Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/3138312e3139312e3234302e302f32332d3233203d3e20323637343536.roa
File:                     3138312e3139312e3234302e302f32332d3233203d3e20323637343536.roa (raw, json)
Hash identifier:          Tjr2rygSZnE9VqIqn+kYECRP4uG6yrrbSoe940IFGJo=
Subject key identifier:   95:9A:37:4E:D7:CA:37:0C:98:FE:A4:A9:D2:9C:FE:68:21:FE:60:7C
Certificate issuer:       /CN=76E1848CDA572B37FCF5D9FC2F32072BAB9072B2
Certificate serial:       1C6018F233154552FB871D6504AD75ADD001E8F4
Authority key identifier: 76:E1:84:8C:DA:57:2B:37:FC:F5:D9:FC:2F:32:07:2B:AB:90:72:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76E1848CDA572B37FCF5D9FC2F32072BAB9072B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/3138312e3139312e3234302e302f32332d3233203d3e20323637343536.roa
Signing time:             Fri 24 May 2024 17:27:19 +0000
ROA not before:           Fri 24 May 2024 17:22:19 +0000
ROA not after:            Fri 23 May 2025 17:27:19 +0000
asID:                     267456
IP address blocks:        181.191.240.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/76E1848CDA572B37FCF5D9FC2F32072BAB9072B2.crl
                          rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/76E1848CDA572B37FCF5D9FC2F32072BAB9072B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76E1848CDA572B37FCF5D9FC2F32072BAB9072B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:60:18:f2:33:15:45:52:fb:87:1d:65:04:ad:75:ad:d0:01:e8:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76E1848CDA572B37FCF5D9FC2F32072BAB9072B2
        Validity
            Not Before: May 24 17:22:19 2024 GMT
            Not After : May 23 17:27:19 2025 GMT
        Subject: CN=959A374ED7CA370C98FEA4A9D29CFE6821FE607C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b8:98:f0:a6:9b:a8:ef:58:d0:50:f4:64:cd:
                    97:73:28:83:1e:e6:cb:ca:17:7c:c8:77:23:d2:46:
                    47:3d:9b:96:e1:0b:60:85:cb:4c:4f:af:db:c7:a3:
                    44:54:69:a9:1c:1b:6a:07:cd:f2:7f:4d:8b:f3:c7:
                    8e:5b:27:a5:fa:6c:8f:24:95:3e:29:d4:99:fa:d5:
                    db:52:d7:47:2a:b0:5e:a9:b2:ee:77:b0:a8:f3:e8:
                    c1:c9:7e:4c:52:77:77:03:b7:3e:f9:34:be:6c:1a:
                    78:41:96:d3:e0:b0:ee:fa:01:81:b4:39:16:4f:9b:
                    dd:cf:83:1d:93:f4:d9:3a:7c:e2:5a:64:98:89:ea:
                    c3:88:d2:36:37:3c:0d:98:e8:fc:2b:72:97:2a:99:
                    50:47:cf:cb:6f:ee:cb:67:d2:0d:8b:56:f0:a5:56:
                    e9:b9:2c:70:1c:db:a1:b6:03:6c:81:52:e5:51:7f:
                    de:95:14:c5:44:10:75:a6:4a:5b:90:56:b3:dd:62:
                    f5:3e:80:f1:44:06:30:24:88:3c:78:6d:8b:f7:7f:
                    ed:2b:21:af:46:d4:c7:3e:0f:fb:f7:63:6f:e8:9b:
                    2a:88:89:c6:e0:8a:a7:e8:4f:d0:85:bb:8e:81:7d:
                    fb:18:dd:7b:94:1e:c7:44:63:66:fb:69:fa:7a:0e:
                    07:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:9A:37:4E:D7:CA:37:0C:98:FE:A4:A9:D2:9C:FE:68:21:FE:60:7C
            X509v3 Authority Key Identifier:
                keyid:76:E1:84:8C:DA:57:2B:37:FC:F5:D9:FC:2F:32:07:2B:AB:90:72:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/76E1848CDA572B37FCF5D9FC2F32072BAB9072B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76E1848CDA572B37FCF5D9FC2F32072BAB9072B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/3138312e3139312e3234302e302f32332d3233203d3e20323637343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:73:c1:01:4b:73:c6:8f:ac:46:91:2a:65:62:96:d4:7e:95:
         e1:1e:c1:d7:52:57:9a:73:6f:dc:f2:c5:95:b0:74:f5:cc:43:
         20:5f:1a:18:a6:43:75:a4:ee:28:44:e0:78:52:17:88:72:98:
         fb:b7:a1:3e:d3:58:7a:e2:c5:ea:2a:25:c5:f9:3d:0f:5b:50:
         42:7d:f1:b3:a4:c9:81:2c:f9:e2:04:03:69:5e:2e:9d:d9:3a:
         ae:4c:6e:34:ba:30:03:ed:06:43:fb:5a:84:ad:ae:43:b6:da:
         9e:23:a0:1d:ed:7c:4e:0d:62:83:18:bb:7a:82:88:1e:85:55:
         e6:1c:23:fe:77:06:08:11:aa:77:7f:df:0a:a6:c0:30:90:d4:
         e6:73:84:77:99:e0:f4:c4:33:81:32:71:1a:44:cd:6e:53:45:
         e4:cf:f5:9a:16:8f:b9:7b:c0:b3:31:20:25:dc:59:93:1d:0e:
         b9:39:23:c7:0d:a6:70:fc:67:e2:86:a5:af:23:d3:bb:d5:48:
         61:58:1a:9b:e2:10:2a:81:8a:36:d1:80:f8:92:74:44:56:58:
         20:a8:56:76:e7:66:4c:e0:37:46:8f:0c:5e:57:d4:a2:a1:b7:
         ba:6c:ad:72:72:f5:ee:6e:60:25:8c:7e:63:1e:fe:f2:61:e6:
         e8:b2:4f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:30:01 2024 by rpki-client on console-fra.rpki-client.org