:1C:39:B8:53:C0:01:DD:57:4D:E2:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/3138312e3138392e382e302f32322d3232203d3e20323731333830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         da:3a:72:c4:c4:df:7c:89:7b:6f:40:50:a1:d8:6d:41:bc:81:
         23:db:ec:bb:a9:42:8a:95:ea:90:2a:82:dd:e2:00:5e:79:32:
         52:e3:c5:35:99:e7:35:59:01:cf:6d:d4:26:67:48:91:61:90:
         53:3e:43:7e:21:59:8c:4b:bb:73:8d:ce:d6:13:27:86:ff:c7:
         9a:18:ff:84:72:77:62:da:cf:26:57:71:b8:89:ee:71:e0:84:
         ba:58:fd:ff:5e:bc:a3:87:26:9a:6a:fb:7c:c5:5e:bb:81:3d:
         ad:53:4e:68:99:56:76:42:73:c3:23:48:ca:85:7e:23:bb:9f:
         0c:80:e2:f2:5c:cd:0f:a3:91:7d:03:aa:b6:98:f2:21:68:15:
         0b:17:71:ab:75:f7:73:d8:e4:86:1b:ed:92:11:ed:95:f7:a5:
         1a:bd:79:45:df:a2:de:65:02:ea:57:1c:bc:d2:6e:b5:cd:3f:
         bf:53:3b:7d:c9:83:37:13:4f:93:3f:e6:a0:4f:52:8a:53:eb:
         95:d1:b1:5b:98:0e:d7:a9:ef:88:13:a0:1f:76:6c:b9:dc:98:
         12:e1:68:12:e6:a6:ef:b1:03:8c:6c:9d:96:0a:9b:44:22:9a:
         cd:19:85:60:7e:03:4a:7f:e6:20:ae:db:fa:c9:00:95:43:1a:
         f2:da:eb:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:01:28 2024 by rpki-client on console-ams.rpki-client.org