Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/1/3138312e3233332e31382e302f32332d3233203d3e20323731343834.roa
File:                     3138312e3233332e31382e302f32332d3233203d3e20323731343834.roa (raw, json)
Hash identifier:          NcUP3qSpDCqYhY1crgbzZkYVAhdyPC6SbP+M9H3/lWg=
Subject key identifier:   F6:0B:BD:DF:8C:52:73:2C:40:FB:33:71:AE:FB:2A:5F:FC:4A:04:AE
Certificate issuer:       /CN=7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD
Certificate serial:       08DD5D9901D850FF51CFA971C8EFAC67F9B22908
Authority key identifier: 77:19:B4:6C:C2:C7:4F:9E:A6:E2:46:A3:FF:A5:BB:47:77:EE:08:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/1/3138312e3233332e31382e302f32332d3233203d3e20323731343834.roa
Signing time:             Thu 04 Apr 2024 06:58:02 +0000
ROA not before:           Thu 04 Apr 2024 06:53:02 +0000
ROA not after:            Thu 03 Apr 2025 06:58:02 +0000
asID:                     271484
IP address blocks:        181.233.18.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/1/7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD.crl
                          rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/1/7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 21:04:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:dd:5d:99:01:d8:50:ff:51:cf:a9:71:c8:ef:ac:67:f9:b2:29:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD
        Validity
            Not Before: Apr  4 06:53:02 2024 GMT
            Not After : Apr  3 06:58:02 2025 GMT
        Subject: CN=F60BBDDF8C52732C40FB3371AEFB2A5FFC4A04AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:99:bc:96:c9:67:bc:87:c0:dc:55:95:7b:de:
                    6f:2e:fa:f1:1f:db:57:c8:ef:11:41:9a:d8:1b:c4:
                    1e:ec:ce:a8:26:4a:8c:5d:e2:a1:d3:01:b5:5c:e0:
                    cc:59:5f:c7:79:49:7a:dc:09:99:18:7d:80:8c:11:
                    ea:2e:65:50:89:fc:87:2f:59:02:2c:aa:6f:3b:5b:
                    86:51:3d:90:00:b0:5f:62:85:66:0c:03:57:01:85:
                    80:d8:51:91:61:08:7a:3c:79:2e:4e:12:f8:b1:71:
                    61:f8:34:ca:ec:ab:05:80:f1:00:4e:6b:08:8b:c0:
                    78:6e:4d:77:27:dc:56:49:be:7f:08:56:e3:3b:65:
                    4c:bc:b5:40:ce:b5:94:46:d8:3e:b5:68:e9:b4:e1:
                    83:9a:a9:d2:01:85:2c:9b:88:be:05:38:6d:38:52:
                    fc:ce:de:2b:82:e9:ef:3d:95:65:5b:78:94:bf:6e:
                    0a:78:4e:5d:fe:1e:c6:70:0f:c0:26:e2:bc:5e:c2:
                    db:06:68:c0:ca:66:24:a3:85:ec:d6:86:64:06:42:
                    c9:4a:ba:54:7c:40:6c:1c:71:35:70:4c:a5:7c:25:
                    80:69:a0:8e:c4:2a:b0:a0:1c:19:fa:fc:36:11:6d:
                    b3:bb:26:2d:9c:c3:94:bb:60:00:bf:1b:c1:d4:25:
                    64:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:0B:BD:DF:8C:52:73:2C:40:FB:33:71:AE:FB:2A:5F:FC:4A:04:AE
            X509v3 Authority Key Identifier:
                keyid:77:19:B4:6C:C2:C7:4F:9E:A6:E2:46:A3:FF:A5:BB:47:77:EE:08:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/1/7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/1/3138312e3233332e31382e302f32332d3233203d3e20323731343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:e8:3d:39:80:d3:41:c8:e7:76:8f:1d:1c:a6:c1:f8:e0:ff:
         2f:03:bf:e0:c2:dd:be:f3:95:26:c3:c9:c8:fb:56:70:d2:26:
         6e:d5:a2:9f:19:53:74:7b:40:d6:3c:b5:fa:f8:25:a0:5e:ed:
         58:65:58:1a:e8:0b:07:bf:bf:da:c3:ad:7f:b3:33:c3:70:ac:
         c8:77:5c:9b:6e:8e:c5:52:b0:aa:83:94:3a:36:9b:98:49:a9:
         46:72:aa:a4:f5:64:34:5d:d7:ae:65:b4:81:5a:24:00:fd:77:
         51:fc:ef:2a:17:85:4f:69:34:1b:a5:4f:d8:90:02:59:49:e7:
         77:81:22:6a:f2:22:f6:24:d4:5f:1c:66:7a:b4:a7:0a:44:ed:
         3c:74:19:01:91:72:e2:10:0e:84:6a:44:2e:96:d1:db:85:81:
         85:7a:d7:32:2c:c9:f5:32:37:75:98:95:0e:58:34:08:f5:80:
         26:03:95:d4:e2:aa:cc:68:f9:de:df:f1:0d:38:cd:19:45:bb:
         a8:3f:17:b4:6c:87:b2:66:aa:8b:4d:87:b1:6f:1f:eb:4e:1e:
         72:40:43:5f:c4:98:51:74:97:58:1f:4b:ed:82:ce:05:7d:9d:
         c9:34:61:a4:fd:0f:f0:96:26:58:0c:25:70:20:94:7b:2c:bc:
         06:74:2d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 21:10:59 2024 by rpki-client on console-ams.rpki-client.org