Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/1/3230312e3133312e3137342e302f32342d3234203d3e203631383432.roa
File:                     3230312e3133312e3137342e302f32342d3234203d3e203631383432.roa (raw, json)
Hash identifier:          UQZ8g9VcBy0tzOoKJih3nQ0B87/kLz9/YO9CLKRyVKE=
Subject key identifier:   B4:DA:90:01:69:69:9F:FD:7A:43:1F:5E:C6:B3:67:9E:9B:97:C1:E8
Certificate issuer:       /CN=18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE
Certificate serial:       6E925E3E8AF25D9206833FAEF2AC6193059DD06C
Authority key identifier: 18:FB:DB:75:17:89:A3:D1:CC:FA:7F:42:BC:38:F0:A8:CA:BA:F2:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/1/3230312e3133312e3137342e302f32342d3234203d3e203631383432.roa
Signing time:             Wed 03 Apr 2024 18:32:24 +0000
ROA not before:           Wed 03 Apr 2024 18:27:24 +0000
ROA not after:            Wed 02 Apr 2025 18:32:24 +0000
asID:                     61842
IP address blocks:        201.131.174.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.crl
                          rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:92:5e:3e:8a:f2:5d:92:06:83:3f:ae:f2:ac:61:93:05:9d:d0:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE
        Validity
            Not Before: Apr  3 18:27:24 2024 GMT
            Not After : Apr  2 18:32:24 2025 GMT
        Subject: CN=B4DA900169699FFD7A431F5EC6B3679E9B97C1E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4b:17:ad:f0:ab:85:e4:68:f0:e5:6d:62:5f:
                    78:38:1b:33:80:85:d9:55:dc:95:0b:ed:fa:1f:51:
                    de:45:df:ed:56:88:27:53:2c:28:4e:d4:f5:83:7a:
                    ec:be:a5:10:b3:5c:4c:51:96:5e:a8:c5:d7:28:56:
                    92:f1:fd:ea:65:60:1f:fc:47:58:c9:b7:3d:29:7f:
                    10:11:6e:db:83:7b:b3:6f:9e:3d:de:f2:3d:03:88:
                    52:af:03:e1:78:f8:11:4c:b7:2e:20:94:0c:18:f7:
                    26:94:d8:d1:68:5c:3a:00:35:4a:67:61:a2:e9:b6:
                    21:7a:60:76:ab:08:2c:1f:9f:1c:9f:46:58:39:7e:
                    ca:1b:2a:bb:53:56:aa:33:5f:7f:16:60:5c:ee:2a:
                    3e:41:7f:87:83:c3:52:a2:49:be:63:fa:4e:7c:25:
                    aa:e0:04:e7:7b:be:e6:25:79:bf:39:aa:53:04:f0:
                    c3:51:2b:11:7d:3c:48:d8:19:27:6f:e5:f6:66:87:
                    61:31:4a:9b:84:40:11:16:c7:9b:cc:ca:9a:ad:6d:
                    84:6a:50:c3:23:a7:a2:86:6b:dd:1b:6f:2a:48:3f:
                    d5:0f:22:4e:7d:05:6d:87:26:7c:d0:81:e6:72:03:
                    48:ac:ba:8b:e4:e5:37:0a:43:bf:de:c2:1c:aa:5c:
                    07:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:DA:90:01:69:69:9F:FD:7A:43:1F:5E:C6:B3:67:9E:9B:97:C1:E8
            X509v3 Authority Key Identifier:
                keyid:18:FB:DB:75:17:89:A3:D1:CC:FA:7F:42:BC:38:F0:A8:CA:BA:F2:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/1/3230312e3133312e3137342e302f32342d3234203d3e203631383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:fb:19:c3:17:b7:3e:e0:b0:4d:e5:8f:8a:60:04:f9:89:eb:
         ee:ec:13:89:6a:3f:3d:f5:da:bb:2a:f7:09:a5:27:51:d7:b7:
         1a:c9:4f:0d:a4:67:5b:cb:82:ce:9b:38:38:6a:9a:63:ee:53:
         94:48:e7:a2:bb:44:04:34:a5:74:b2:6f:1e:bf:5f:3d:a4:8c:
         05:25:06:8e:77:87:67:50:cb:43:17:9d:bf:0b:8c:a6:48:60:
         dd:ac:54:3d:03:22:da:76:6d:89:92:2a:9f:7d:39:7b:f6:0b:
         8c:bb:77:09:87:a6:62:3b:06:31:c1:45:7c:d0:19:14:7d:7e:
         9e:9d:ca:69:00:cf:9f:77:be:aa:11:3a:54:d8:fd:0c:7f:bc:
         cf:99:57:53:e1:24:02:ec:c7:98:31:c9:a8:7d:d5:36:3c:92:
         e0:81:a1:9f:ca:97:4e:89:b8:58:e3:e4:bc:8b:cf:dd:59:a3:
         f5:11:a3:d9:f8:36:34:8d:89:e2:c8:48:29:2f:75:1f:4a:4e:
         d8:ff:d0:a8:7f:5f:57:f2:40:6c:dd:98:bc:2e:15:bb:dc:93:
         83:99:14:82:53:da:30:a5:12:5f:bd:35:e2:1c:87:4e:52:c0:
         bd:04:75:e3:88:65:86:5b:c0:4a:aa:33:4c:40:ec:63:47:ea:
         5c:a7:b4:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 10:44:12 2024 by rpki-client on console-ams.rpki-client.org