Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ezf9ty1Cuy6vSxvR7QZXzBdLy4k25wJ6dHTNx18L1Yn1/0/3138312e3233322e3233302e302f32332d3332203d3e20323731353737.roa
File:                     3138312e3233322e3233302e302f32332d3332203d3e20323731353737.roa (raw, json)
Hash identifier:          qoZql4J3HYd1dVB3rbCP0b2AQgrziRHtObAuliAZMfA=
Subject key identifier:   87:26:36:A4:AB:1D:B7:94:E0:73:5E:70:C3:EA:32:FA:9C:8E:94:9A
Certificate issuer:       /CN=F123104F555ACBDED882CABD933FE8C954781940
Certificate serial:       56DD75F76FE2FBFF9A02D5EF55E01BE19EE54A13
Authority key identifier: F1:23:10:4F:55:5A:CB:DE:D8:82:CA:BD:93:3F:E8:C9:54:78:19:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F123104F555ACBDED882CABD933FE8C954781940.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ezf9ty1Cuy6vSxvR7QZXzBdLy4k25wJ6dHTNx18L1Yn1/0/3138312e3233322e3233302e302f32332d3332203d3e20323731353737.roa
Signing time:             Fri 18 Oct 2024 14:30:20 +0000
ROA not before:           Fri 18 Oct 2024 14:25:20 +0000
ROA not after:            Fri 17 Oct 2025 14:30:20 +0000
asID:                     271577
IP address blocks:        181.232.230.0/23 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ezf9ty1Cuy6vSxvR7QZXzBdLy4k25wJ6dHTNx18L1Yn1/0/F123104F555ACBDED882CABD933FE8C954781940.crl
                          rsync://rpki-repo.registro.br/repo/Ezf9ty1Cuy6vSxvR7QZXzBdLy4k25wJ6dHTNx18L1Yn1/0/F123104F555ACBDED882CABD933FE8C954781940.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F123104F555ACBDED882CABD933FE8C954781940.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 20:43:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:dd:75:f7:6f:e2:fb:ff:9a:02:d5:ef:55:e0:1b:e1:9e:e5:4a:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F123104F555ACBDED882CABD933FE8C954781940
        Validity
            Not Before: Oct 18 14:25:20 2024 GMT
            Not After : Oct 17 14:30:20 2025 GMT
        Subject: CN=872636A4AB1DB794E0735E70C3EA32FA9C8E949A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:a0:49:7e:72:3b:78:86:0d:ae:46:db:de:ca:
                    c8:08:58:f4:6f:98:9f:7e:f0:a4:f4:18:5f:8c:e6:
                    fa:3b:60:2b:8a:b6:c5:64:f2:07:0e:b0:00:f9:39:
                    64:fc:34:a0:3a:15:8b:fd:63:b3:da:81:bc:d8:69:
                    f9:91:ab:c8:bb:67:2f:1a:fb:21:66:89:c9:06:10:
                    25:01:e7:96:fd:c8:08:21:84:2c:5c:16:da:44:8b:
                    ca:d7:3f:a0:31:19:a6:1c:03:6c:75:47:61:a3:9a:
                    66:90:e1:44:2f:50:f8:36:da:87:3e:91:79:0f:65:
                    ce:9b:b3:91:0b:21:cb:19:c4:ad:91:79:78:c1:64:
                    03:d5:e3:d9:a0:71:2b:21:c4:ae:2c:a2:e5:f2:87:
                    64:0d:bc:33:4c:36:93:8f:5d:d3:1e:95:09:bf:2a:
                    c1:bc:51:c0:6f:44:da:b6:19:04:96:dd:1c:c0:98:
                    90:6e:9a:78:4e:a7:2f:ae:13:d7:18:e0:38:a1:cf:
                    d6:60:0c:a1:f8:7f:e8:1d:88:53:37:9b:8e:24:dd:
                    09:53:45:09:44:b6:d3:73:52:de:3a:a4:1b:43:e1:
                    fa:c5:73:f7:07:f1:25:a4:de:b1:8b:3e:7c:0e:f6:
                    dd:6b:0c:1b:49:9f:2e:a0:b2:73:fb:40:eb:c5:4e:
                    45:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:26:36:A4:AB:1D:B7:94:E0:73:5E:70:C3:EA:32:FA:9C:8E:94:9A
            X509v3 Authority Key Identifier:
                keyid:F1:23:10:4F:55:5A:CB:DE:D8:82:CA:BD:93:3F:E8:C9:54:78:19:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ezf9ty1Cuy6vSxvR7QZXzBdLy4k25wJ6dHTNx18L1Yn1/0/F123104F555ACBDED882CABD933FE8C954781940.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F123104F555ACBDED882CABD933FE8C954781940.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ezf9ty1Cuy6vSxvR7QZXzBdLy4k25wJ6dHTNx18L1Yn1/0/3138312e3233322e3233302e302f32332d3332203d3e20323731353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:a3:16:ae:86:71:87:5d:47:e1:72:73:e6:46:d8:b0:a0:21:
         46:15:6c:99:42:62:3e:62:b1:60:d7:00:76:92:43:d8:1b:1f:
         14:f4:72:34:91:02:5e:a9:6b:7a:1c:80:1e:59:a9:7f:b3:56:
         86:71:42:f5:82:5b:7c:32:bc:3e:5d:a1:73:fc:cd:d0:91:3a:
         86:22:ad:b1:ba:59:02:ea:2c:03:e8:09:8a:5d:e9:a6:be:8d:
         82:e2:db:45:df:e4:dc:17:89:dd:5a:64:f8:82:fc:70:9c:d6:
         36:7a:08:06:92:b2:92:11:0d:13:5d:b9:c7:83:71:71:9b:7d:
         e4:2f:84:33:4f:80:a3:90:ce:b4:f3:63:11:69:55:04:e7:83:
         6b:bd:f7:2e:1e:a0:e7:a2:fc:0a:fc:55:a1:7e:55:a7:ef:f6:
         43:fb:56:83:7c:bf:6c:fe:d9:0f:94:1a:43:6a:95:bb:72:4a:
         c4:96:1a:aa:a7:60:48:1e:e1:5c:e7:f7:8a:9b:01:ec:b7:46:
         3b:2b:8d:f3:17:c2:4e:d0:04:c3:26:de:b0:f5:ff:82:bb:70:
         6f:72:0f:1f:97:72:46:65:04:70:09:aa:c5:55:e6:ec:dc:38:
         f1:3d:ff:f3:46:9e:62:f2:c4:7f:79:f1:87:07:d0:61:82:7e:
         67:12:c8:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 20:49:06 2024 by rpki-client on console-ams.rpki-client.org