Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/3138312e3139312e35312e302f32342d3234203d3e20323637343533.roa
File:                     3138312e3139312e35312e302f32342d3234203d3e20323637343533.roa (raw, json)
Hash identifier:          PoI1A3BvkA/NVx6tA1dIoSSAG2GjuKFHG7d/zLfaQzU=
Subject key identifier:   E7:D2:34:91:E8:3C:A3:66:CA:B1:12:E4:01:E3:C9:99:23:9E:11:FE
Certificate issuer:       /CN=72798A16F3C8F86B911CA44A91126AF678AB4DA9
Certificate serial:       742CD89D8E5C1910F56C5AE276AB3AAD06095542
Authority key identifier: 72:79:8A:16:F3:C8:F8:6B:91:1C:A4:4A:91:12:6A:F6:78:AB:4D:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72798A16F3C8F86B911CA44A91126AF678AB4DA9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/3138312e3139312e35312e302f32342d3234203d3e20323637343533.roa
Signing time:             Tue 01 Oct 2024 21:13:11 +0000
ROA not before:           Tue 01 Oct 2024 21:08:11 +0000
ROA not after:            Tue 30 Sep 2025 21:13:11 +0000
asID:                     267453
IP address blocks:        181.191.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/72798A16F3C8F86B911CA44A91126AF678AB4DA9.crl
                          rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/72798A16F3C8F86B911CA44A91126AF678AB4DA9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72798A16F3C8F86B911CA44A91126AF678AB4DA9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:2c:d8:9d:8e:5c:19:10:f5:6c:5a:e2:76:ab:3a:ad:06:09:55:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72798A16F3C8F86B911CA44A91126AF678AB4DA9
        Validity
            Not Before: Oct  1 21:08:11 2024 GMT
            Not After : Sep 30 21:13:11 2025 GMT
        Subject: CN=E7D23491E83CA366CAB112E401E3C999239E11FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d7:19:09:99:db:85:f5:14:38:8e:2f:3f:e7:
                    6e:ef:27:73:e3:5c:86:0a:53:7f:dc:ed:9f:78:a8:
                    9e:81:44:15:76:85:c6:c4:a6:a3:93:a6:b7:0a:52:
                    d9:14:94:e8:04:a7:d5:0a:c6:de:be:d3:57:1b:c7:
                    87:44:6a:7b:be:1e:c6:09:8c:20:10:67:4d:06:27:
                    02:80:d4:b6:00:c5:39:0d:ff:0c:f6:d0:1e:20:27:
                    8b:66:2e:d7:59:7c:fb:e7:89:09:dd:96:5c:9e:71:
                    30:e3:06:55:eb:48:da:77:3e:41:c0:83:ee:78:9c:
                    56:81:60:bd:03:5d:ed:08:0f:ae:83:4d:1a:48:d7:
                    78:72:ac:3f:08:3c:b4:6b:73:a7:0e:67:b5:a6:54:
                    87:f8:04:d7:a1:c2:bc:98:94:c3:2f:a9:bc:e9:17:
                    30:e9:d1:28:03:32:fd:59:ac:c2:14:e4:4f:0c:d9:
                    30:df:15:79:8b:52:53:38:9c:58:76:d0:58:03:a7:
                    d6:1a:89:4d:83:38:aa:14:cc:57:d2:1a:59:2d:6e:
                    dd:a0:d1:ea:74:76:b8:9a:ee:88:55:a6:c3:50:81:
                    fc:57:91:e7:18:06:a0:ea:3f:b0:88:4f:1b:54:70:
                    57:ce:22:c4:f4:7a:6d:8b:4c:a8:c8:0a:d2:ba:cb:
                    56:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:D2:34:91:E8:3C:A3:66:CA:B1:12:E4:01:E3:C9:99:23:9E:11:FE
            X509v3 Authority Key Identifier:
                keyid:72:79:8A:16:F3:C8:F8:6B:91:1C:A4:4A:91:12:6A:F6:78:AB:4D:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/72798A16F3C8F86B911CA44A91126AF678AB4DA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72798A16F3C8F86B911CA44A91126AF678AB4DA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/3138312e3139312e35312e302f32342d3234203d3e20323637343533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:c4:2f:8b:35:b6:29:b0:1f:70:1c:e8:69:a3:2b:88:08:d3:
         cc:6b:73:e5:98:3b:d5:4e:80:40:5d:d9:4f:51:70:8c:2f:8d:
         77:c1:43:ad:2a:f6:4d:af:6a:52:2c:92:4a:74:84:d9:05:84:
         98:9e:b7:c4:f9:40:1c:16:de:e0:3b:b8:68:56:26:0a:93:bf:
         72:11:2d:6e:06:24:e7:66:8f:3a:d3:d2:ed:8a:0d:3b:72:bd:
         20:42:00:10:6a:67:dd:d7:f1:fe:c4:56:2d:d7:19:ba:fa:3f:
         b0:94:2c:2b:28:33:10:c9:6b:a8:5d:95:e0:f0:31:5c:91:35:
         6f:dd:c9:0c:37:28:c0:2d:d3:a2:e7:0a:19:43:dc:27:2c:d6:
         1d:4e:54:fd:a2:1e:70:fe:24:63:18:12:35:db:ae:6f:02:73:
         ba:84:e9:99:f0:6a:23:11:5a:4a:6d:59:62:13:d5:d5:2c:dd:
         61:10:9e:d5:c3:47:da:dd:cc:08:87:d9:d9:af:d6:32:82:c5:
         b4:50:e0:fa:ad:25:6b:a4:67:53:77:88:38:e6:73:c0:d3:ee:
         1c:00:51:73:b7:63:bb:24:9b:2f:b5:55:5d:be:2d:72:be:7f:
         ea:03:60:a0:60:cd:0a:f7:7c:e7:49:22:ae:3f:4e:4c:02:24:
         85:7a:55:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:22:35 2024 by rpki-client on console-fra.rpki-client.org