Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/1/3133312e3130382e3235332e302f32342d3234203d3e203631363934.roa
File:                     3133312e3130382e3235332e302f32342d3234203d3e203631363934.roa (raw, json)
Hash identifier:          xZ5Tn65IEWl1MA3nrWXQlfY3MXVkhWw+ojrwUx00SpA=
Subject key identifier:   61:7F:FC:17:E8:88:2F:61:B1:BB:33:FE:72:95:F9:32:D7:38:AB:F4
Certificate issuer:       /CN=EE9E3B8C44E817B12E9E0A3E53713589553FDE47
Certificate serial:       05A2385DABC76F1EB0005EC5C15BF540BC722C46
Authority key identifier: EE:9E:3B:8C:44:E8:17:B1:2E:9E:0A:3E:53:71:35:89:55:3F:DE:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE9E3B8C44E817B12E9E0A3E53713589553FDE47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/1/3133312e3130382e3235332e302f32342d3234203d3e203631363934.roa
Signing time:             Wed 03 Apr 2024 19:19:07 +0000
ROA not before:           Wed 03 Apr 2024 19:14:07 +0000
ROA not after:            Wed 02 Apr 2025 19:19:07 +0000
asID:                     61694
IP address blocks:        131.108.253.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/1/EE9E3B8C44E817B12E9E0A3E53713589553FDE47.crl
                          rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/1/EE9E3B8C44E817B12E9E0A3E53713589553FDE47.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE9E3B8C44E817B12E9E0A3E53713589553FDE47.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:a2:38:5d:ab:c7:6f:1e:b0:00:5e:c5:c1:5b:f5:40:bc:72:2c:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE9E3B8C44E817B12E9E0A3E53713589553FDE47
        Validity
            Not Before: Apr  3 19:14:07 2024 GMT
            Not After : Apr  2 19:19:07 2025 GMT
        Subject: CN=617FFC17E8882F61B1BB33FE7295F932D738ABF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:02:bd:bb:4c:ee:42:c9:63:ff:dc:65:d6:a8:
                    f4:bb:d6:1c:79:f4:c4:ed:da:c5:cf:6e:01:f8:68:
                    52:f2:40:f7:68:60:96:51:f1:4f:e5:75:2e:b8:37:
                    e9:2d:2f:ab:81:bb:a0:20:60:a2:d1:32:21:0e:4d:
                    ea:dc:c2:06:a4:fc:c6:ad:f5:39:de:dd:d3:6b:f5:
                    63:9b:a9:14:cd:88:5a:2f:81:5c:d8:a5:5b:9e:1a:
                    3f:78:b7:ad:54:84:90:f7:a9:2b:51:60:a7:5e:d0:
                    4a:69:7c:5f:39:46:12:b4:f5:f6:09:d9:38:9d:35:
                    28:d0:48:9a:77:98:c0:ef:c4:04:25:29:71:5a:23:
                    5e:3c:03:c1:06:2d:f5:92:1c:06:cf:04:77:e8:a9:
                    89:c6:b0:de:0a:da:78:51:42:18:d5:e7:c2:d4:5f:
                    cf:31:58:1e:2c:b0:75:80:8c:4e:dd:b0:21:b4:e4:
                    d7:51:42:45:12:96:a6:ae:4e:d4:64:12:1e:cb:aa:
                    64:4d:d4:fd:f7:2b:cb:1e:6e:cc:48:bf:a9:fb:c2:
                    82:32:5c:b1:dc:81:ce:6f:61:56:33:7a:e3:4a:e8:
                    fb:65:39:d3:15:ac:2d:d3:84:ba:9f:ef:fa:24:86:
                    5f:25:cc:07:57:ab:00:aa:5f:d1:8b:6c:50:d0:e4:
                    93:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:7F:FC:17:E8:88:2F:61:B1:BB:33:FE:72:95:F9:32:D7:38:AB:F4
            X509v3 Authority Key Identifier:
                keyid:EE:9E:3B:8C:44:E8:17:B1:2E:9E:0A:3E:53:71:35:89:55:3F:DE:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/1/EE9E3B8C44E817B12E9E0A3E53713589553FDE47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE9E3B8C44E817B12E9E0A3E53713589553FDE47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/1/3133312e3130382e3235332e302f32342d3234203d3e203631363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:21:2a:b7:23:ad:92:14:0b:25:f5:5e:7c:57:4a:39:77:3e:
         1f:e1:83:61:e5:ae:9a:5e:f4:56:c1:8a:10:85:fd:81:fe:d8:
         25:1c:40:40:38:a3:51:1f:f2:d7:e4:06:03:e6:63:b1:f9:73:
         7c:e4:9c:1d:f4:ac:c1:1b:ed:3c:d7:19:57:3b:21:c2:c8:62:
         4d:25:0a:fb:c1:93:c9:04:07:19:d3:69:de:b8:a4:15:04:14:
         ef:93:93:9a:42:bc:9c:8b:a6:d0:2b:9e:f6:c8:67:ca:30:6f:
         05:8f:a2:44:58:81:d8:46:6e:a6:29:66:f7:41:9d:d3:c2:90:
         32:79:d7:72:68:57:64:79:30:b4:17:25:17:69:56:d2:0a:b2:
         cf:c0:84:3e:4f:be:20:f4:e6:bf:6c:39:9a:69:ec:4f:9c:97:
         62:0a:07:da:28:c0:b5:53:89:85:24:2a:e1:1b:b5:da:07:ed:
         ae:35:6e:e9:19:e0:99:4a:b2:3b:37:39:af:ee:94:e3:30:0b:
         af:e5:35:2b:4b:b0:8c:28:2c:81:a5:1d:13:90:79:44:09:bf:
         f8:02:9e:3f:45:d6:ce:05:29:a2:a6:79:d9:2a:df:d8:6c:c6:
         d4:ce:3d:8f:34:32:fd:4d:e3:87:50:ae:45:71:c7:77:e0:31:
         3c:7c:d1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 06:40:40 2024 by rpki-client on console-ams.rpki-client.org