Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/3230302e3133352e302e302f31362d3234203d3e203130373135.roa
File:                     3230302e3133352e302e302f31362d3234203d3e203130373135.roa (raw, json)
Hash identifier:          VI7Um8z6OLYuBajbdRBd6Oissmzyo8Bi6NVbg9w9b0c=
Subject key identifier:   7F:65:5D:D3:96:64:7B:CB:5F:79:44:91:A6:08:09:C7:E7:CC:C2:4E
Certificate issuer:       /CN=E566AB13DF19F2E8935CAFB119E40308D0A08146
Certificate serial:       30F5E9AAB1D00965A3CA24C372E93864BFE116A0
Authority key identifier: E5:66:AB:13:DF:19:F2:E8:93:5C:AF:B1:19:E4:03:08:D0:A0:81:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/3230302e3133352e302e302f31362d3234203d3e203130373135.roa
Signing time:             Wed 03 Apr 2024 19:34:32 +0000
ROA not before:           Wed 03 Apr 2024 19:29:32 +0000
ROA not after:            Wed 02 Apr 2025 19:34:32 +0000
asID:                     10715
IP address blocks:        200.135.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.crl
                          rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:f5:e9:aa:b1:d0:09:65:a3:ca:24:c3:72:e9:38:64:bf:e1:16:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E566AB13DF19F2E8935CAFB119E40308D0A08146
        Validity
            Not Before: Apr  3 19:29:32 2024 GMT
            Not After : Apr  2 19:34:32 2025 GMT
        Subject: CN=7F655DD396647BCB5F794491A60809C7E7CCC24E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a1:45:3c:c7:0e:62:2f:62:dd:21:73:b7:dd:
                    c2:ac:c8:ce:69:e0:0c:14:bf:b5:b7:6e:4e:10:f6:
                    49:ad:55:b7:a4:0d:7d:61:f6:ff:6d:ef:13:12:30:
                    6a:11:94:12:a3:c8:c3:a1:f7:7d:7a:22:85:83:19:
                    6c:57:9a:ea:5c:c2:48:7f:79:85:48:5b:ef:26:57:
                    8a:b2:ba:ff:46:18:dc:7d:91:e6:11:23:0d:17:14:
                    5d:5f:a2:b2:e0:5d:a9:09:60:6e:f2:a6:78:1c:80:
                    79:36:37:b9:7c:ea:c3:b8:6a:15:08:4f:fd:17:bc:
                    03:20:89:88:0a:3a:92:7b:3b:18:00:94:a0:36:c7:
                    d9:dd:f5:38:0f:a7:8c:eb:2e:69:36:7f:8a:d5:c6:
                    48:41:a0:bf:52:fc:d1:30:cf:e0:4f:06:7e:9f:35:
                    de:45:c0:b0:1c:a2:81:56:99:a8:72:e7:76:45:cd:
                    72:f0:4b:3b:cd:9a:04:cc:ad:bc:d6:d1:a0:68:0a:
                    79:46:eb:da:af:05:d4:1b:af:31:bf:29:52:c5:e6:
                    f6:0f:10:48:ce:43:a6:23:c7:d6:aa:65:93:c6:11:
                    8a:69:8f:2d:f1:a0:1f:12:a5:0e:0e:ca:59:0a:4c:
                    8e:38:de:ce:ea:5f:4b:ee:17:84:9b:ac:24:65:09:
                    b2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:65:5D:D3:96:64:7B:CB:5F:79:44:91:A6:08:09:C7:E7:CC:C2:4E
            X509v3 Authority Key Identifier:
                keyid:E5:66:AB:13:DF:19:F2:E8:93:5C:AF:B1:19:E4:03:08:D0:A0:81:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/3230302e3133352e302e302f31362d3234203d3e203130373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.135.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         73:1c:62:33:4a:96:26:03:1e:f6:ef:a7:4c:02:c2:fe:89:fa:
         ba:25:e9:8e:21:31:3b:ff:ab:fb:bf:16:dc:48:a6:12:d8:31:
         c7:7d:5a:99:a8:6f:9b:d8:d7:21:b3:db:d5:be:a8:3f:d7:47:
         b3:7a:83:b5:26:f6:97:30:7a:3f:95:f3:19:04:36:9d:1e:42:
         03:27:f7:08:b2:0e:2a:1b:ca:90:40:a0:5d:f6:49:f7:44:72:
         a3:e4:b8:6e:5b:51:91:f9:ac:b2:6e:f3:08:42:b2:da:cd:72:
         65:30:ae:88:34:77:96:5f:28:0f:8a:c9:f0:2a:93:3b:0e:e4:
         c1:8c:05:2d:35:cd:f6:ca:c2:56:d5:4a:8b:cb:69:bf:d2:6a:
         10:85:ae:24:9c:61:3c:29:3d:d6:c4:a2:52:48:fd:17:b8:6a:
         9e:f0:71:ec:92:02:d0:72:8d:ce:ff:b7:d6:0b:82:e5:f0:a3:
         f9:7d:c6:19:56:73:99:12:9a:6c:c4:1e:04:63:c1:a8:c1:9c:
         52:76:47:62:4a:3a:93:01:7a:96:9a:4e:0b:a7:80:ec:a4:24:
         04:b6:aa:9f:90:7e:60:1b:9e:20:1a:43:c9:93:b9:f7:ec:28:
         f1:ed:34:95:3e:30:9a:3f:7d:63:e0:c4:59:48:f8:1a:20:6a:
         b1:98:1a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 08:18:29 2024 by rpki-client on console-ams.rpki-client.org