Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/1/3133312e3130382e3235322e302f32332d3233203d3e203631363934.roa
File:                     3133312e3130382e3235322e302f32332d3233203d3e203631363934.roa (raw, json)
Hash identifier:          YdFclsyMiIqX+SZ9bIBXzFIUw1tZy6CvbRIfcbYCIso=
Subject key identifier:   15:95:98:06:D9:C0:2D:D0:CB:62:3F:62:07:D8:26:8E:3E:85:D8:54
Certificate issuer:       /CN=EE9E3B8C44E817B12E9E0A3E53713589553FDE47
Certificate serial:       559F7C4F37C59931D55A59A13A4B9822F5396E5D
Authority key identifier: EE:9E:3B:8C:44:E8:17:B1:2E:9E:0A:3E:53:71:35:89:55:3F:DE:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE9E3B8C44E817B12E9E0A3E53713589553FDE47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/1/3133312e3130382e3235322e302f32332d3233203d3e203631363934.roa
Signing time:             Wed 03 Apr 2024 19:19:08 +0000
ROA not before:           Wed 03 Apr 2024 19:14:08 +0000
ROA not after:            Wed 02 Apr 2025 19:19:08 +0000
asID:                     61694
IP address blocks:        131.108.252.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/1/EE9E3B8C44E817B12E9E0A3E53713589553FDE47.crl
                          rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/1/EE9E3B8C44E817B12E9E0A3E53713589553FDE47.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE9E3B8C44E817B12E9E0A3E53713589553FDE47.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:9f:7c:4f:37:c5:99:31:d5:5a:59:a1:3a:4b:98:22:f5:39:6e:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE9E3B8C44E817B12E9E0A3E53713589553FDE47
        Validity
            Not Before: Apr  3 19:14:08 2024 GMT
            Not After : Apr  2 19:19:08 2025 GMT
        Subject: CN=15959806D9C02DD0CB623F6207D8268E3E85D854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:de:c7:26:c6:02:de:44:4d:bc:2c:04:64:4f:
                    4f:af:0a:5d:fe:fa:44:5d:bd:c0:c0:25:56:b9:da:
                    1f:0a:d3:3b:0c:ff:e0:f1:29:66:8e:db:78:73:b4:
                    60:8c:06:98:7f:bd:8a:d7:34:49:ca:b9:07:59:2d:
                    6a:1e:a7:78:38:9b:ef:93:df:43:30:73:bf:07:73:
                    80:1a:5b:5d:57:6a:70:a5:7c:92:3b:52:fc:d8:82:
                    52:95:8e:10:30:b7:7f:72:ea:09:b3:ba:b9:62:28:
                    ea:06:a4:8c:1e:ae:35:17:7f:fe:05:07:30:ee:76:
                    07:58:15:46:73:d0:37:06:67:a7:26:bb:27:0a:81:
                    21:b9:a2:d5:ac:34:ec:68:eb:f8:1f:0d:a7:85:69:
                    0d:84:be:1c:f3:2b:84:22:bd:40:6f:b7:a1:78:5e:
                    df:5d:bb:ff:c6:65:94:02:f5:31:6c:7a:bd:89:bb:
                    26:13:2e:cd:e3:89:d7:a7:9c:20:e1:7a:94:81:a0:
                    13:08:ae:79:a7:c8:7f:76:b2:b5:8e:74:e4:54:db:
                    ad:b3:d5:53:1f:10:34:d1:38:31:64:ab:a3:3c:33:
                    5f:99:79:c1:fd:83:7b:4f:f8:b4:10:3b:08:23:13:
                    93:b5:27:a7:81:0b:ae:33:3a:45:e4:11:65:25:c5:
                    5d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:95:98:06:D9:C0:2D:D0:CB:62:3F:62:07:D8:26:8E:3E:85:D8:54
            X509v3 Authority Key Identifier:
                keyid:EE:9E:3B:8C:44:E8:17:B1:2E:9E:0A:3E:53:71:35:89:55:3F:DE:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/1/EE9E3B8C44E817B12E9E0A3E53713589553FDE47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE9E3B8C44E817B12E9E0A3E53713589553FDE47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/1/3133312e3130382e3235322e302f32332d3233203d3e203631363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:0f:4b:44:e3:1b:e8:60:b3:03:e1:1f:ad:73:97:3c:0e:f1:
         5e:61:f7:29:79:71:f0:a2:d1:4e:87:bd:ec:00:3d:44:30:2d:
         e0:a8:71:93:7c:83:57:a0:df:8a:35:26:f6:3b:67:18:85:f6:
         3c:34:f4:f7:48:24:e4:d4:4b:35:ae:c5:30:9f:79:92:19:d0:
         58:eb:e7:e7:d3:3d:bc:8b:17:4d:5d:3c:ea:00:62:93:e5:b0:
         78:ab:9c:73:d7:eb:b2:38:1c:80:30:64:13:28:76:c7:3c:f4:
         cf:3a:a1:f7:82:17:cc:90:c0:19:c5:73:51:66:6e:3e:cd:c4:
         b7:cd:8b:40:47:9a:f9:ca:9c:ab:ca:32:14:87:d5:93:80:b3:
         f3:f4:1d:af:7c:6c:8e:b4:40:11:e0:e4:e4:d4:a5:93:69:61:
         84:ee:ae:99:a9:74:aa:05:7d:59:48:55:6c:94:34:b1:d4:e1:
         b5:2f:8d:9f:6a:13:5c:ea:24:c6:96:7a:3c:c2:d8:c7:ea:5a:
         49:d1:07:08:3b:41:f9:08:87:bf:89:4b:c1:59:ab:fa:7d:60:
         ea:d8:00:7c:de:5f:c2:e9:d2:5e:30:88:2f:12:2f:3a:de:9d:
         b6:49:34:55:04:34:b3:1a:61:43:06:f9:5d:d0:3c:5f:33:2f:
         fc:52:60:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 06:40:40 2024 by rpki-client on console-ams.rpki-client.org