Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/1/3138312e3233332e31362e302f32332d3233203d3e20323731343834.roa
File:                     3138312e3233332e31362e302f32332d3233203d3e20323731343834.roa (raw, json)
Hash identifier:          d2bDJaMZkjwhIjLjYf1LR7/IwBh/t3sS86gx0tmCoMA=
Subject key identifier:   C6:53:DB:0C:C2:F2:44:5E:FD:E8:D0:57:32:A3:73:71:FF:91:EF:56
Certificate issuer:       /CN=7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD
Certificate serial:       6C94450D32650C12B610F27021DBF28354601FEC
Authority key identifier: 77:19:B4:6C:C2:C7:4F:9E:A6:E2:46:A3:FF:A5:BB:47:77:EE:08:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/1/3138312e3233332e31362e302f32332d3233203d3e20323731343834.roa
Signing time:             Thu 04 Apr 2024 06:58:01 +0000
ROA not before:           Thu 04 Apr 2024 06:53:01 +0000
ROA not after:            Thu 03 Apr 2025 06:58:01 +0000
asID:                     271484
IP address blocks:        181.233.16.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/1/7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD.crl
                          rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/1/7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 21:04:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:94:45:0d:32:65:0c:12:b6:10:f2:70:21:db:f2:83:54:60:1f:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD
        Validity
            Not Before: Apr  4 06:53:01 2024 GMT
            Not After : Apr  3 06:58:01 2025 GMT
        Subject: CN=C653DB0CC2F2445EFDE8D05732A37371FF91EF56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:07:32:21:0c:42:ba:09:71:c0:f9:02:b6:94:
                    05:db:ee:31:28:1e:01:7c:9b:5b:19:e9:83:66:7c:
                    81:56:8b:69:64:93:0c:ce:c1:7f:3e:e1:5f:b4:a5:
                    95:93:f2:e2:9e:45:f5:f1:83:ab:83:6a:06:31:f1:
                    70:f4:b3:a4:cb:cb:31:53:2a:70:75:3b:59:b1:85:
                    6f:9a:f0:1b:47:f6:26:4f:c8:11:e2:e6:cf:60:bd:
                    f3:84:c6:ba:88:93:e5:7f:62:cc:ac:0c:ae:2a:cf:
                    41:fc:22:ce:8c:04:3a:a5:39:e5:95:90:d4:f9:6c:
                    4d:bc:b0:4a:f4:81:ff:e9:46:52:b9:60:29:9d:0f:
                    69:0e:1b:97:8d:69:ab:29:cb:85:69:e5:b9:ad:89:
                    5c:97:82:a8:33:fd:1c:36:a1:a1:60:dc:c4:1a:fe:
                    00:d9:e8:53:52:a5:bf:38:48:57:01:5a:13:77:b2:
                    1f:56:39:9f:9f:2c:23:58:40:e4:7c:6e:4d:33:d1:
                    b0:0b:ab:8b:e3:96:b3:c8:88:99:01:8f:71:a6:b0:
                    76:74:28:2a:61:e3:de:3f:30:aa:4b:64:37:b6:0a:
                    1e:98:c4:02:e8:60:6a:04:ba:a8:fc:7a:26:8f:fe:
                    74:ce:87:58:a2:2e:c3:4d:bc:11:15:8f:39:36:a3:
                    fc:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:53:DB:0C:C2:F2:44:5E:FD:E8:D0:57:32:A3:73:71:FF:91:EF:56
            X509v3 Authority Key Identifier:
                keyid:77:19:B4:6C:C2:C7:4F:9E:A6:E2:46:A3:FF:A5:BB:47:77:EE:08:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/1/7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/1/3138312e3233332e31362e302f32332d3233203d3e20323731343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:79:9f:1d:1d:3c:42:fb:96:16:83:a1:35:fa:eb:d8:f1:e8:
         b7:56:b8:d2:31:d2:ee:fe:16:40:cd:eb:8e:e3:0b:02:a6:d8:
         f8:de:2b:63:83:8b:da:13:3e:7a:fa:8b:38:36:d1:65:d0:66:
         ec:f6:44:d7:9a:a9:3f:26:6e:4a:63:74:ca:f7:1f:af:75:b1:
         0b:56:86:16:d1:7a:a2:0e:c9:69:3c:33:5d:b6:45:d6:72:9e:
         ea:55:c8:9e:a2:e9:a9:83:10:8f:4f:d0:9d:c0:42:53:60:69:
         f9:aa:87:f4:45:0a:04:23:a2:92:da:59:50:6f:ea:a6:52:27:
         10:c2:48:b8:0b:3a:7e:a6:f8:fe:05:62:95:ba:b1:6b:5e:74:
         c4:0b:40:c8:17:1c:97:47:28:24:19:11:50:c2:c9:68:9b:b4:
         55:97:78:ff:7e:35:9d:04:1c:ea:d3:65:40:af:9b:b7:cb:71:
         a8:9a:53:ac:68:68:d8:83:71:d3:de:4c:19:9b:fc:f9:f9:d7:
         1d:92:15:b8:dc:2e:8c:14:9b:87:d3:04:79:e0:a3:31:30:a0:
         2a:c3:80:2c:14:40:7d:7a:ca:cb:d4:ab:a4:05:e6:07:f6:7d:
         a9:9c:7d:19:71:7c:b3:51:3a:4d:e3:c7:7d:8c:20:d9:88:a0:
         22:46:0f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 21:10:59 2024 by rpki-client on console-ams.rpki-client.org