Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/3133312e3139362e3134342e302f32342d3234203d3e20323635393131.roa
File:                     3133312e3139362e3134342e302f32342d3234203d3e20323635393131.roa (raw, json)
Hash identifier:          86WPdSnxGxgPMLWyzSwAwgkzHkzGy3Y7qtFOI3DQJ2Q=
Subject key identifier:   12:56:82:85:3E:67:D2:D5:45:D7:16:29:7A:CC:EB:97:25:98:9A:C5
Certificate issuer:       /CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
Certificate serial:       28B3760F0228060BC059795FD31C6BE78B854DC6
Authority key identifier: E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/3133312e3139362e3134342e302f32342d3234203d3e20323635393131.roa
Signing time:             Thu 04 Apr 2024 01:17:18 +0000
ROA not before:           Thu 04 Apr 2024 01:12:18 +0000
ROA not after:            Thu 03 Apr 2025 01:17:18 +0000
asID:                     265911
IP address blocks:        131.196.144.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl
                          rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:b3:76:0f:02:28:06:0b:c0:59:79:5f:d3:1c:6b:e7:8b:85:4d:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
        Validity
            Not Before: Apr  4 01:12:18 2024 GMT
            Not After : Apr  3 01:17:18 2025 GMT
        Subject: CN=125682853E67D2D545D716297ACCEB9725989AC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4b:72:59:18:2f:66:e6:76:84:66:ee:42:c2:
                    d2:22:b0:4c:f9:46:ba:9b:9e:9a:0e:ea:31:f5:fd:
                    c2:15:70:7c:12:7d:63:f3:45:f4:8b:da:94:cd:b3:
                    e5:a0:c1:80:01:64:0c:5d:aa:b3:9b:f5:bb:d4:24:
                    76:e9:db:9f:eb:7b:f2:43:94:91:c8:6a:07:1c:26:
                    ec:57:f3:53:86:11:4c:91:6d:40:63:83:34:3f:7b:
                    8f:79:88:98:d9:5f:80:24:20:d4:62:19:33:cc:a8:
                    39:ab:12:e6:cd:9e:a4:d7:d7:dc:da:c3:4d:9c:69:
                    c9:0d:cd:a8:9e:44:b8:a4:45:5e:d8:ba:0e:84:bd:
                    16:92:b4:12:4a:8a:32:16:db:00:44:0a:83:f9:af:
                    1f:ad:44:bf:40:b2:6c:f8:f9:3a:02:30:3f:3e:ca:
                    b8:0e:15:8c:c6:4c:9a:9f:de:0f:eb:84:58:4a:8f:
                    4d:b3:c2:3d:9d:d5:12:6a:1e:07:0a:ab:c6:d6:55:
                    20:ba:22:5f:79:3e:68:f2:64:56:b9:8a:2b:37:d5:
                    f6:a7:32:c4:d9:91:f4:4d:68:ed:21:be:02:93:c6:
                    8f:db:5c:76:71:52:18:2a:c0:63:b6:c0:14:16:31:
                    68:28:76:e4:fc:fe:f6:95:5a:1a:e9:19:55:68:3e:
                    f4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:56:82:85:3E:67:D2:D5:45:D7:16:29:7A:CC:EB:97:25:98:9A:C5
            X509v3 Authority Key Identifier:
                keyid:E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/3133312e3139362e3134342e302f32342d3234203d3e20323635393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:be:ae:8a:d2:ab:03:45:c7:67:a8:21:4b:65:c7:db:66:3e:
         a9:a8:ad:d3:e4:e0:7e:7b:20:06:e0:6c:5e:31:96:fe:12:a8:
         f9:8b:81:f7:f4:90:77:55:3b:38:bd:f2:14:b7:16:8e:93:98:
         7d:dc:68:ec:df:78:d5:44:28:32:b2:17:54:87:66:c1:de:52:
         3d:35:8e:9f:c9:0f:94:16:bf:82:2c:ba:b6:8e:18:db:10:97:
         5f:8c:a0:13:f9:9a:b3:87:5e:9f:63:ab:a6:bf:71:34:1e:43:
         93:23:db:c1:4b:86:61:8f:ca:80:95:0b:9b:ca:16:95:3c:1d:
         5c:45:dc:13:5b:90:6d:4c:5c:fe:b0:fa:70:7f:97:ab:70:59:
         28:ce:45:b9:c8:a9:a9:6e:a9:fa:26:72:16:b5:ee:b4:6f:3c:
         88:d7:12:99:9a:2a:ff:7a:b7:18:47:26:f3:fe:07:9f:5b:04:
         9a:01:5d:34:9d:d0:bf:d6:12:db:61:cf:1b:79:2d:eb:36:5f:
         6b:7c:65:2f:cd:6d:dc:ab:14:76:cd:c8:eb:db:e6:f5:4a:ea:
         59:4d:8c:a6:46:67:46:c8:a0:24:34:6f:93:5f:54:69:bf:07:
         be:fd:0e:77:37:1d:d1:44:16:08:b5:c4:b7:b8:18:64:3a:90:
         d2:ca:7a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:20:59 2024 by rpki-client on console-fra.rpki-client.org