Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/3135302e3136322e302e302f31362d3234203d3e20323633333030.roa
File:                     3135302e3136322e302e302f31362d3234203d3e20323633333030.roa (raw, json)
Hash identifier:          vtD+eJZFV2csdmVracK+habMKwwUN38Joqs4lOTU3hE=
Subject key identifier:   0B:13:B8:EB:AB:B4:70:AA:AF:4E:8F:02:A7:18:D4:89:3D:EA:71:ED
Certificate issuer:       /CN=E566AB13DF19F2E8935CAFB119E40308D0A08146
Certificate serial:       48894C2B34F8483070D381F67136718AF2EFE70D
Authority key identifier: E5:66:AB:13:DF:19:F2:E8:93:5C:AF:B1:19:E4:03:08:D0:A0:81:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/3135302e3136322e302e302f31362d3234203d3e20323633333030.roa
Signing time:             Wed 03 Apr 2024 19:34:32 +0000
ROA not before:           Wed 03 Apr 2024 19:29:32 +0000
ROA not after:            Wed 02 Apr 2025 19:34:32 +0000
asID:                     263300
IP address blocks:        150.162.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.crl
                          rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:31:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:89:4c:2b:34:f8:48:30:70:d3:81:f6:71:36:71:8a:f2:ef:e7:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E566AB13DF19F2E8935CAFB119E40308D0A08146
        Validity
            Not Before: Apr  3 19:29:32 2024 GMT
            Not After : Apr  2 19:34:32 2025 GMT
        Subject: CN=0B13B8EBABB470AAAF4E8F02A718D4893DEA71ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:50:24:e8:54:bc:3f:e6:a0:ab:1d:d2:97:b7:
                    7a:3d:9f:33:f9:78:7f:f6:f8:92:17:e2:8e:a9:85:
                    09:a1:03:25:46:9b:28:5d:df:0d:80:94:cb:8a:41:
                    ac:3e:0d:de:af:5b:41:c6:c1:cc:76:6a:22:1c:45:
                    94:77:a1:6f:3e:5d:5d:3e:ec:26:50:db:3a:fb:52:
                    d0:0c:ff:50:a7:fa:04:f1:32:14:0b:1c:de:2b:1b:
                    30:c5:14:93:c0:9a:36:4e:fd:ee:df:2b:0f:e5:eb:
                    1c:3f:72:8d:a9:5b:35:69:23:c4:bb:68:25:19:3f:
                    99:e9:4b:90:e6:f8:8a:89:d2:99:e3:51:51:a4:33:
                    72:14:ee:45:12:ac:26:18:9b:35:cf:8c:3c:0a:31:
                    1c:b6:50:00:a6:66:64:0b:46:5e:77:fa:7b:14:f9:
                    0c:59:f7:fa:6b:38:32:f2:2f:00:6d:b8:09:0e:be:
                    ec:5d:e2:91:e3:58:40:4f:a1:c4:3f:c5:c8:05:29:
                    a3:45:86:25:4a:b2:8e:73:95:c5:c7:5e:61:55:68:
                    ab:51:a4:ce:01:0c:8b:46:d7:15:8e:6f:f0:9e:af:
                    cc:b3:ad:fe:72:89:2e:b7:ac:c7:d2:c9:8e:7d:2f:
                    cf:cc:a9:cc:bb:cf:3c:67:15:91:04:42:02:d2:03:
                    8f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:13:B8:EB:AB:B4:70:AA:AF:4E:8F:02:A7:18:D4:89:3D:EA:71:ED
            X509v3 Authority Key Identifier:
                keyid:E5:66:AB:13:DF:19:F2:E8:93:5C:AF:B1:19:E4:03:08:D0:A0:81:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/3135302e3136322e302e302f31362d3234203d3e20323633333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.162.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         36:6e:63:8e:21:ad:69:e5:e5:cd:4e:17:bb:66:5a:ae:e6:c9:
         5b:fd:64:2d:39:8b:49:e0:5e:33:58:19:1e:5f:14:9c:db:ed:
         78:e1:45:17:d0:ec:03:87:e6:b2:cd:41:aa:6b:aa:40:05:f7:
         95:8e:9a:20:92:c9:7b:2f:c2:42:20:d8:92:1a:cd:ca:c0:ae:
         71:cf:d4:3e:9c:8a:e1:fb:15:fe:c1:e7:9e:be:75:61:63:64:
         ce:68:d9:1b:10:28:41:e9:22:50:e6:ae:f2:5b:81:aa:ad:9a:
         ee:6b:1d:3a:db:11:30:42:de:dc:d9:31:46:aa:16:ab:22:07:
         18:c4:04:96:73:50:a1:86:b4:9a:9e:8a:21:70:b9:85:ac:ae:
         20:ac:b5:12:f4:10:3d:93:37:6e:e3:e9:b3:47:f8:72:8d:3a:
         64:a5:16:25:5e:5a:a6:4b:ad:87:1c:06:3b:6e:13:ad:24:5d:
         56:3d:78:ee:b8:2d:a3:7b:cb:81:f5:4c:ca:8f:b8:62:ed:80:
         61:5b:a4:bb:69:e7:b8:c5:6f:18:34:02:6c:ff:a1:d1:d1:4b:
         9d:9b:be:4e:b2:cb:5a:ec:99:13:72:ab:0f:94:8a:c5:49:5c:
         82:44:ef:4f:11:5d:cb:5c:4f:bf:3e:f6:45:50:5b:83:c2:3a:
         de:b6:c9:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:36 2024 by rpki-client on console-ams.rpki-client.org