Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/3133312e3139362e3134362e302f32332d3233203d3e20323635393131.roa
File:                     3133312e3139362e3134362e302f32332d3233203d3e20323635393131.roa (raw, json)
Hash identifier:          mdvUgCytIwH4ZxFM34egWk19cPmedgHj/7vSQDWy1M4=
Subject key identifier:   B6:75:49:7A:B2:51:46:85:A9:89:48:CF:19:D8:0B:33:7B:14:61:27
Certificate issuer:       /CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
Certificate serial:       4913362BC88B136A0C94652DE9AC381ABDEE9637
Authority key identifier: E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/3133312e3139362e3134362e302f32332d3233203d3e20323635393131.roa
Signing time:             Thu 04 Apr 2024 01:17:20 +0000
ROA not before:           Thu 04 Apr 2024 01:12:20 +0000
ROA not after:            Thu 03 Apr 2025 01:17:20 +0000
asID:                     265911
IP address blocks:        131.196.146.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl
                          rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:13:36:2b:c8:8b:13:6a:0c:94:65:2d:e9:ac:38:1a:bd:ee:96:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
        Validity
            Not Before: Apr  4 01:12:20 2024 GMT
            Not After : Apr  3 01:17:20 2025 GMT
        Subject: CN=B675497AB2514685A98948CF19D80B337B146127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c3:fd:1a:a9:97:bf:6a:bf:f2:8d:4a:80:f2:
                    67:f8:99:5c:ac:19:2a:e2:ad:dc:84:25:58:45:79:
                    b5:13:1d:85:a2:31:4f:f7:1e:0a:67:5f:4d:64:63:
                    64:72:bf:69:d4:70:8e:e4:51:54:c8:13:17:de:b7:
                    84:05:04:fe:bc:29:22:82:7b:36:24:b6:c0:de:5d:
                    47:de:66:1e:06:80:99:b7:fa:ca:3f:35:e5:eb:4b:
                    91:c7:1c:f1:6d:13:74:9c:8c:73:13:26:77:89:ef:
                    8f:46:c2:5e:79:d2:c2:6f:5c:ad:f5:3e:62:68:2c:
                    24:99:f5:ed:29:fc:4e:0f:44:be:3e:49:a4:a4:44:
                    7b:9b:ab:4f:da:12:dc:b3:62:54:9f:2c:9a:ed:43:
                    3b:5c:3e:63:7d:06:46:7f:d2:75:e8:c0:b1:93:46:
                    9d:2d:cf:67:4e:b3:f8:a9:60:b8:8b:ec:72:57:cb:
                    17:0f:f5:e7:dc:95:6c:2d:74:0c:fe:f0:e4:73:42:
                    77:01:cf:c9:92:1a:28:c0:63:c2:d7:90:53:bf:aa:
                    d7:d3:ae:8b:75:30:df:28:94:0c:3f:a1:9e:f3:25:
                    74:85:7c:ac:82:0c:4b:32:e5:78:30:e2:61:2d:8a:
                    37:92:f4:e9:66:c9:83:7a:31:2d:5f:5e:93:6f:62:
                    db:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:75:49:7A:B2:51:46:85:A9:89:48:CF:19:D8:0B:33:7B:14:61:27
            X509v3 Authority Key Identifier:
                keyid:E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/3133312e3139362e3134362e302f32332d3233203d3e20323635393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:55:6a:8b:c2:4c:9a:26:3b:1d:b4:88:25:4d:61:87:20:e3:
         e6:fb:3d:16:34:4a:19:1d:d3:36:15:40:70:f4:02:5f:ef:3b:
         ff:f6:3c:26:34:57:2a:9b:35:42:08:a1:12:81:3a:fd:0c:33:
         0c:cf:99:47:66:d6:c1:42:c5:e9:b6:99:54:4f:ef:18:fe:22:
         36:f8:ee:65:08:a3:63:fe:c8:95:65:d8:ab:72:21:f8:70:9e:
         93:93:5d:5a:63:82:20:b6:09:70:d4:85:32:a5:3e:c5:9f:3c:
         dc:82:b9:85:72:89:ef:84:50:9f:19:e4:83:62:21:54:fd:b7:
         e5:09:81:c3:dc:16:f1:2f:29:48:7a:a0:81:a1:21:ac:f5:d9:
         0a:25:64:1a:ba:ee:8c:99:74:50:20:ea:14:58:56:2b:f9:7d:
         4f:ef:0f:00:e4:32:8c:1e:83:0e:af:d6:f4:87:2a:5b:17:f4:
         3e:c5:03:a3:36:8f:77:94:2d:10:bc:b8:49:3d:fd:2b:ad:f3:
         88:a6:51:23:7b:dc:11:80:4d:e6:98:6a:67:e2:5e:f7:b0:df:
         38:5f:6c:31:9c:b2:f6:96:c6:e3:f6:ca:19:75:dd:7d:ee:83:
         9b:1b:b1:3b:43:c9:3d:7a:cd:ac:f8:37:dc:c6:04:50:4d:72:
         b0:be:6a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:20:59 2024 by rpki-client on console-fra.rpki-client.org