Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/1/3138312e3233332e31392e302f32342d3234203d3e20323731343834.roa
File:                     3138312e3233332e31392e302f32342d3234203d3e20323731343834.roa (raw, json)
Hash identifier:          ZFSQUy9E/8uhJAIkjDrIidD79FMWDySRwteXi3Ng0Hg=
Subject key identifier:   6B:C1:FA:42:A6:0C:45:9D:6C:2E:C4:F6:9A:C4:82:49:02:DB:2F:DB
Certificate issuer:       /CN=7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD
Certificate serial:       26E9BDAE7329BB1BA0D2D146BA78978AFD618E1B
Authority key identifier: 77:19:B4:6C:C2:C7:4F:9E:A6:E2:46:A3:FF:A5:BB:47:77:EE:08:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/1/3138312e3233332e31392e302f32342d3234203d3e20323731343834.roa
Signing time:             Thu 04 Apr 2024 06:57:59 +0000
ROA not before:           Thu 04 Apr 2024 06:52:59 +0000
ROA not after:            Thu 03 Apr 2025 06:57:59 +0000
asID:                     271484
IP address blocks:        181.233.19.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/1/7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD.crl
                          rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/1/7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 21:04:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:e9:bd:ae:73:29:bb:1b:a0:d2:d1:46:ba:78:97:8a:fd:61:8e:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD
        Validity
            Not Before: Apr  4 06:52:59 2024 GMT
            Not After : Apr  3 06:57:59 2025 GMT
        Subject: CN=6BC1FA42A60C459D6C2EC4F69AC4824902DB2FDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:98:aa:4a:18:54:01:ee:39:66:8e:af:75:0a:
                    1e:4d:f7:72:6f:c3:5b:8c:6b:9d:1c:14:6f:26:80:
                    b2:47:86:a8:66:7c:86:69:ab:4d:a8:fc:16:07:19:
                    a8:dd:5a:e3:32:d4:c8:a9:a8:ed:42:14:55:22:47:
                    63:aa:cd:7c:7b:a8:95:f4:a0:01:15:24:e0:7b:28:
                    b2:bc:df:aa:1f:59:2e:73:f7:46:2d:23:79:c8:1f:
                    ad:14:c4:83:2b:8e:0b:91:a6:dc:3e:f0:35:26:ab:
                    ac:a7:26:07:be:8e:73:0e:ff:79:16:22:aa:d9:20:
                    97:a4:9e:fa:7a:30:07:6b:85:2a:8f:8d:51:35:6c:
                    66:57:cc:e4:af:85:4c:45:57:e1:a7:f5:04:00:89:
                    3a:15:34:3b:38:ff:fb:e3:59:0e:20:e5:6d:17:2d:
                    3b:9a:31:86:e5:f2:24:d4:5b:38:84:9e:d7:7a:6e:
                    cc:36:fe:e3:12:f1:5c:da:3e:ce:2a:a6:ae:78:7a:
                    8c:fe:a9:3b:f0:3c:cc:42:de:42:17:82:fc:3e:78:
                    c6:f6:11:70:22:14:a8:bb:28:02:6f:6a:a9:d6:02:
                    59:ec:ae:a0:ee:73:4c:95:0c:93:61:2f:52:e8:47:
                    86:ac:f9:9b:db:f0:12:a9:85:90:ca:59:af:0a:a8:
                    22:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:C1:FA:42:A6:0C:45:9D:6C:2E:C4:F6:9A:C4:82:49:02:DB:2F:DB
            X509v3 Authority Key Identifier:
                keyid:77:19:B4:6C:C2:C7:4F:9E:A6:E2:46:A3:FF:A5:BB:47:77:EE:08:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/1/7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/1/3138312e3233332e31392e302f32342d3234203d3e20323731343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:9d:10:47:5f:74:70:a3:6d:1d:34:2d:ea:2e:f4:ed:58:40:
         00:cc:3f:d0:61:e9:87:f1:45:d0:76:bf:2b:0b:47:30:02:64:
         fa:c8:34:47:b4:fa:d3:1f:33:3f:1b:4d:36:6b:ef:10:23:f8:
         7d:f4:86:21:96:f0:fb:7d:f8:ce:e2:a1:7f:d2:9d:3e:39:17:
         16:93:c8:7f:30:fb:3f:a7:f6:63:ef:38:18:e2:24:6f:d8:b2:
         54:12:e2:87:6c:43:95:f2:7b:5f:cd:0b:68:17:86:8f:22:14:
         b0:1b:e7:21:3c:cc:30:0e:95:da:8a:39:bb:e6:bf:c6:b3:eb:
         95:06:dc:aa:c7:b8:2b:2b:8a:ed:61:c0:67:ec:0a:92:21:bc:
         0c:86:d8:50:64:12:7e:69:6d:bb:d2:ae:86:e8:17:91:38:72:
         0d:c5:1e:fd:6d:a2:66:ff:62:a6:b2:fd:87:4d:89:9b:f6:db:
         38:83:a1:a5:83:bc:09:13:c3:f9:ab:97:66:2c:63:9f:8a:5d:
         cb:2a:f1:bb:a9:de:33:11:41:63:31:df:3e:a0:c2:2b:2e:17:
         ec:c3:f7:c9:62:57:5f:63:bc:9d:20:7b:0f:ed:da:74:4f:42:
         df:5d:c0:e6:fe:3e:c4:09:33:86:f5:b6:2f:68:80:a1:4f:fc:
         52:96:2a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 19:50:11 2024 by rpki-client on console-fra.rpki-client.org