Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/1/3138312e3233332e31372e302f32342d3234203d3e20323731343834.roa
File:                     3138312e3233332e31372e302f32342d3234203d3e20323731343834.roa (raw, json)
Hash identifier:          /8d1vAFINcr/woQnRvY+i7p6msWKnPgq1ijA2KlcNBA=
Subject key identifier:   BB:92:AD:6C:F3:3E:6D:29:A1:AC:1E:43:F3:E2:28:BA:20:39:A6:1E
Certificate issuer:       /CN=7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD
Certificate serial:       4DAFA570261A81D6A9D98DEBD40FC3F93ABE47CC
Authority key identifier: 77:19:B4:6C:C2:C7:4F:9E:A6:E2:46:A3:FF:A5:BB:47:77:EE:08:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/1/3138312e3233332e31372e302f32342d3234203d3e20323731343834.roa
Signing time:             Thu 04 Apr 2024 06:57:59 +0000
ROA not before:           Thu 04 Apr 2024 06:52:59 +0000
ROA not after:            Thu 03 Apr 2025 06:57:59 +0000
asID:                     271484
IP address blocks:        181.233.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/1/7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD.crl
                          rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/1/7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 21:04:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:af:a5:70:26:1a:81:d6:a9:d9:8d:eb:d4:0f:c3:f9:3a:be:47:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD
        Validity
            Not Before: Apr  4 06:52:59 2024 GMT
            Not After : Apr  3 06:57:59 2025 GMT
        Subject: CN=BB92AD6CF33E6D29A1AC1E43F3E228BA2039A61E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a5:b0:7b:67:d6:6f:16:9a:71:24:d9:28:b3:
                    c2:87:ad:f6:5c:46:40:0e:af:68:46:87:2d:71:3b:
                    3c:53:71:ae:60:75:a6:7d:39:de:78:a3:c8:92:50:
                    cd:b0:f2:5b:da:50:2f:47:e3:1a:d8:b1:cd:0a:07:
                    a0:a8:6d:a5:97:c7:c6:d6:58:44:d7:88:eb:95:e9:
                    10:4e:2f:67:a4:cc:5c:30:43:4d:73:79:31:61:33:
                    65:4c:35:c4:42:a0:ae:99:58:0d:79:87:72:0c:8a:
                    8e:95:c0:ad:af:b6:59:af:bb:94:61:09:6b:bd:4f:
                    e3:ea:4d:ac:50:0a:ac:ee:bc:97:b1:97:ed:b2:9b:
                    f2:ed:0d:c8:4d:df:8b:bb:28:73:c2:23:99:c6:57:
                    59:1c:a7:71:34:0d:44:e0:20:c8:a7:66:8f:0a:b6:
                    b8:69:e7:22:5c:df:4e:2b:fb:3d:cc:10:81:ea:24:
                    e7:0b:4a:66:59:27:38:bf:d8:74:4e:c8:e0:83:34:
                    a7:70:60:81:8d:10:75:b1:e1:d3:13:7f:31:a8:8e:
                    dd:98:55:2a:a2:30:9e:d6:b7:c4:9f:4f:2f:fa:ed:
                    d8:68:be:f6:b0:29:74:93:17:ec:95:ba:d4:a2:f9:
                    ee:f6:18:d9:74:19:6d:b5:14:3d:f7:0e:76:17:b4:
                    c9:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:92:AD:6C:F3:3E:6D:29:A1:AC:1E:43:F3:E2:28:BA:20:39:A6:1E
            X509v3 Authority Key Identifier:
                keyid:77:19:B4:6C:C2:C7:4F:9E:A6:E2:46:A3:FF:A5:BB:47:77:EE:08:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/1/7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/1/3138312e3233332e31372e302f32342d3234203d3e20323731343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:c3:25:2d:68:0a:e4:2b:be:74:2e:c8:51:10:eb:8e:48:4e:
         a9:87:6c:c5:73:66:73:73:18:ae:1d:71:4f:7b:73:5e:6f:b5:
         37:a1:08:4f:35:04:0e:fe:cd:b0:20:a7:e1:81:c0:f1:a7:54:
         db:47:ab:28:84:89:45:34:11:93:de:b3:26:c4:15:97:e9:0a:
         41:3e:5c:0b:ab:7c:6b:2d:ec:bb:90:7f:05:a9:69:82:ee:8a:
         db:f9:fc:ad:ad:01:17:a2:1e:d3:44:c5:8c:15:05:7d:a0:fd:
         4c:81:f9:8e:ef:4e:5c:5a:bf:97:c7:a7:4e:44:03:36:45:9b:
         5f:81:b6:bb:2c:d3:ad:35:6e:a2:bd:24:42:55:18:1d:32:41:
         ed:2d:63:b1:2a:26:19:86:00:27:bc:e2:66:c0:79:b0:45:49:
         02:6a:ca:a3:e0:de:a6:39:36:c0:c5:6f:f9:58:a7:85:7c:32:
         94:e4:e7:4a:20:9f:c8:b4:e2:e5:72:1f:c4:ff:37:e7:98:71:
         8e:d1:8e:ba:58:a2:c2:b7:e0:d6:8c:f4:f8:08:a3:6a:66:aa:
         56:db:f8:5f:1a:76:de:30:5c:80:2b:91:fd:fb:24:ea:d7:1a:
         2a:df:fb:ef:91:21:85:9e:3f:c0:7f:5b:3b:c4:c4:bf:94:6b:
         dc:0d:18:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 21:10:59 2024 by rpki-client on console-ams.rpki-client.org