Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/1/3138312e3233332e31382e302f32342d3234203d3e20323731343834.roa
File:                     3138312e3233332e31382e302f32342d3234203d3e20323731343834.roa (raw, json)
Hash identifier:          g3ufrnxd7l92DQBs9t19NTUb2EMNL7feo0/sj51P/Mk=
Subject key identifier:   78:84:D6:B8:34:02:99:C4:4A:D9:2F:9B:C6:00:C0:DE:CD:6C:42:A4
Certificate issuer:       /CN=7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD
Certificate serial:       63F373CE3973241D78520A2EEB2D1C7137A53BC3
Authority key identifier: 77:19:B4:6C:C2:C7:4F:9E:A6:E2:46:A3:FF:A5:BB:47:77:EE:08:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/1/3138312e3233332e31382e302f32342d3234203d3e20323731343834.roa
Signing time:             Thu 04 Apr 2024 06:58:00 +0000
ROA not before:           Thu 04 Apr 2024 06:53:00 +0000
ROA not after:            Thu 03 Apr 2025 06:58:00 +0000
asID:                     271484
IP address blocks:        181.233.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/1/7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD.crl
                          rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/1/7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 21:04:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:f3:73:ce:39:73:24:1d:78:52:0a:2e:eb:2d:1c:71:37:a5:3b:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD
        Validity
            Not Before: Apr  4 06:53:00 2024 GMT
            Not After : Apr  3 06:58:00 2025 GMT
        Subject: CN=7884D6B8340299C44AD92F9BC600C0DECD6C42A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f7:66:13:11:0d:79:bc:38:1c:84:32:f0:da:
                    ab:21:79:64:10:e8:69:ae:77:12:c2:2a:0c:8d:f3:
                    c9:aa:9f:a6:45:a1:9d:8a:f5:94:f8:e9:64:a9:4d:
                    27:c4:f7:4e:3b:4e:bf:35:79:59:6e:27:b7:3d:66:
                    5e:ab:6b:85:b8:8e:78:25:4c:ee:e0:6a:ef:1a:c2:
                    85:9c:c8:8e:76:f6:09:93:cc:93:ab:31:5c:41:73:
                    7c:ec:fa:ef:59:81:ca:9a:c0:4e:7c:19:cb:fe:3a:
                    8b:34:5a:52:80:60:9d:cc:4e:a6:c5:ff:81:73:8f:
                    c8:18:7c:b9:65:13:06:c6:05:52:21:9e:0d:47:7e:
                    14:90:7a:07:d5:c4:7d:a9:5e:2a:8d:ac:db:61:0e:
                    6c:15:25:7d:f5:60:14:26:1a:ad:73:f1:27:c1:06:
                    9e:59:e2:28:b9:c8:c5:1a:7b:52:78:bc:39:0a:b1:
                    a5:02:aa:9a:a9:29:fb:b4:c5:48:b1:40:be:0a:23:
                    93:6c:72:12:3b:98:10:cf:ac:2b:96:56:36:69:23:
                    a3:d2:2a:5a:e0:05:15:9f:07:25:1d:2f:78:56:39:
                    40:2b:c8:c9:d5:e5:43:68:3a:97:81:66:fa:de:ae:
                    c8:aa:cc:d9:8f:09:ee:47:e7:88:b2:42:2e:9c:68:
                    1a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:84:D6:B8:34:02:99:C4:4A:D9:2F:9B:C6:00:C0:DE:CD:6C:42:A4
            X509v3 Authority Key Identifier:
                keyid:77:19:B4:6C:C2:C7:4F:9E:A6:E2:46:A3:FF:A5:BB:47:77:EE:08:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/1/7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/1/3138312e3233332e31382e302f32342d3234203d3e20323731343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:82:24:ba:f1:d6:77:dc:af:47:e7:15:62:31:4b:93:c7:1d:
         42:d9:d5:a8:78:82:be:64:0a:07:f4:03:64:1c:22:d1:dc:51:
         0b:b2:0f:96:64:c0:f4:0c:80:05:f5:a3:39:55:ea:95:cc:b0:
         aa:a0:61:90:9e:57:3b:34:68:0d:9b:e3:c5:4f:3d:19:36:db:
         44:78:f3:b6:4f:a3:33:d7:66:db:2f:81:cd:89:3f:7f:e3:b7:
         ed:75:c5:54:71:b4:d5:d4:3f:ad:e4:b4:5a:17:a3:ad:73:f6:
         04:b7:63:75:9d:11:6a:4d:ab:f3:bb:18:f7:a0:7c:5b:e3:b5:
         b2:41:c8:2a:7b:47:06:d0:87:eb:c9:ce:00:ac:d5:76:f0:04:
         8a:eb:e0:eb:e6:a0:74:8b:bd:3b:0e:56:ac:36:87:7e:93:d7:
         ba:6d:93:10:30:1c:be:3e:d9:84:07:ae:4c:a9:ef:9f:8d:b2:
         eb:b0:60:de:93:9b:af:18:b5:82:97:6a:07:14:61:ba:00:ca:
         fa:9f:c0:aa:09:0c:51:4d:8d:17:4c:19:33:94:be:45:ee:fd:
         75:96:38:e0:f4:16:84:02:fe:a9:d1:69:be:83:bc:a8:7c:76:
         b9:f1:70:78:e0:5a:f8:e7:95:87:62:ca:ad:57:2b:19:0b:16:
         2c:4c:ff:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 19:50:11 2024 by rpki-client on console-fra.rpki-client.org