Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/1/3133312e3130382e3235352e302f32342d3234203d3e203631363934.roa
File:                     3133312e3130382e3235352e302f32342d3234203d3e203631363934.roa (raw, json)
Hash identifier:          xzp99ffUDqXG4U0KxtUwE/pfiedmqowK1ZAppbfvU+I=
Subject key identifier:   92:98:66:33:81:C4:BB:BD:56:3A:2F:EE:D5:77:BD:E4:72:E4:86:4F
Certificate issuer:       /CN=EE9E3B8C44E817B12E9E0A3E53713589553FDE47
Certificate serial:       6A18A5CAFC7660D76A53A7594119DD17A5150489
Authority key identifier: EE:9E:3B:8C:44:E8:17:B1:2E:9E:0A:3E:53:71:35:89:55:3F:DE:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE9E3B8C44E817B12E9E0A3E53713589553FDE47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/1/3133312e3130382e3235352e302f32342d3234203d3e203631363934.roa
Signing time:             Wed 03 Apr 2024 19:19:08 +0000
ROA not before:           Wed 03 Apr 2024 19:14:08 +0000
ROA not after:            Wed 02 Apr 2025 19:19:08 +0000
asID:                     61694
IP address blocks:        131.108.255.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/1/EE9E3B8C44E817B12E9E0A3E53713589553FDE47.crl
                          rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/1/EE9E3B8C44E817B12E9E0A3E53713589553FDE47.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE9E3B8C44E817B12E9E0A3E53713589553FDE47.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 23:57:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:18:a5:ca:fc:76:60:d7:6a:53:a7:59:41:19:dd:17:a5:15:04:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE9E3B8C44E817B12E9E0A3E53713589553FDE47
        Validity
            Not Before: Apr  3 19:14:08 2024 GMT
            Not After : Apr  2 19:19:08 2025 GMT
        Subject: CN=9298663381C4BBBD563A2FEED577BDE472E4864F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f9:01:16:97:10:6e:e4:8a:e6:00:15:64:c5:
                    76:45:49:71:17:29:a9:43:37:1a:43:19:30:6e:23:
                    fd:93:cd:28:be:12:42:57:b5:38:06:12:ce:f6:5d:
                    eb:34:70:02:b4:6b:3f:d5:17:6a:52:9a:1c:18:3e:
                    3e:1b:c0:8a:70:cc:35:e8:d0:17:a0:a3:86:7b:b7:
                    e0:4c:80:a5:c5:e8:db:fe:e0:ee:f7:53:a2:a9:83:
                    4a:11:47:a5:63:2e:40:a1:c9:fb:35:a2:f1:f5:0a:
                    6a:dd:9d:3d:e8:e2:77:e2:2e:7b:21:26:32:88:1a:
                    58:01:eb:d9:41:46:11:00:05:76:00:53:14:9a:7c:
                    db:ae:86:27:87:0e:d8:13:d9:c5:b5:5f:31:47:57:
                    b9:01:e5:06:97:00:53:79:f0:8b:b6:0b:b4:c2:75:
                    c3:f5:35:42:0b:83:6c:18:bc:39:3c:a7:ea:79:9e:
                    00:a9:60:b2:da:31:c5:0b:0d:0c:45:de:01:53:f9:
                    f5:ab:74:0f:38:d5:71:48:33:04:ac:85:cc:59:1e:
                    c0:28:cd:5f:96:91:5f:8c:8d:f8:6d:70:dd:5e:47:
                    a0:ff:ca:64:66:ff:4d:6c:b1:21:91:2e:2b:5e:3c:
                    1f:9d:fa:21:50:e8:d6:a6:2b:c9:46:1f:e9:19:66:
                    be:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:98:66:33:81:C4:BB:BD:56:3A:2F:EE:D5:77:BD:E4:72:E4:86:4F
            X509v3 Authority Key Identifier:
                keyid:EE:9E:3B:8C:44:E8:17:B1:2E:9E:0A:3E:53:71:35:89:55:3F:DE:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/1/EE9E3B8C44E817B12E9E0A3E53713589553FDE47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE9E3B8C44E817B12E9E0A3E53713589553FDE47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/1/3133312e3130382e3235352e302f32342d3234203d3e203631363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:7e:ef:02:01:0b:c2:39:a8:e6:a4:89:c9:64:b4:d3:f9:f6:
         28:55:7a:7a:b1:1b:18:2b:a1:58:2c:4b:81:aa:e8:75:13:92:
         5c:c2:ca:a1:3a:a6:d3:7b:ce:70:af:1e:46:8e:45:cf:f2:0f:
         c0:23:e8:39:ec:23:ef:43:a3:63:ad:b0:9e:77:8b:12:cb:79:
         30:44:b8:06:8a:72:d2:77:58:d7:6f:7c:8b:ad:52:79:49:d5:
         21:9e:32:b7:f3:1e:8a:4e:79:6f:20:90:75:ae:c6:c3:07:ba:
         38:5a:58:b9:43:cb:33:97:b0:30:a1:54:83:91:ed:ac:f9:5f:
         88:8d:12:a9:66:9d:2a:27:6b:c2:7c:92:13:75:a1:fb:21:e6:
         52:1b:a7:7f:33:d0:24:e5:07:a2:a1:8e:c7:d0:0d:fa:6a:c0:
         9d:2f:8a:94:92:72:f3:b6:2b:03:23:eb:1b:3c:0f:5e:bd:1a:
         d7:29:df:17:0d:f8:1b:5f:3c:de:68:dc:49:8b:91:7b:02:2c:
         b3:43:78:63:0c:8d:c5:e2:f2:84:ca:f8:28:50:99:bd:80:7c:
         4d:dd:ce:59:8b:51:fb:8f:47:ed:88:26:84:4f:de:43:62:36:
         e6:77:c3:ff:a3:97:4e:29:8a:c7:f5:27:88:31:04:b2:5c:89:
         4a:26:0f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:10:59 2024 by rpki-client on console-fra.rpki-client.org