Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/1/3138312e3233332e31362e302f32342d3234203d3e20323731343834.roa
File:                     3138312e3233332e31362e302f32342d3234203d3e20323731343834.roa (raw, json)
Hash identifier:          9H5UDXJt8tCz+7ZiYVfF5HGEpipf6T0W3Vq6JcVdSqI=
Subject key identifier:   CE:54:C0:9C:B1:55:D2:73:46:DE:6E:75:E5:1A:BF:F9:C3:7F:38:D0
Certificate issuer:       /CN=7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD
Certificate serial:       5DB61DC1487B2D91C2A74F1BCEE889BCE83950CC
Authority key identifier: 77:19:B4:6C:C2:C7:4F:9E:A6:E2:46:A3:FF:A5:BB:47:77:EE:08:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/1/3138312e3233332e31362e302f32342d3234203d3e20323731343834.roa
Signing time:             Thu 04 Apr 2024 06:58:00 +0000
ROA not before:           Thu 04 Apr 2024 06:53:00 +0000
ROA not after:            Thu 03 Apr 2025 06:58:00 +0000
asID:                     271484
IP address blocks:        181.233.16.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/1/7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD.crl
                          rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/1/7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Jun 2024 14:53:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:b6:1d:c1:48:7b:2d:91:c2:a7:4f:1b:ce:e8:89:bc:e8:39:50:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD
        Validity
            Not Before: Apr  4 06:53:00 2024 GMT
            Not After : Apr  3 06:58:00 2025 GMT
        Subject: CN=CE54C09CB155D27346DE6E75E51ABFF9C37F38D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:76:d8:ce:84:ea:01:ae:37:f7:b9:9a:21:53:
                    e2:82:36:4a:08:61:26:48:a9:68:12:58:65:c1:7b:
                    83:66:d9:95:d5:96:6f:85:9f:3b:24:b1:8f:f2:b2:
                    f6:39:53:60:16:2b:11:d1:18:10:fe:4c:0b:f4:46:
                    81:43:d2:8e:18:2f:7e:f5:18:27:58:03:34:2b:d2:
                    53:3e:aa:60:f4:2f:b6:03:28:55:95:84:15:d1:ee:
                    ab:79:29:8b:1f:b5:38:6d:e8:6e:69:0a:d2:e6:3a:
                    74:ca:c7:b0:f9:01:fe:72:2c:60:b7:36:b2:d8:d0:
                    b8:d4:b0:4f:10:ba:8e:56:91:d3:2c:70:56:47:a8:
                    e5:15:91:a1:e9:b9:c4:c0:f8:fa:d3:6b:f7:9f:00:
                    4d:8a:ad:4a:0f:50:f6:9c:e9:47:9e:e9:16:25:49:
                    75:da:07:7a:e6:13:e7:14:9a:e1:2c:2f:2d:62:e1:
                    83:1f:81:f2:f8:ef:6f:c6:a8:e6:25:24:a9:cd:c1:
                    27:cc:2a:3f:d5:f5:dc:1f:16:95:87:60:61:5f:7a:
                    0e:a5:72:17:d8:59:d9:fc:0a:73:57:af:43:d6:aa:
                    18:c7:4a:b5:00:ba:d0:b1:39:77:6a:aa:41:6d:99:
                    3d:9c:5b:51:96:05:be:25:60:68:f1:ad:8b:a2:01:
                    d5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:54:C0:9C:B1:55:D2:73:46:DE:6E:75:E5:1A:BF:F9:C3:7F:38:D0
            X509v3 Authority Key Identifier:
                keyid:77:19:B4:6C:C2:C7:4F:9E:A6:E2:46:A3:FF:A5:BB:47:77:EE:08:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/1/7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/1/3138312e3233332e31362e302f32342d3234203d3e20323731343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:8a:bd:f8:d5:f9:62:f9:fe:97:4c:e3:dd:be:a5:46:94:74:
         d3:9b:31:8e:02:6f:7d:2c:ab:96:0a:d3:ac:6d:d0:05:1f:33:
         77:ef:c2:65:16:d5:bc:5e:c5:38:82:9e:ae:ec:23:1d:af:8b:
         59:4c:0f:56:d5:8b:4b:a5:b4:00:f7:3c:00:b8:8c:a6:1f:d2:
         be:93:0f:cb:46:27:85:be:55:5e:0a:4f:0e:89:04:1f:99:00:
         3e:84:4b:26:39:fe:5b:64:95:14:4f:85:ad:6b:ac:1f:14:cf:
         92:fa:1d:f4:22:5a:f5:e1:56:d4:97:6a:49:45:ff:38:cf:91:
         0a:f8:8b:30:07:d9:24:9f:4f:2d:fe:d8:0f:22:22:eb:b4:c7:
         31:96:ff:cd:09:a9:ad:33:ab:11:e5:39:70:50:e9:bb:52:09:
         f4:2f:6d:0a:44:81:7f:5b:ba:ab:c0:b5:81:3e:19:3f:c6:a0:
         9a:4e:29:44:74:d9:2b:a9:be:9a:d5:21:0f:29:e1:25:c0:6d:
         fe:df:bf:de:a3:c0:70:9c:8f:dc:8a:52:01:4e:76:26:e4:83:
         f1:0d:ab:fb:78:4e:49:a9:f2:58:3e:76:10:a2:95:d4:a8:39:
         6f:08:4c:4c:13:1e:e8:fd:68:44:e6:76:34:1f:c3:1f:95:61:
         45:5c:f9:22
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXbYdwUh7LZHCp08bzuiJvOg5UMwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzcxOUI0NkNDMkM3NEY5RUE2RTI0NkEzRkZBNUJCNDc3
N0VFMDhGRDAeFw0yNDA0MDQwNjUzMDBaFw0yNTA0MDMwNjU4MDBaMDMxMTAvBgNV
BAMTKENFNTRDMDlDQjE1NUQyNzM0NkRFNkU3NUU1MUFCRkY5QzM3RjM4RDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFdtjOhOoBrjf3uZohU+KCNkoI
YSZIqWgSWGXBe4Nm2ZXVlm+FnzsksY/ysvY5U2AWKxHRGBD+TAv0RoFD0o4YL371
GCdYAzQr0lM+qmD0L7YDKFWVhBXR7qt5KYsftTht6G5pCtLmOnTKx7D5Af5yLGC3
NrLY0LjUsE8Quo5WkdMscFZHqOUVkaHpucTA+PrTa/efAE2KrUoPUPac6Uee6RYl
SXXaB3rmE+cUmuEsLy1i4YMfgfL472/GqOYlJKnNwSfMKj/V9dwfFpWHYGFfeg6l
chfYWdn8CnNXr0PWqhjHSrUAutCxOXdqqkFtmT2cW1GWBb4lYGjxrYuiAdUjAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUzlTAnLFV0nNG3m515Rq/+cN/ONAwHwYDVR0j
BBgwFoAUdxm0bMLHT56m4kaj/6W7R3fuCP0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFZyUGRDckJwdURwZnFVeWlKYkYyaWpSdmp0Y0tQclhVa1RWN3lMdmdv
azQvMS83NzE5QjQ2Q0MyQzc0RjlFQTZFMjQ2QTNGRkE1QkI0Nzc3RUUwOEZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc3MTlCNDZDQzJDNzRGOUVB
NkUyNDZBM0ZGQTVCQjQ3NzdFRTA4RkQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRWclBkQ3JCcHVEcGZxVXlpSmJGMmlqUnZqdGNLUHJYVWtUVjd5THZnb2s0LzEv
MzEzODMxMmUzMjMzMzMyZTMxMzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzEzNDM4MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC16RAwDQYJKoZIhvcNAQELBQADggEBAHWKvfjV
+WL5/pdM492+pUaUdNObMY4Cb30sq5YK06xt0AUfM3fvwmUW1bxexTiCnq7sIx2v
i1lMD1bVi0ultAD3PAC4jKYf0r6TD8tGJ4W+VV4KTw6JBB+ZAD6ESyY5/ltklRRP
ha1rrB8Uz5L6HfQiWvXhVtSXaklF/zjPkQr4izAH2SSfTy3+2A8iIuu0xzGW/80J
qa0zqxHlOXBQ6btSCfQvbQpEgX9buqvAtYE+GT/GoJpOKUR02SupvprVIQ8p4SXA
bf7fv96jwHCcj9yKUgFOdibkg/ENq/t4Tkmp8lg+dhCildSoOW8ITEwTHuj9aETm
djQfwx+VYUVc+SI=
-----END CERTIFICATE-----
Generated at Thu Jun 27 14:46:23 2024 by rpki-client on console-fra.rpki-client.org