Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3133312e3130302e3134382e302f32332d3233203d3e20323733363833.roa
File:                     3133312e3130302e3134382e302f32332d3233203d3e20323733363833.roa (raw, json)
Hash identifier:          p1iaZkOXBvwwmEhwI+msd9EehvSu9LGMtsr/el+Zdw8=
Subject key identifier:   65:1D:E2:1F:A1:4F:9E:0D:9D:A5:21:82:90:67:24:C3:1B:75:D2:5B
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       4945A256E4291B319954E3650AB009A354B46EF8
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3133312e3130302e3134382e302f32332d3233203d3e20323733363833.roa
Signing time:             Tue 19 Nov 2024 07:33:44 +0000
ROA not before:           Tue 19 Nov 2024 07:28:44 +0000
ROA not after:            Tue 18 Nov 2025 07:33:44 +0000
asID:                     273683
IP address blocks:        131.100.148.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:45:a2:56:e4:29:1b:31:99:54:e3:65:0a:b0:09:a3:54:b4:6e:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Nov 19 07:28:44 2024 GMT
            Not After : Nov 18 07:33:44 2025 GMT
        Subject: CN=651DE21FA14F9E0D9DA52182906724C31B75D25B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8c:61:fa:c8:64:e1:ef:81:d7:c5:7c:3d:0f:
                    9d:a5:14:62:bf:a2:f3:26:f1:57:73:70:ff:e8:07:
                    09:31:5c:dc:d3:39:92:3b:37:f7:c2:19:bd:ff:ce:
                    06:9a:2a:5c:df:f9:e8:09:62:b8:09:50:bb:43:5b:
                    8e:3a:35:74:1a:01:37:55:54:bd:9b:9d:27:1a:ed:
                    29:d6:23:57:2d:41:03:ae:4a:b3:e4:9a:f9:17:3f:
                    06:a8:6e:43:b9:f6:cb:ba:53:a1:28:27:02:b4:aa:
                    33:35:0b:21:00:ce:2d:c8:ea:70:5e:8b:f8:47:4b:
                    fb:1a:3b:dc:09:c9:01:bd:dc:d8:4f:84:5f:e4:7e:
                    51:97:30:c3:0e:11:cd:3e:31:e5:0e:a0:23:bf:29:
                    b2:c5:01:ce:2f:05:7a:3a:31:a4:13:cc:0b:53:9e:
                    0f:10:e0:85:86:68:da:d1:29:60:d1:ff:75:77:20:
                    78:08:c5:44:96:49:2f:10:73:e4:af:2e:9e:e4:fe:
                    da:b3:85:79:11:81:51:a1:ff:77:69:2c:33:4e:03:
                    bd:a2:0c:e0:5e:5d:af:d4:3a:f6:ae:54:d3:f7:e2:
                    a0:c9:4f:ce:d1:90:f6:14:4e:37:15:48:ae:90:dd:
                    21:44:9d:16:9e:26:48:3a:1f:de:df:b9:0a:1e:fc:
                    1e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:1D:E2:1F:A1:4F:9E:0D:9D:A5:21:82:90:67:24:C3:1B:75:D2:5B
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3133312e3130302e3134382e302f32332d3233203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:c8:64:42:fe:33:39:2b:70:35:ea:96:c1:e7:40:81:86:ad:
         45:37:38:d4:ec:fa:e3:10:14:68:56:dd:86:f8:01:df:b5:30:
         a4:8b:8f:43:97:b8:e4:9f:eb:67:eb:21:a4:a9:a8:3c:17:32:
         80:5a:c4:5a:51:85:13:e9:57:7d:da:04:2e:e7:85:ec:12:ab:
         38:fa:2c:e2:c3:9d:ac:69:ae:67:b7:2c:e4:2c:81:64:61:7b:
         fc:f3:56:18:7a:d2:c2:d9:28:ae:a5:e3:3f:e8:6f:ce:40:b8:
         88:d1:2f:df:9e:66:84:fd:06:93:db:9b:b8:19:47:d5:cb:05:
         be:02:17:0d:78:45:06:10:9c:6c:6c:ce:c6:81:b5:20:e6:5a:
         e2:e7:e1:e0:69:9b:b4:52:a8:5b:c3:37:23:38:f5:d5:c9:8f:
         f8:19:80:8e:41:12:f2:fa:ea:84:94:b3:61:9d:18:54:7b:89:
         d7:55:41:80:bb:47:d0:2f:fc:41:5b:c2:70:e8:20:03:f6:1d:
         64:72:45:9a:45:a1:ad:91:56:99:c8:9d:da:0a:87:17:b7:c8:
         8a:58:c6:ff:31:25:95:24:8a:e3:fd:e9:74:e4:04:26:e5:85:
         9b:02:9e:7c:0e:d7:d5:52:15:65:db:a5:88:58:47:4e:dd:63:
         26:fe:5a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:51 2024 by rpki-client on console-ams.rpki-client.org