Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2UmbrZVmJw5kWpvZHv3yCLvGeiLf9681j3DuR9tmv8Ex/0/3138312e3233332e33332e302f32342d3234203d3e20323632333134.roa
File:                     3138312e3233332e33332e302f32342d3234203d3e20323632333134.roa (raw, json)
Hash identifier:          1utWnKgvFyItJeUD1NxUtJBrrTZeSQTPvIfhQm/aJ8M=
Subject key identifier:   51:5E:50:29:5D:29:60:C1:01:39:D0:0E:27:31:D9:91:E0:79:6C:43
Certificate issuer:       /CN=910800F18E96181F4CD878BAE067D0CFA1814220
Certificate serial:       2B38AF9268839E4AECD179093CBEFEC45F388EB4
Authority key identifier: 91:08:00:F1:8E:96:18:1F:4C:D8:78:BA:E0:67:D0:CF:A1:81:42:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/910800F18E96181F4CD878BAE067D0CFA1814220.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2UmbrZVmJw5kWpvZHv3yCLvGeiLf9681j3DuR9tmv8Ex/0/3138312e3233332e33332e302f32342d3234203d3e20323632333134.roa
Signing time:             Mon 30 Sep 2024 19:05:09 +0000
ROA not before:           Mon 30 Sep 2024 19:00:09 +0000
ROA not after:            Mon 29 Sep 2025 19:05:09 +0000
asID:                     262314
IP address blocks:        181.233.33.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2UmbrZVmJw5kWpvZHv3yCLvGeiLf9681j3DuR9tmv8Ex/0/910800F18E96181F4CD878BAE067D0CFA1814220.crl
                          rsync://rpki-repo.registro.br/repo/2UmbrZVmJw5kWpvZHv3yCLvGeiLf9681j3DuR9tmv8Ex/0/910800F18E96181F4CD878BAE067D0CFA1814220.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/910800F18E96181F4CD878BAE067D0CFA1814220.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 04:02:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:38:af:92:68:83:9e:4a:ec:d1:79:09:3c:be:fe:c4:5f:38:8e:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=910800F18E96181F4CD878BAE067D0CFA1814220
        Validity
            Not Before: Sep 30 19:00:09 2024 GMT
            Not After : Sep 29 19:05:09 2025 GMT
        Subject: CN=515E50295D2960C10139D00E2731D991E0796C43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ea:ab:ed:33:05:b8:24:b7:05:e1:67:31:04:
                    95:a3:94:a2:2a:80:2a:98:10:ea:4e:85:ce:f3:be:
                    43:89:e7:e6:5d:dc:37:8e:a5:e7:05:44:ac:1f:b7:
                    5f:d0:df:ae:20:84:78:bf:b6:e3:df:59:fa:86:49:
                    56:d2:3f:35:cc:cf:06:95:76:c4:65:20:5a:9f:3c:
                    94:77:b7:dc:a4:96:64:bf:25:1e:40:f3:c7:15:ae:
                    02:1a:25:66:33:6f:6a:20:78:53:90:2d:97:e6:f0:
                    b4:b8:de:24:da:e5:c9:23:7d:7d:61:b4:95:cf:71:
                    e8:9f:a2:ba:63:8e:03:19:ed:5e:01:2f:c3:8b:7a:
                    81:8d:d1:f7:51:60:7d:fb:e9:18:cc:31:41:f4:e6:
                    ed:48:54:f1:9a:c3:d7:f0:d3:da:f2:c4:8a:83:84:
                    f1:07:cf:2d:71:6b:42:7f:5c:79:40:a7:3b:df:2d:
                    ae:cf:a6:af:a3:24:8f:4d:83:6f:d1:78:02:5f:22:
                    d5:e9:e6:b1:8a:9b:89:b0:c0:7e:01:5a:34:55:e4:
                    26:04:24:45:ea:8a:94:f9:b0:77:02:d3:8b:25:21:
                    cc:eb:6a:a4:85:bc:19:66:73:f2:5a:a0:bc:c8:d1:
                    6c:e0:9b:53:c2:de:5d:85:b2:f9:1d:7d:22:74:d8:
                    0b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:5E:50:29:5D:29:60:C1:01:39:D0:0E:27:31:D9:91:E0:79:6C:43
            X509v3 Authority Key Identifier:
                keyid:91:08:00:F1:8E:96:18:1F:4C:D8:78:BA:E0:67:D0:CF:A1:81:42:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2UmbrZVmJw5kWpvZHv3yCLvGeiLf9681j3DuR9tmv8Ex/0/910800F18E96181F4CD878BAE067D0CFA1814220.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/910800F18E96181F4CD878BAE067D0CFA1814220.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2UmbrZVmJw5kWpvZHv3yCLvGeiLf9681j3DuR9tmv8Ex/0/3138312e3233332e33332e302f32342d3234203d3e20323632333134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:c6:36:04:98:82:60:64:be:64:4b:c4:45:58:e6:a9:b9:6d:
         35:cb:75:03:b9:0c:8a:a8:b9:dd:46:38:ba:94:76:f8:cf:01:
         fc:c0:b3:5c:78:da:b9:23:01:c8:ea:2d:05:7b:65:0b:ef:f2:
         4e:c7:26:80:d0:39:3a:b6:e2:e3:b6:1d:fc:ff:0b:dd:af:e0:
         57:6a:e0:9d:99:2f:5f:5b:28:ac:fb:3b:22:09:8f:49:50:6d:
         cf:6c:be:64:8e:10:b4:0a:a6:5f:94:26:ee:e8:1c:5d:85:0a:
         a1:5d:02:f0:5f:b3:51:9f:11:6e:73:38:33:9d:dc:0e:ae:b5:
         3c:66:41:16:aa:22:1f:db:53:ab:82:7b:c4:e3:12:de:7b:b6:
         6f:80:2b:91:5d:12:41:99:7d:76:30:8b:d3:b6:35:9d:70:4f:
         af:fb:81:93:48:07:f9:d8:d4:6c:59:41:db:d3:48:d4:ec:3f:
         54:39:ae:ba:ee:9a:29:05:e8:1d:ae:12:24:5e:a9:03:7c:6e:
         00:56:5a:b0:32:f3:02:e9:a8:b8:35:ae:e6:d7:0f:f6:8c:60:
         2b:46:b3:bc:7b:de:0d:d9:b7:ea:0b:84:fc:a4:27:e5:7c:dc:
         14:2b:41:73:88:d1:22:22:de:b6:e7:dc:ee:3b:bb:b0:3d:ea:
         67:36:41:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:15:45 2024 by rpki-client on console-fra.rpki-client.org