Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/3138312e3138392e33362e302f32332d3233203d3e20323731333633.roa
File:                     3138312e3138392e33362e302f32332d3233203d3e20323731333633.roa (raw, json)
Hash identifier:          68RafCh/SbcprGR3BSZxWMLpg3fl+ykRbOURNNk0OnE=
Subject key identifier:   93:C9:BC:F9:C8:0C:E8:DD:FF:0E:1A:B4:7B:1B:C7:AF:82:69:9E:AF
Certificate issuer:       /CN=73B656B5831532E23BC621E748382CCCE6CA40E8
Certificate serial:       20C09ADC2A5A907B44091CAFAB44C805AC0688CE
Authority key identifier: 73:B6:56:B5:83:15:32:E2:3B:C6:21:E7:48:38:2C:CC:E6:CA:40:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73B656B5831532E23BC621E748382CCCE6CA40E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/3138312e3138392e33362e302f32332d3233203d3e20323731333633.roa
Signing time:             Thu 08 Aug 2024 18:37:45 +0000
ROA not before:           Thu 08 Aug 2024 18:32:45 +0000
ROA not after:            Thu 07 Aug 2025 18:37:45 +0000
asID:                     271363
IP address blocks:        181.189.36.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/73B656B5831532E23BC621E748382CCCE6CA40E8.crl
                          rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/73B656B5831532E23BC621E748382CCCE6CA40E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73B656B5831532E23BC621E748382CCCE6CA40E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:c0:9a:dc:2a:5a:90:7b:44:09:1c:af:ab:44:c8:05:ac:06:88:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73B656B5831532E23BC621E748382CCCE6CA40E8
        Validity
            Not Before: Aug  8 18:32:45 2024 GMT
            Not After : Aug  7 18:37:45 2025 GMT
        Subject: CN=93C9BCF9C80CE8DDFF0E1AB47B1BC7AF82699EAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:76:72:03:a2:c6:04:9a:35:30:0e:43:14:4a:
                    91:8b:7e:93:43:7e:50:ab:73:46:d9:34:89:7d:b4:
                    7f:3b:90:d1:05:2e:eb:c4:26:7f:5e:f1:22:f1:cf:
                    7a:4f:4e:a4:a1:da:fc:2a:b6:f4:20:b7:73:22:1c:
                    45:35:80:03:c3:ff:e9:9a:05:e5:98:81:fe:bf:7e:
                    ea:52:1b:ab:0b:d0:f1:cc:11:c4:aa:ca:14:78:d3:
                    0a:f7:14:69:6d:30:5a:17:18:6d:56:5e:9d:40:48:
                    7e:25:11:c5:77:d8:ab:36:14:ce:c6:7e:43:63:48:
                    d1:dd:f9:d6:95:ab:ee:ef:c1:ed:cb:74:57:47:2d:
                    f8:37:25:65:d8:51:48:f0:49:3d:65:5e:aa:2e:6d:
                    80:ed:0e:5c:a8:53:50:3d:5b:97:c8:1b:95:6c:10:
                    94:f1:2e:62:6e:87:61:65:8d:eb:a1:25:ce:d9:de:
                    9b:dd:0c:94:f8:fb:a9:cc:93:46:80:c9:ce:9f:7c:
                    fb:b6:42:9a:5f:34:2e:bd:e1:02:7e:c3:bc:88:a5:
                    cd:59:91:74:5f:27:87:59:34:81:9f:c3:0c:fc:9e:
                    8d:2f:08:5a:ee:36:35:88:1b:50:e6:a8:2a:d3:e8:
                    12:7f:cb:98:45:eb:5a:88:a1:23:57:f8:29:1d:8c:
                    45:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:C9:BC:F9:C8:0C:E8:DD:FF:0E:1A:B4:7B:1B:C7:AF:82:69:9E:AF
            X509v3 Authority Key Identifier:
                keyid:73:B6:56:B5:83:15:32:E2:3B:C6:21:E7:48:38:2C:CC:E6:CA:40:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/73B656B5831532E23BC621E748382CCCE6CA40E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73B656B5831532E23BC621E748382CCCE6CA40E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/3138312e3138392e33362e302f32332d3233203d3e20323731333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:35:8f:30:5b:e2:d6:3b:dd:73:38:0c:02:91:d6:93:22:d9:
         67:53:4a:87:5d:5f:7a:e8:89:7d:fa:61:21:ca:a1:e8:2e:9f:
         bc:ce:e4:0f:4a:0e:5f:26:3b:aa:69:e1:dd:79:ef:4f:4b:a8:
         51:77:57:c5:36:cd:b3:85:b7:3c:14:ed:04:8e:3f:38:f4:a0:
         ac:aa:82:83:be:6f:ec:1f:33:08:7c:13:fb:cf:ec:a8:c3:a9:
         0d:c5:64:e6:c8:bf:4d:24:5a:d1:1e:32:3d:92:70:2a:93:57:
         3e:c0:0e:57:33:fa:44:6e:6c:0d:6b:be:0b:9a:c0:cd:6d:fa:
         73:6b:ca:8f:61:29:f8:4a:89:99:0e:b8:b8:67:30:d8:8e:5f:
         e7:c0:5e:c4:ac:88:fc:88:78:f7:2f:d0:b8:91:bc:77:17:54:
         27:51:0e:a6:7e:3d:39:e1:fc:96:21:7e:b8:75:2a:43:c0:cb:
         20:20:f7:ba:f3:1f:60:12:c5:bb:47:15:3e:c2:89:07:30:91:
         8c:cd:f6:b7:fe:c4:e5:cb:2a:c2:9c:9d:31:39:4e:bd:6f:37:
         4b:ff:c5:83:9b:d3:89:ea:04:43:17:63:72:f2:57:3d:59:7e:
         f6:10:80:04:6a:39:1d:93:91:87:ce:52:c1:21:49:f9:eb:ba:
         93:9d:ae:72
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUIMCa3CpakHtECRyvq0TIBawGiM4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzNCNjU2QjU4MzE1MzJFMjNCQzYyMUU3NDgzODJDQ0NF
NkNBNDBFODAeFw0yNDA4MDgxODMyNDVaFw0yNTA4MDcxODM3NDVaMDMxMTAvBgNV
BAMTKDkzQzlCQ0Y5QzgwQ0U4RERGRjBFMUFCNDdCMUJDN0FGODI2OTlFQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOdnIDosYEmjUwDkMUSpGLfpND
flCrc0bZNIl9tH87kNEFLuvEJn9e8SLxz3pPTqSh2vwqtvQgt3MiHEU1gAPD/+ma
BeWYgf6/fupSG6sL0PHMEcSqyhR40wr3FGltMFoXGG1WXp1ASH4lEcV32Ks2FM7G
fkNjSNHd+daVq+7vwe3LdFdHLfg3JWXYUUjwST1lXqoubYDtDlyoU1A9W5fIG5Vs
EJTxLmJuh2FljeuhJc7Z3pvdDJT4+6nMk0aAyc6ffPu2QppfNC694QJ+w7yIpc1Z
kXRfJ4dZNIGfwwz8no0vCFruNjWIG1DmqCrT6BJ/y5hF61qIoSNX+CkdjEWFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUk8m8+cgM6N3/Dhq0exvHr4Jpnq8wHwYDVR0j
BBgwFoAUc7ZWtYMVMuI7xiHnSDgszObKQOgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR29EOWQ3NUR5TUVvY0drS0FMeTkzcFB5VjdIaDJGeTRGZXVQdHlGSm1O
bW4vMC83M0I2NTZCNTgzMTUzMkUyM0JDNjIxRTc0ODM4MkNDQ0U2Q0E0MEU4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzczQjY1NkI1ODMxNTMyRTIz
QkM2MjFFNzQ4MzgyQ0NDRTZDQTQwRTguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dvRDlkNzVEeU1Fb2NHa0tBTHk5M3BQeVY3SGgyRnk0RmV1UHR5RkptTm1uLzAv
MzEzODMxMmUzMTM4MzkyZTMzMzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM3
MzEzMzM2MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAG1vSQwDQYJKoZIhvcNAQELBQADggEBAFE1jzBb
4tY73XM4DAKR1pMi2WdTSoddX3roiX36YSHKoegun7zO5A9KDl8mO6pp4d15709L
qFF3V8U2zbOFtzwU7QSOPzj0oKyqgoO+b+wfMwh8E/vP7KjDqQ3FZObIv00kWtEe
Mj2ScCqTVz7ADlcz+kRubA1rvguawM1t+nNryo9hKfhKiZkOuLhnMNiOX+fAXsSs
iPyIePcv0LiRvHcXVCdRDqZ+PTnh/JYhfrh1KkPAyyAg97rzH2ASxbtHFT7CiQcw
kYzN9rf+xOXLKsKcnTE5Tr1vN0v/xYOb04nqBEMXY3LyVz1ZfvYQgARqOR2TkYfO
UsEhSfnrupOdrnI=
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:20 2024 by rpki-client on console-fra.rpki-client.org