Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/3230302e3233372e3139322e302f31382d3234203d3e203131323432.roa
File:                     3230302e3233372e3139322e302f31382d3234203d3e203131323432.roa (raw, json)
Hash identifier:          1OjPkUe2+RSgGlN5qkN692ryB6ttixmAeyu+LcCYrFM=
Subject key identifier:   11:5D:B3:FB:1A:E5:8B:7C:53:E7:B3:15:BF:3E:AB:5F:2E:E9:57:33
Certificate issuer:       /CN=E566AB13DF19F2E8935CAFB119E40308D0A08146
Certificate serial:       541270E17F1CE5621A1C45CBC470784CB6E9FC63
Authority key identifier: E5:66:AB:13:DF:19:F2:E8:93:5C:AF:B1:19:E4:03:08:D0:A0:81:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/3230302e3233372e3139322e302f31382d3234203d3e203131323432.roa
Signing time:             Wed 03 Apr 2024 19:34:32 +0000
ROA not before:           Wed 03 Apr 2024 19:29:32 +0000
ROA not after:            Wed 02 Apr 2025 19:34:32 +0000
asID:                     11242
IP address blocks:        200.237.192.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.crl
                          rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 03:29:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:12:70:e1:7f:1c:e5:62:1a:1c:45:cb:c4:70:78:4c:b6:e9:fc:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E566AB13DF19F2E8935CAFB119E40308D0A08146
        Validity
            Not Before: Apr  3 19:29:32 2024 GMT
            Not After : Apr  2 19:34:32 2025 GMT
        Subject: CN=115DB3FB1AE58B7C53E7B315BF3EAB5F2EE95733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6a:ee:04:8e:d7:2d:93:60:d0:3b:a6:01:f0:
                    d0:41:49:7a:b3:38:9e:4c:4a:94:58:c0:68:27:cf:
                    8e:60:dd:35:19:a7:1e:aa:51:fd:3f:b8:84:4e:06:
                    7f:50:88:73:81:e6:c1:ab:ea:c3:74:a1:9d:30:f3:
                    38:20:90:6c:63:e6:3d:f1:1a:67:d4:d1:b0:23:2f:
                    24:8b:9d:74:74:62:ff:69:f1:22:c5:a4:fb:e8:1a:
                    03:fe:9b:1d:8e:dd:4f:b8:88:73:bf:a2:c7:aa:e2:
                    9f:6d:06:91:1d:e0:36:f2:9b:df:69:e5:a4:6b:05:
                    0a:c4:28:7e:47:70:ad:c4:b8:03:8e:db:8c:41:26:
                    10:b1:f7:77:09:2e:db:1b:95:06:b4:48:5e:69:b5:
                    00:b3:e1:31:d3:16:f0:12:5b:da:54:e9:9d:b6:2f:
                    c5:8e:f5:60:de:42:37:5b:97:ba:7a:f1:66:d8:c1:
                    6f:0f:f6:7c:fe:07:d4:d3:30:16:cb:9e:85:37:f4:
                    71:0e:64:90:1c:1d:3c:47:0c:1a:87:b6:e1:2a:58:
                    56:5e:b8:e1:40:4a:13:d5:a4:88:93:17:8f:24:80:
                    6c:3d:cf:d8:39:a9:e1:14:5b:3f:62:fe:1c:3e:45:
                    1f:00:45:0d:9b:ea:1d:8e:b7:0b:4e:ea:99:77:13:
                    02:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:5D:B3:FB:1A:E5:8B:7C:53:E7:B3:15:BF:3E:AB:5F:2E:E9:57:33
            X509v3 Authority Key Identifier:
                keyid:E5:66:AB:13:DF:19:F2:E8:93:5C:AF:B1:19:E4:03:08:D0:A0:81:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/3230302e3233372e3139322e302f31382d3234203d3e203131323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.237.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         73:2e:3c:48:a7:55:10:08:bc:df:2e:5b:a5:7a:50:d3:fa:7a:
         9e:78:bd:a9:dc:da:a3:58:7b:04:c1:70:91:e7:79:a8:0a:59:
         b9:93:c1:d7:24:13:d7:7a:fa:f4:de:15:53:80:8f:8d:08:3f:
         fe:fd:34:fe:09:a3:4d:1b:cc:ae:16:ef:2f:ff:36:97:f6:c8:
         68:6d:cb:ee:09:d2:a7:b3:de:9b:fa:2b:04:0f:5c:45:e8:a7:
         5f:2a:21:eb:bc:d3:25:72:ad:d8:bc:1b:79:42:3a:78:df:24:
         7a:fe:ee:14:90:88:23:7d:f6:d6:88:63:0f:7c:53:a7:3f:f6:
         e0:51:3d:31:aa:ba:02:0e:ad:54:f7:e7:8a:e4:2d:b8:b7:63:
         f1:2b:07:e8:97:a5:d8:37:a9:97:ca:a6:6d:42:0c:b6:ba:b6:
         d1:27:fc:d3:fe:36:28:5d:20:99:4b:67:e9:8f:d6:6b:f8:e2:
         0e:bb:98:a0:9a:0f:35:b1:1c:63:0d:d6:b9:99:5e:94:d1:79:
         9d:aa:29:cd:91:b2:91:4c:d5:b8:7a:aa:c1:46:a6:57:9a:ba:
         ce:7f:5d:af:f6:0f:72:fd:c8:21:b5:43:38:7e:d6:58:d7:cb:
         79:48:0f:77:a9:bd:90:3e:18:b8:d0:3b:0c:d1:a0:a4:bc:1e:
         80:66:ed:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:14:56 2024 by rpki-client on console-fra.rpki-client.org