Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GvXKLiSKQmc3iyEcgoaETWw7kpFTUYgHfp7YVuBRRC4F/0/3230312e3138322e38382e302f32342d3234203d3e20323637353136.roa
File:                     3230312e3138322e38382e302f32342d3234203d3e20323637353136.roa (raw, json)
Hash identifier:          n1w1HPb0IauSJzU/FALjio1fP6ewKUWKn1UAGY3XLtw=
Subject key identifier:   4B:13:9C:8E:93:8D:20:13:AD:B4:B9:CA:CF:18:67:6F:DA:C1:3A:3E
Certificate issuer:       /CN=E9BA3D42C7746EAC93FFBAA6FDEF0883C4CBB264
Certificate serial:       1662CE73C799CF0F6AD96170BFC6F78D942EC783
Authority key identifier: E9:BA:3D:42:C7:74:6E:AC:93:FF:BA:A6:FD:EF:08:83:C4:CB:B2:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9BA3D42C7746EAC93FFBAA6FDEF0883C4CBB264.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvXKLiSKQmc3iyEcgoaETWw7kpFTUYgHfp7YVuBRRC4F/0/3230312e3138322e38382e302f32342d3234203d3e20323637353136.roa
Signing time:             Thu 08 Aug 2024 00:38:00 +0000
ROA not before:           Thu 08 Aug 2024 00:33:00 +0000
ROA not after:            Thu 07 Aug 2025 00:38:00 +0000
asID:                     267516
IP address blocks:        201.182.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GvXKLiSKQmc3iyEcgoaETWw7kpFTUYgHfp7YVuBRRC4F/0/E9BA3D42C7746EAC93FFBAA6FDEF0883C4CBB264.crl
                          rsync://rpki-repo.registro.br/repo/GvXKLiSKQmc3iyEcgoaETWw7kpFTUYgHfp7YVuBRRC4F/0/E9BA3D42C7746EAC93FFBAA6FDEF0883C4CBB264.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9BA3D42C7746EAC93FFBAA6FDEF0883C4CBB264.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:62:ce:73:c7:99:cf:0f:6a:d9:61:70:bf:c6:f7:8d:94:2e:c7:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9BA3D42C7746EAC93FFBAA6FDEF0883C4CBB264
        Validity
            Not Before: Aug  8 00:33:00 2024 GMT
            Not After : Aug  7 00:38:00 2025 GMT
        Subject: CN=4B139C8E938D2013ADB4B9CACF18676FDAC13A3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:9c:b5:31:c9:3f:dd:f9:4f:8e:37:7e:72:22:
                    6e:e1:fe:9d:22:fb:ba:db:a3:97:58:27:e1:3f:5f:
                    b1:4d:44:0a:5f:f6:6d:1c:f2:ee:22:3e:ca:d1:2b:
                    97:4a:8e:d4:f2:46:5b:87:1b:66:f5:4d:d9:69:5c:
                    17:79:a2:0f:50:e6:3c:01:28:70:5b:fb:4b:2f:1e:
                    5d:a2:8d:b1:ba:d7:0a:0a:7b:93:16:5b:4e:1d:50:
                    80:8a:f7:c7:2e:0b:53:69:ca:a0:54:66:00:83:25:
                    39:d5:4d:46:af:98:0d:c2:cb:c9:fa:80:7f:be:dd:
                    e5:9b:c0:ac:7e:fd:3a:73:96:ee:c2:ba:ec:c1:8c:
                    3c:96:03:79:c3:b1:10:4d:e2:c4:f6:ca:f3:85:9a:
                    97:b8:c2:10:59:ce:eb:4d:77:b6:97:66:e3:5f:fd:
                    5b:22:3e:01:44:67:88:29:e1:99:2f:b2:59:18:12:
                    a0:e8:82:75:11:2e:92:5a:f3:fe:cc:31:1b:c5:fb:
                    b4:4f:57:9f:0f:5c:08:8d:bd:d6:b7:be:4f:5b:72:
                    96:8b:0f:3b:9f:45:07:ac:fe:20:1e:6f:2f:e9:75:
                    66:ee:da:f6:2c:e0:28:7c:f8:bd:ad:e9:1d:ab:cd:
                    32:2b:92:d1:54:88:5c:ca:cc:ff:1e:8d:22:64:f7:
                    26:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:13:9C:8E:93:8D:20:13:AD:B4:B9:CA:CF:18:67:6F:DA:C1:3A:3E
            X509v3 Authority Key Identifier:
                keyid:E9:BA:3D:42:C7:74:6E:AC:93:FF:BA:A6:FD:EF:08:83:C4:CB:B2:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvXKLiSKQmc3iyEcgoaETWw7kpFTUYgHfp7YVuBRRC4F/0/E9BA3D42C7746EAC93FFBAA6FDEF0883C4CBB264.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9BA3D42C7746EAC93FFBAA6FDEF0883C4CBB264.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvXKLiSKQmc3iyEcgoaETWw7kpFTUYgHfp7YVuBRRC4F/0/3230312e3138322e38382e302f32342d3234203d3e20323637353136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:81:88:0d:f6:d4:0f:70:e1:44:c1:dd:0b:0d:ba:67:15:68:
         30:40:37:4d:ef:40:36:59:91:97:0a:f3:2d:ba:46:63:51:5e:
         91:a9:82:db:44:d4:e4:d5:4c:ab:24:b7:09:16:dc:e1:d0:25:
         09:d2:e8:55:c7:6d:a7:cb:cf:e3:57:9a:8d:df:1f:3f:cb:db:
         36:f0:a6:66:8a:ce:36:bd:b4:3e:77:ff:93:39:73:0b:f6:1c:
         6a:d8:e0:c4:87:4b:35:98:0b:28:f1:47:81:54:32:2c:8e:c2:
         d8:26:66:7d:ad:6c:80:7b:f3:ad:03:89:98:71:9b:39:0e:d3:
         b1:b9:ee:b5:b4:e3:43:48:09:4d:e5:38:54:21:3f:13:89:a5:
         f8:11:ac:9d:d4:89:01:82:e4:57:6d:c1:af:06:e8:07:95:8a:
         4c:c9:7c:0c:c7:b2:5d:9c:5e:e3:d7:c4:8f:c0:4b:44:0c:6c:
         db:0f:48:c6:f5:c8:d8:98:d6:65:d8:a4:db:e8:89:83:a9:87:
         03:eb:5c:19:fc:3c:a2:d0:50:46:ed:33:a3:40:40:45:ec:78:
         c0:5a:d4:7a:e9:a7:28:e4:06:df:d7:c3:2b:a3:a1:75:b1:e7:
         9e:ee:74:4b:eb:a1:69:42:b0:ff:34:56:76:b9:3c:fd:4e:e7:
         dd:79:d4:74
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFmLOc8eZzw9q2WFwv8b3jZQux4MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTlCQTNENDJDNzc0NkVBQzkzRkZCQUE2RkRFRjA4ODND
NENCQjI2NDAeFw0yNDA4MDgwMDMzMDBaFw0yNTA4MDcwMDM4MDBaMDMxMTAvBgNV
BAMTKDRCMTM5QzhFOTM4RDIwMTNBREI0QjlDQUNGMTg2NzZGREFDMTNBM0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDonLUxyT/d+U+ON35yIm7h/p0i
+7rbo5dYJ+E/X7FNRApf9m0c8u4iPsrRK5dKjtTyRluHG2b1TdlpXBd5og9Q5jwB
KHBb+0svHl2ijbG61woKe5MWW04dUICK98cuC1NpyqBUZgCDJTnVTUavmA3Cy8n6
gH++3eWbwKx+/Tpzlu7CuuzBjDyWA3nDsRBN4sT2yvOFmpe4whBZzutNd7aXZuNf
/VsiPgFEZ4gp4ZkvslkYEqDognURLpJa8/7MMRvF+7RPV58PXAiNvda3vk9bcpaL
DzufRQes/iAeby/pdWbu2vYs4Ch8+L2t6R2rzTIrktFUiFzKzP8ejSJk9yazAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUSxOcjpONIBOttLnKzxhnb9rBOj4wHwYDVR0j
BBgwFoAU6bo9Qsd0bqyT/7qm/e8Ig8TLsmQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3ZYS0xpU0tRbWMzaXlFY2dvYUVUV3c3a3BGVFVZZ0hmcDdZVnVCUlJD
NEYvMC9FOUJBM0Q0MkM3NzQ2RUFDOTNGRkJBQTZGREVGMDg4M0M0Q0JCMjY0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U5QkEzRDQyQzc3NDZFQUM5
M0ZGQkFBNkZERUYwODgzQzRDQkIyNjQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d2WEtMaVNLUW1jM2l5RWNnb2FFVFd3N2twRlRVWWdIZnA3WVZ1QlJSQzRGLzAv
MzIzMDMxMmUzMTM4MzIyZTM4MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzczNTMxMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADJtlgwDQYJKoZIhvcNAQELBQADggEBABaBiA32
1A9w4UTB3QsNumcVaDBAN03vQDZZkZcK8y26RmNRXpGpgttE1OTVTKsktwkW3OHQ
JQnS6FXHbafLz+NXmo3fHz/L2zbwpmaKzja9tD53/5M5cwv2HGrY4MSHSzWYCyjx
R4FUMiyOwtgmZn2tbIB7860DiZhxmzkO07G57rW040NICU3lOFQhPxOJpfgRrJ3U
iQGC5Fdtwa8G6AeVikzJfAzHsl2cXuPXxI/AS0QMbNsPSMb1yNiY1mXYpNvoiYOp
hwPrXBn8PKLQUEbtM6NAQEXseMBa1HrppyjkBt/XwyujoXWx557udEvroWlCsP80
Vna5PP1O59151HQ=
-----END CERTIFICATE-----
Generated at Sat Nov 23 14:22:40 2024 by rpki-client on console-fra.rpki-client.org