Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/1/3138312e3233332e31362e302f32322d3232203d3e20323731343834.roa
File:                     3138312e3233332e31362e302f32322d3232203d3e20323731343834.roa (raw, json)
Hash identifier:          CWRABD3L2XHrMqsdM2STz4Fsoaz/8iGKhlr3mlQv8+g=
Subject key identifier:   E5:2B:BB:58:55:BF:45:44:E1:4B:82:A4:7C:EF:53:46:1B:EA:03:D9
Certificate issuer:       /CN=7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD
Certificate serial:       0EF3541F07B6ABD549FD081DA4B2266C3B378D64
Authority key identifier: 77:19:B4:6C:C2:C7:4F:9E:A6:E2:46:A3:FF:A5:BB:47:77:EE:08:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/1/3138312e3233332e31362e302f32322d3232203d3e20323731343834.roa
Signing time:             Thu 04 Apr 2024 06:58:00 +0000
ROA not before:           Thu 04 Apr 2024 06:53:00 +0000
ROA not after:            Thu 03 Apr 2025 06:58:00 +0000
asID:                     271484
IP address blocks:        181.233.16.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/1/7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD.crl
                          rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/1/7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 21:04:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:f3:54:1f:07:b6:ab:d5:49:fd:08:1d:a4:b2:26:6c:3b:37:8d:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD
        Validity
            Not Before: Apr  4 06:53:00 2024 GMT
            Not After : Apr  3 06:58:00 2025 GMT
        Subject: CN=E52BBB5855BF4544E14B82A47CEF53461BEA03D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:95:8d:0d:c6:68:f1:a3:9e:2d:66:c7:49:d5:
                    da:01:24:57:c0:08:92:d3:5d:2a:23:86:33:bb:01:
                    11:10:42:29:28:97:84:ba:8a:24:d0:34:df:93:2d:
                    79:81:da:a5:ff:40:8a:ee:83:83:43:ab:9c:11:d8:
                    4e:ae:de:a7:d5:97:0d:d7:a1:8c:59:c2:ff:b2:15:
                    4f:fc:e5:58:c6:56:6f:f5:12:e2:8d:86:6f:4b:25:
                    11:41:83:4e:84:2b:da:e8:a7:62:23:eb:2f:ac:bc:
                    f9:3d:0a:37:c2:ab:11:20:b4:87:e1:61:b1:35:c0:
                    f6:57:ca:c7:2a:7d:77:ee:39:f6:ae:f0:f7:95:f7:
                    ef:6b:c4:9b:d8:7a:78:b5:05:8c:c2:c4:8a:c6:48:
                    19:0e:46:75:71:96:01:ab:31:06:4e:38:de:a0:e6:
                    83:c9:a5:6f:16:7c:3b:f6:55:db:5c:34:93:bc:5d:
                    59:2f:e8:45:d8:de:df:22:cf:f3:05:96:ee:11:ee:
                    0b:61:6d:26:80:1d:33:c1:53:a0:fa:29:34:72:1c:
                    00:3c:e0:56:7a:15:eb:be:f2:46:db:46:ea:26:17:
                    3e:4f:98:4d:9e:09:1f:8a:e0:cb:f2:0c:03:5b:8a:
                    e3:d4:64:44:1b:e7:9f:c2:2b:7e:3c:ab:ba:83:8c:
                    5e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:2B:BB:58:55:BF:45:44:E1:4B:82:A4:7C:EF:53:46:1B:EA:03:D9
            X509v3 Authority Key Identifier:
                keyid:77:19:B4:6C:C2:C7:4F:9E:A6:E2:46:A3:FF:A5:BB:47:77:EE:08:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/1/7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/1/3138312e3233332e31362e302f32322d3232203d3e20323731343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:1d:40:08:6c:93:47:04:7a:6f:7b:7e:13:e4:2e:d1:36:89:
         db:b9:15:aa:c5:f8:8f:3d:21:25:5d:6d:6f:59:3d:8d:3e:4d:
         80:67:bd:8c:e7:fe:b6:81:61:37:63:57:eb:2b:8e:8a:5e:e7:
         d1:15:7e:55:77:d6:7a:ea:5f:cb:c5:54:7b:c4:f2:0a:88:d1:
         dc:97:f3:80:0a:4a:51:8c:69:0d:a8:59:3f:91:99:5c:69:66:
         35:a9:7b:f6:b9:9c:d9:e3:e3:53:ac:3f:63:b3:85:20:0b:71:
         4c:b2:0f:de:08:72:9c:54:c8:b7:a4:ed:ac:c0:1d:e7:14:70:
         ea:7d:73:03:9e:ef:d7:8e:89:09:89:ea:6e:b6:e5:8f:41:cf:
         6c:75:72:53:b5:fc:71:3b:06:f1:23:8c:44:9f:e0:e0:ae:c9:
         96:fc:df:9d:26:ca:04:cf:84:71:cc:3c:36:03:ce:a6:c2:49:
         77:1f:57:b8:32:bc:83:36:69:0d:ae:3a:0d:8d:35:26:d4:23:
         fb:9b:a8:eb:aa:cb:3e:8b:c1:9c:34:54:d1:ba:9f:54:49:78:
         82:3f:23:7a:e6:12:28:e5:62:89:99:06:a2:63:47:4e:73:f0:
         b5:ff:15:04:f9:a8:b9:a5:6e:17:75:53:b1:17:c0:d6:7e:e2:
         87:12:df:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 19:50:11 2024 by rpki-client on console-fra.rpki-client.org