Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/3230302e31382e302e302f32302d3234203d3e203130373135.roa
File:                     3230302e31382e302e302f32302d3234203d3e203130373135.roa (raw, json)
Hash identifier:          WtkQE20wrpI0aBzHo2Zjr078ViWxqk8Ucq7dwTUYiXQ=
Subject key identifier:   AC:DB:98:FA:29:6B:9C:60:D6:9F:7A:80:C3:D0:C7:80:55:45:2B:79
Certificate issuer:       /CN=E566AB13DF19F2E8935CAFB119E40308D0A08146
Certificate serial:       5200DBBC3CFB5F284C239007C7B5F3683386D02C
Authority key identifier: E5:66:AB:13:DF:19:F2:E8:93:5C:AF:B1:19:E4:03:08:D0:A0:81:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/3230302e31382e302e302f32302d3234203d3e203130373135.roa
Signing time:             Wed 03 Apr 2024 19:34:32 +0000
ROA not before:           Wed 03 Apr 2024 19:29:32 +0000
ROA not after:            Wed 02 Apr 2025 19:34:32 +0000
asID:                     10715
IP address blocks:        200.18.0.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.crl
                          rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 03:29:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:00:db:bc:3c:fb:5f:28:4c:23:90:07:c7:b5:f3:68:33:86:d0:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E566AB13DF19F2E8935CAFB119E40308D0A08146
        Validity
            Not Before: Apr  3 19:29:32 2024 GMT
            Not After : Apr  2 19:34:32 2025 GMT
        Subject: CN=ACDB98FA296B9C60D69F7A80C3D0C78055452B79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b2:6a:c2:bc:9e:99:70:50:2a:1b:57:ba:a0:
                    d2:95:25:bd:fc:e2:7a:2f:4a:34:8c:fd:92:cb:33:
                    36:23:7a:38:96:1c:4c:9b:77:0c:3d:d6:31:9c:9c:
                    c9:4a:ba:2d:85:03:25:18:c7:54:f3:06:66:b9:73:
                    aa:c1:05:90:75:28:3c:9b:35:a6:85:3d:1c:b9:07:
                    30:af:82:fd:4a:d1:7f:5b:b5:bf:5a:b0:60:5c:5c:
                    2d:86:e8:92:e8:b9:e9:24:60:8c:39:0e:3e:ab:e2:
                    fb:59:a4:85:25:a4:b4:1a:dc:8f:29:b8:a3:9b:dc:
                    09:89:68:5d:15:f3:b7:64:04:f2:6b:c4:01:ba:6c:
                    7f:27:3c:63:39:0c:98:d7:e8:63:e2:3b:70:2c:b8:
                    02:46:fa:df:f1:a9:9b:c5:2c:84:a2:db:c3:c3:f2:
                    60:07:c3:2b:9f:63:1e:97:6a:d0:31:15:8d:0a:d2:
                    9f:b3:f5:61:cc:29:ee:c0:56:bb:45:e1:5d:cd:a9:
                    33:02:22:db:b9:33:65:73:56:74:4f:94:97:18:84:
                    ea:6f:d0:d6:9b:81:1e:ed:00:a4:cf:92:c7:89:30:
                    8c:4e:af:f3:42:03:3a:54:c1:fc:b7:d7:89:5d:f0:
                    71:fd:22:a8:cd:29:4b:57:81:96:54:98:e8:42:dd:
                    f9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:DB:98:FA:29:6B:9C:60:D6:9F:7A:80:C3:D0:C7:80:55:45:2B:79
            X509v3 Authority Key Identifier:
                keyid:E5:66:AB:13:DF:19:F2:E8:93:5C:AF:B1:19:E4:03:08:D0:A0:81:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/3230302e31382e302e302f32302d3234203d3e203130373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.18.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a9:2f:e2:a5:8a:99:fd:27:ae:d7:7b:b6:d7:2b:a7:19:da:12:
         34:ca:ff:b3:82:d1:ad:de:70:82:97:93:f5:74:ea:7a:55:37:
         26:bc:3f:00:15:9d:47:8d:bb:c8:b1:0f:6e:58:69:49:db:ef:
         86:72:be:64:0d:07:46:1e:01:fc:4e:b4:1f:b8:78:43:13:ec:
         0c:ee:61:7a:01:ff:46:2e:2c:e0:08:1a:96:11:ef:74:78:a1:
         3f:11:87:4c:13:02:cc:4b:11:a6:0c:b2:67:91:04:a3:69:a0:
         3d:9a:d3:57:66:71:5c:67:8b:14:61:5f:99:6f:d6:02:9e:76:
         9a:f6:e8:bf:f3:be:70:64:5a:6a:fc:f3:05:60:4d:c2:c3:89:
         f1:a1:68:39:44:95:9b:17:c9:90:a1:5c:0a:b1:4a:e0:d9:f5:
         17:c2:14:57:1d:fa:7f:9c:02:95:5e:1f:38:a2:56:c6:0e:a0:
         37:95:dd:63:92:6c:8b:07:fd:f6:03:44:58:19:0e:3b:bc:10:
         1d:97:9e:be:a8:43:1c:e8:b9:9b:f3:1f:1f:15:35:7b:68:9a:
         40:0e:42:7b:37:8d:d9:24:9c:fb:60:c8:8b:ca:3e:36:b1:ce:
         3c:67:0e:26:84:77:32:44:c1:84:bd:6f:a2:4b:16:c8:c6:77:
         4c:9e:ec:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:14:56 2024 by rpki-client on console-fra.rpki-client.org