Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/3138312e3138392e33362e302f32342d3234203d3e20323731333633.roa
File:                     3138312e3138392e33362e302f32342d3234203d3e20323731333633.roa (raw, json)
Hash identifier:          9wBDveoAWiQhtdqh2GCb1r7MYpQOa1vwC04iV7KGd+k=
Subject key identifier:   8D:37:4A:71:53:49:89:CB:3D:94:DE:0A:83:87:18:A8:46:D5:91:12
Certificate issuer:       /CN=73B656B5831532E23BC621E748382CCCE6CA40E8
Certificate serial:       1BC206C2DC8C61A440B490DD590C10F089A7CBC8
Authority key identifier: 73:B6:56:B5:83:15:32:E2:3B:C6:21:E7:48:38:2C:CC:E6:CA:40:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73B656B5831532E23BC621E748382CCCE6CA40E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/3138312e3138392e33362e302f32342d3234203d3e20323731333633.roa
Signing time:             Thu 08 Aug 2024 18:37:45 +0000
ROA not before:           Thu 08 Aug 2024 18:32:45 +0000
ROA not after:            Thu 07 Aug 2025 18:37:45 +0000
asID:                     271363
IP address blocks:        181.189.36.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/73B656B5831532E23BC621E748382CCCE6CA40E8.crl
                          rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/73B656B5831532E23BC621E748382CCCE6CA40E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73B656B5831532E23BC621E748382CCCE6CA40E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:c2:06:c2:dc:8c:61:a4:40:b4:90:dd:59:0c:10:f0:89:a7:cb:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73B656B5831532E23BC621E748382CCCE6CA40E8
        Validity
            Not Before: Aug  8 18:32:45 2024 GMT
            Not After : Aug  7 18:37:45 2025 GMT
        Subject: CN=8D374A71534989CB3D94DE0A838718A846D59112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bd:55:4e:84:e3:e2:46:fa:eb:9c:b8:4c:0a:
                    40:62:f8:2a:c7:57:70:ae:2e:89:1d:fc:ca:9a:02:
                    e9:c0:27:6f:1e:71:01:42:8b:86:80:ff:69:2a:6d:
                    3d:75:17:4b:10:3f:00:7d:f7:97:f8:f5:38:14:4d:
                    05:3b:d4:ad:68:a4:00:6e:1c:bc:0a:e9:11:f6:90:
                    1b:f3:70:20:03:04:cb:11:6b:53:48:25:0d:b1:f7:
                    4a:48:28:4a:6d:20:ad:fb:6a:e3:36:01:ac:39:a2:
                    6f:b4:ed:c3:31:9c:74:97:db:d8:0b:41:93:3d:ae:
                    57:59:34:f3:36:9d:85:07:88:a8:bc:e0:61:82:b5:
                    4f:b0:cd:ad:8a:9c:5a:d6:43:f5:35:fc:83:5f:30:
                    b8:6f:e3:e4:85:61:40:42:f3:80:c8:8e:b7:6a:c1:
                    bf:e5:a3:d5:66:30:ac:3c:f2:64:d5:38:40:45:ba:
                    02:a4:cc:3d:48:20:11:4c:9b:93:ba:b3:34:1f:76:
                    61:3c:06:e0:50:e6:b4:26:db:7b:22:f7:62:73:27:
                    a2:7b:ef:20:8a:31:8c:5b:88:ee:5b:c6:79:2e:e9:
                    b8:fa:e3:88:aa:3b:ba:2c:4d:b7:70:3d:af:f5:b4:
                    5e:d9:b4:b1:d4:6a:bc:4e:20:08:f6:51:cf:5f:1c:
                    5b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:37:4A:71:53:49:89:CB:3D:94:DE:0A:83:87:18:A8:46:D5:91:12
            X509v3 Authority Key Identifier:
                keyid:73:B6:56:B5:83:15:32:E2:3B:C6:21:E7:48:38:2C:CC:E6:CA:40:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/73B656B5831532E23BC621E748382CCCE6CA40E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73B656B5831532E23BC621E748382CCCE6CA40E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/3138312e3138392e33362e302f32342d3234203d3e20323731333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:cb:27:b7:d8:14:4a:1d:e4:9c:f4:8f:91:74:ca:ca:d0:32:
         09:c4:b1:04:b5:c4:e0:70:67:87:ef:48:ec:33:a1:bb:49:36:
         64:84:7f:0d:ec:f6:c6:9f:42:37:c3:dd:a8:2e:66:32:2b:64:
         a8:9c:f3:91:66:a2:85:6e:49:fb:13:ea:dd:b1:b6:7e:bf:9b:
         5f:c6:1b:05:27:2b:85:46:72:a8:cf:73:95:d6:e3:6b:36:e7:
         69:71:b8:ab:72:ae:61:21:4c:8b:15:11:6d:97:e2:fd:59:7e:
         5f:9e:5a:cd:98:dc:a1:3c:a8:16:a1:1f:fc:a0:8d:62:ee:27:
         5f:54:cc:fc:a7:4a:4d:4a:f5:34:32:21:a8:8a:ef:13:29:d1:
         40:8b:bd:a2:48:c6:53:7c:e6:1f:67:55:62:21:44:92:b6:1a:
         5a:2d:29:38:00:41:48:57:cd:93:8a:16:89:4e:09:a2:b1:98:
         13:a6:aa:2e:7e:f3:91:1f:22:20:ba:52:fb:61:0e:d1:f9:75:
         0e:05:88:24:f7:bd:8e:9a:f6:e1:9a:bb:02:57:92:da:90:f9:
         fd:4e:a5:b5:a1:67:4b:ed:9b:b5:6b:36:87:78:66:d0:56:5b:
         a5:d6:02:13:69:0f:e0:82:81:aa:0c:66:a4:f0:75:8c:c1:38:
         14:70:0e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:47 2024 by rpki-client on console-ams.rpki-client.org