Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/3138312e3138392e33392e302f32342d3234203d3e20323731333633.roa
File:                     3138312e3138392e33392e302f32342d3234203d3e20323731333633.roa (raw, json)
Hash identifier:          7iLwKLrCCq0SEhGG5Te4E0ipcE+0+OiQRqApcCsqDnM=
Subject key identifier:   35:8F:6D:12:CB:0D:9F:36:03:1D:62:CD:92:E4:89:A4:FA:A5:ED:52
Certificate issuer:       /CN=73B656B5831532E23BC621E748382CCCE6CA40E8
Certificate serial:       19EA0FEBD02B176D5748CF1EEBCDF1AC1929149A
Authority key identifier: 73:B6:56:B5:83:15:32:E2:3B:C6:21:E7:48:38:2C:CC:E6:CA:40:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73B656B5831532E23BC621E748382CCCE6CA40E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/3138312e3138392e33392e302f32342d3234203d3e20323731333633.roa
Signing time:             Thu 08 Aug 2024 19:23:06 +0000
ROA not before:           Thu 08 Aug 2024 19:18:06 +0000
ROA not after:            Thu 07 Aug 2025 19:23:06 +0000
asID:                     271363
IP address blocks:        181.189.39.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/73B656B5831532E23BC621E748382CCCE6CA40E8.crl
                          rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/73B656B5831532E23BC621E748382CCCE6CA40E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73B656B5831532E23BC621E748382CCCE6CA40E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 16:09:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:ea:0f:eb:d0:2b:17:6d:57:48:cf:1e:eb:cd:f1:ac:19:29:14:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73B656B5831532E23BC621E748382CCCE6CA40E8
        Validity
            Not Before: Aug  8 19:18:06 2024 GMT
            Not After : Aug  7 19:23:06 2025 GMT
        Subject: CN=358F6D12CB0D9F36031D62CD92E489A4FAA5ED52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:8f:44:a2:76:b6:75:be:63:5e:2f:b9:3d:4b:
                    f6:25:5b:f4:94:41:ae:7d:38:86:c7:73:86:f9:89:
                    4e:bc:11:17:0f:89:1c:ab:f0:32:d9:d7:ae:3d:7c:
                    c0:9c:60:44:4a:5c:36:10:0e:c4:5d:73:30:82:19:
                    9a:49:96:a3:14:9b:50:d3:21:4b:7a:a9:9d:76:19:
                    de:e6:53:b9:77:e5:2f:1c:2e:08:98:f0:6a:7f:56:
                    f3:4e:29:85:ee:a2:23:fb:b2:6d:b4:86:23:d8:3a:
                    7f:58:08:d7:eb:11:51:a9:95:4d:71:4a:0b:a5:3e:
                    01:c2:f6:be:bb:5f:f0:fe:8a:0e:4d:05:b6:14:6b:
                    dd:96:7d:54:54:88:53:23:9a:bf:5b:70:12:e1:3d:
                    9c:4e:e9:2d:25:a5:d7:a6:d8:57:02:6f:9d:c3:9a:
                    52:b4:9e:fa:f1:38:d1:47:53:d1:03:a1:32:07:34:
                    cb:cf:2f:68:1c:b3:53:ab:06:63:1e:1f:02:09:95:
                    2b:56:9d:ff:e5:1c:59:a9:97:7e:d7:c0:c1:d1:e7:
                    d9:77:43:f4:a5:b4:8a:55:56:90:08:45:a6:b5:63:
                    84:c4:58:75:d5:d9:67:4a:f3:b6:53:5b:11:ee:61:
                    4c:a0:bf:6e:89:4d:aa:c2:06:1a:f4:b4:4e:37:b3:
                    2b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:8F:6D:12:CB:0D:9F:36:03:1D:62:CD:92:E4:89:A4:FA:A5:ED:52
            X509v3 Authority Key Identifier:
                keyid:73:B6:56:B5:83:15:32:E2:3B:C6:21:E7:48:38:2C:CC:E6:CA:40:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/73B656B5831532E23BC621E748382CCCE6CA40E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73B656B5831532E23BC621E748382CCCE6CA40E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/3138312e3138392e33392e302f32342d3234203d3e20323731333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:d1:55:65:2c:cf:11:05:29:47:32:93:08:5a:c7:aa:e6:b0:
         a5:cb:d9:47:70:90:e1:11:87:e3:3d:f6:22:3a:3d:d1:9b:60:
         33:37:11:42:ee:69:31:02:fb:d8:fc:0b:68:34:dd:5e:0f:62:
         85:e9:1c:82:45:65:01:d7:01:13:71:91:14:e6:c3:b7:c2:1c:
         a4:f8:aa:c3:fe:ce:ab:31:4e:72:49:24:01:83:9e:8d:32:5c:
         18:f5:ac:1e:f0:a5:50:5e:f9:a9:7f:7d:6d:21:9c:b3:6d:16:
         92:ef:a7:63:76:a7:5c:b4:6c:89:73:29:29:99:e9:93:2f:86:
         49:28:0e:52:cf:6c:a8:2e:07:47:b8:2a:ea:5b:21:36:fe:b7:
         da:2b:e7:3d:55:07:33:1d:e4:44:87:88:99:ac:e7:a8:17:bc:
         9a:29:66:3d:db:de:ca:d8:d9:43:83:cf:d6:c5:89:75:c4:c7:
         9f:2c:65:01:bb:c7:a9:c5:a5:a4:6b:a5:2d:96:44:f6:43:2f:
         e9:d6:fa:db:fd:2c:dc:2d:bf:c1:d4:8e:53:bc:13:d2:6b:c8:
         bd:2a:3e:df:a9:49:da:9a:f5:54:03:35:6a:da:83:48:b6:d3:
         13:48:09:cf:21:fa:41:82:66:b2:57:78:95:91:50:9c:71:f5:
         c7:a5:66:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 17:13:54 2024 by rpki-client on console-fra.rpki-client.org