Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CS9SkHvPoQ5CbbhCzLW49iwni9a1p9UPxAiMWHzMjwBV/1/3138312e3233322e3234382e302f32332d3234203d3e20323731353637.roa
File:                     3138312e3233322e3234382e302f32332d3234203d3e20323731353637.roa (raw, json)
Hash identifier:          lMI1mj9j75whfMcrpRu4NvKE/El9IbUGQdCUFPCMLIw=
Subject key identifier:   C1:16:8D:A6:CF:64:9E:80:6E:E9:28:84:68:05:3F:4D:D0:D0:C3:0B
Certificate issuer:       /CN=7E39AD7329EE99AAF1350BE6B2DE00E2851CACA9
Certificate serial:       1C7813054B344128A098C1526812F9F60A9E448A
Authority key identifier: 7E:39:AD:73:29:EE:99:AA:F1:35:0B:E6:B2:DE:00:E2:85:1C:AC:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E39AD7329EE99AAF1350BE6B2DE00E2851CACA9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CS9SkHvPoQ5CbbhCzLW49iwni9a1p9UPxAiMWHzMjwBV/1/3138312e3233322e3234382e302f32332d3234203d3e20323731353637.roa
Signing time:             Wed 03 Apr 2024 18:39:12 +0000
ROA not before:           Wed 03 Apr 2024 18:34:12 +0000
ROA not after:            Wed 02 Apr 2025 18:39:12 +0000
asID:                     271567
IP address blocks:        181.232.248.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CS9SkHvPoQ5CbbhCzLW49iwni9a1p9UPxAiMWHzMjwBV/1/7E39AD7329EE99AAF1350BE6B2DE00E2851CACA9.crl
                          rsync://rpki-repo.registro.br/repo/CS9SkHvPoQ5CbbhCzLW49iwni9a1p9UPxAiMWHzMjwBV/1/7E39AD7329EE99AAF1350BE6B2DE00E2851CACA9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E39AD7329EE99AAF1350BE6B2DE00E2851CACA9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 00:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:78:13:05:4b:34:41:28:a0:98:c1:52:68:12:f9:f6:0a:9e:44:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E39AD7329EE99AAF1350BE6B2DE00E2851CACA9
        Validity
            Not Before: Apr  3 18:34:12 2024 GMT
            Not After : Apr  2 18:39:12 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:1a:4a:7b:cb:bb:7d:a2:2d:69:7d:28:87:1e:
                    f0:05:39:42:1c:cf:ab:c2:41:ae:c6:33:32:a8:64:
                    18:ae:b9:ce:f5:99:fd:0c:bd:df:d2:28:c1:8b:2e:
                    1f:16:45:99:45:c3:5c:d8:93:4e:c5:01:ea:71:b7:
                    0d:f9:d8:25:cf:6e:e0:70:87:81:88:b1:2f:ae:bf:
                    f5:23:02:e1:20:8f:e8:ba:b1:d3:3f:d3:16:dc:08:
                    84:e4:47:a1:67:70:5c:48:83:46:e5:45:c9:ff:51:
                    93:ee:e4:d2:91:8d:e2:c0:4b:22:e7:e9:41:b3:62:
                    0e:f1:3a:01:7c:cb:7b:6f:b8:ad:f5:80:0f:ae:ed:
                    9c:26:13:4f:41:14:75:ae:60:95:7e:bc:2d:5a:ea:
                    a8:88:6c:86:5a:ec:32:ec:f7:18:51:be:8c:eb:c5:
                    c9:3f:ec:59:c7:62:d0:36:b4:32:d4:9c:00:c8:17:
                    4d:a5:4f:e8:eb:ab:cc:77:31:19:2d:8e:d9:05:93:
                    6f:92:da:85:5e:59:b5:10:6e:86:3e:41:b8:bf:30:
                    69:7e:6b:4a:6b:4d:cb:76:b0:4f:d0:7c:c8:a1:2f:
                    68:8b:23:9f:1e:54:72:35:ac:a9:39:66:47:98:41:
                    36:ec:e4:02:4d:8e:46:ef:55:9f:85:da:ef:f5:eb:
                    a9:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:16:8D:A6:CF:64:9E:80:6E:E9:28:84:68:05:3F:4D:D0:D0:C3:0B
            X509v3 Authority Key Identifier:
                keyid:7E:39:AD:73:29:EE:99:AA:F1:35:0B:E6:B2:DE:00:E2:85:1C:AC:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CS9SkHvPoQ5CbbhCzLW49iwni9a1p9UPxAiMWHzMjwBV/1/7E39AD7329EE99AAF1350BE6B2DE00E2851CACA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E39AD7329EE99AAF1350BE6B2DE00E2851CACA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CS9SkHvPoQ5CbbhCzLW49iwni9a1p9UPxAiMWHzMjwBV/1/3138312e3233322e3234382e302f32332d3234203d3e20323731353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:c6:f2:81:9b:33:23:80:2a:1e:78:bf:c7:24:f3:13:24:26:
         4f:b4:85:27:93:00:ad:3f:20:94:3a:50:36:22:0a:f2:f1:26:
         b5:2a:35:cc:ec:6d:ce:06:ab:c8:e9:4b:1c:d0:80:f9:c7:37:
         42:9c:b4:e8:f6:ba:a8:ac:31:0a:c3:63:1b:a0:ba:df:2e:2a:
         22:44:85:1c:1c:23:b2:a1:44:50:34:33:ef:32:bf:a3:5c:bf:
         4f:12:03:c3:43:cc:6d:09:dc:1e:f6:fe:31:61:51:22:65:86:
         2a:76:a9:55:e4:7a:be:63:c3:b5:36:e6:70:ec:81:1a:e6:3d:
         94:34:7b:70:f9:64:65:96:00:1c:91:b4:cb:40:fc:2e:df:b1:
         4f:10:84:8b:7c:bd:65:ce:f0:52:49:a3:89:b7:a5:6b:6e:0b:
         29:f4:e1:68:47:96:b1:4b:14:11:69:25:8e:e5:66:85:45:1d:
         f5:fd:1d:9f:cc:35:3b:4c:39:4e:11:8f:b8:1e:8b:63:e0:2e:
         d5:03:fb:67:a0:4b:14:3a:71:76:5c:8d:b7:45:81:28:03:71:
         f0:12:18:f3:13:5d:23:32:e5:2a:96:5d:5d:a6:c7:c6:26:56:
         17:c5:2e:fc:e4:6d:e9:cb:b8:f2:b5:2e:40:6b:cb:ab:e7:7e:
         41:48:57:e3
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUHHgTBUs0QSigmMFSaBL59gqeRIowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0UzOUFENzMyOUVFOTlBQUYxMzUwQkU2QjJERTAwRTI4
NTFDQUNBOTAeFw0yNDA0MDMxODM0MTJaFw0yNTA0MDIxODM5MTJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTUxQTRBN0JDQkJCN0RBMjJE
Njk3RDI4ODcxRUYwMDUzOTQyMUNDRkFCQzI0MUFFQzYzMzMyQTg2NDE4QUVCOUNF
RjU5OUZEMENCRERGRDIyOEMxOEIyRTFGMTY0NTk5NDVDMzVDRDg5MzRFQzUwMUVB
NzFCNzBERjlEODI1Q0Y2RUUwNzA4NzgxODhCMTJGQUVCRkY1MjMwMkUxMjA4RkU4
QkFCMUQzM0ZEMzE2REMwODg0RTQ0N0ExNjc3MDVDNDg4MzQ2RTU0NUM5RkY1MTkz
RUVFNEQyOTE4REUyQzA0QjIyRTdFOTQxQjM2MjBFRjEzQTAxN0NDQjdCNkZCOEFE
RjU4MDBGQUVFRDlDMjYxMzRGNDExNDc1QUU2MDk1N0VCQzJENUFFQUE4ODg2Qzg2
NUFFQzMyRUNGNzE4NTFCRThDRUJDNUM5M0ZFQzU5Qzc2MkQwMzZCNDMyRDQ5QzAw
QzgxNzREQTU0RkU4RUJBQkNDNzczMTE5MkQ4RUQ5MDU5MzZGOTJEQTg1NUU1OUI1
MTA2RTg2M0U0MUI4QkYzMDY5N0U2QjRBNkI0RENCNzZCMDRGRDA3Q0M4QTEyRjY4
OEIyMzlGMUU1NDcyMzVBQ0E5Mzk2NjQ3OTg0MTM2RUNFNDAyNEQ4RTQ2RUY1NTlG
ODVEQUVGRjVFQkE5OTMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA5RpKe8u7faItaX0ohx7wBTlCHM+rwkGuxjMyqGQYrrnO9Zn9DL3f
0ijBiy4fFkWZRcNc2JNOxQHqcbcN+dglz27gcIeBiLEvrr/1IwLhII/ourHTP9MW
3AiE5EehZ3BcSING5UXJ/1GT7uTSkY3iwEsi5+lBs2IO8ToBfMt7b7it9YAPru2c
JhNPQRR1rmCVfrwtWuqoiGyGWuwy7PcYUb6M68XJP+xZx2LQNrQy1JwAyBdNpU/o
66vMdzEZLY7ZBZNvktqFXlm1EG6GPkG4vzBpfmtKa03LdrBP0HzIoS9oiyOfHlRy
NaypOWZHmEE27OQCTY5G71Wfhdrv9eupkwIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FMEWjabPZJ6AbukohGgFP03Q0MMLMB8GA1UdIwQYMBaAFH45rXMp7pmq8TUL5rLe
AOKFHKypMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NTOVNrSHZQb1E1Q2Ji
aEN6TFc0OWl3bmk5YTFwOVVQeEFpTVdIek1qd0JWLzEvN0UzOUFENzMyOUVFOTlB
QUYxMzUwQkU2QjJERTAwRTI4NTFDQUNBOS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS83RTM5QUQ3MzI5RUU5OUFBRjEzNTBCRTZCMkRFMDBFMjg1MUNB
Q0E5LmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9DUzlTa0h2UG9RNUNiYmhDekxX
NDlpd25pOWExcDlVUHhBaU1XSHpNandCVi8xLzMxMzgzMTJlMzIzMzMyMmUzMjM0
MzgyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM3MzEzNTM2Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAG16PgwDQYJKoZIhvcNAQELBQADggEBAEPG8oGbMyOAKh54v8ck8xMkJk+0hSeT
AK0/IJQ6UDYiCvLxJrUqNczsbc4Gq8jpSxzQgPnHN0KctOj2uqisMQrDYxugut8u
KiJEhRwcI7KhRFA0M+8yv6Ncv08SA8NDzG0J3B72/jFhUSJlhip2qVXker5jw7U2
5nDsgRrmPZQ0e3D5ZGWWAByRtMtA/C7fsU8QhIt8vWXO8FJJo4m3pWtuCyn04WhH
lrFLFBFpJY7lZoVFHfX9HZ/MNTtMOU4Rj7gei2PgLtUD+2egSxQ6cXZcjbdFgSgD
cfASGPMTXSMy5SqWXV2mx8YmVhfFLvzkbenLuPK1LkBry6vnfkFIV+M=
-----END CERTIFICATE-----
Generated at Sat Jun 29 03:28:43 2024 by rpki-client on console-ams.rpki-client.org