Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/3133312e3139362e3134372e302f32342d3234203d3e20323635393131.roa
File:                     3133312e3139362e3134372e302f32342d3234203d3e20323635393131.roa (raw, json)
Hash identifier:          5f8DnzNpe9vlI0Tg7OMdhfLXYSpyWYzZs/r5FOH17Rs=
Subject key identifier:   05:B5:44:46:00:60:4E:75:74:D4:38:24:9E:7C:3D:49:D3:B8:77:61
Certificate issuer:       /CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
Certificate serial:       6D1168BA25986638A65ED17FDB952BE0D2F345AC
Authority key identifier: E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/3133312e3139362e3134372e302f32342d3234203d3e20323635393131.roa
Signing time:             Thu 04 Apr 2024 01:17:31 +0000
ROA not before:           Thu 04 Apr 2024 01:12:31 +0000
ROA not after:            Thu 03 Apr 2025 01:17:31 +0000
asID:                     265911
IP address blocks:        131.196.147.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl
                          rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:11:68:ba:25:98:66:38:a6:5e:d1:7f:db:95:2b:e0:d2:f3:45:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
        Validity
            Not Before: Apr  4 01:12:31 2024 GMT
            Not After : Apr  3 01:17:31 2025 GMT
        Subject: CN=05B5444600604E7574D438249E7C3D49D3B87761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5d:85:55:a5:3c:30:13:f9:6a:9a:34:0a:a2:
                    f2:e6:92:3e:44:ea:52:b4:8d:a7:99:34:e3:30:41:
                    ab:d2:ac:e0:ca:ec:e4:0c:26:3b:ae:ce:00:cb:58:
                    eb:9f:71:9d:35:56:9a:24:38:c0:8f:bb:69:ad:b9:
                    83:e8:1a:d9:86:67:07:82:25:6c:15:c1:10:1d:6c:
                    e6:04:c0:76:ff:cd:58:80:ff:52:6a:b0:f7:cf:d0:
                    d1:3c:93:86:3b:f3:33:57:27:a9:e6:10:77:30:2e:
                    cc:02:a1:01:a3:81:a9:30:a5:61:0d:44:85:43:9c:
                    a0:d2:bf:b6:dd:53:fe:c3:fb:b5:b0:3e:c0:c9:f6:
                    72:99:b6:75:b0:55:98:a6:cd:ca:f6:94:56:c6:ca:
                    d3:64:df:a8:dc:ec:43:47:6c:82:e0:a3:ef:c5:60:
                    34:0a:c3:4f:3f:b2:74:13:ba:d6:fb:30:61:d7:d7:
                    02:09:3f:6c:c9:d9:6e:56:fc:a8:8b:2b:48:b5:1d:
                    c2:0b:36:fe:f2:68:ae:89:ac:53:ce:5c:b0:2b:af:
                    32:d5:ab:7f:28:08:2c:65:19:38:17:5a:84:88:95:
                    1e:2a:ba:c1:3f:99:07:6c:c3:7e:94:74:25:e3:2d:
                    6a:d2:12:df:5e:1f:f1:10:b3:53:80:e7:bd:12:fb:
                    a9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:B5:44:46:00:60:4E:75:74:D4:38:24:9E:7C:3D:49:D3:B8:77:61
            X509v3 Authority Key Identifier:
                keyid:E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/3133312e3139362e3134372e302f32342d3234203d3e20323635393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:d5:23:9b:58:04:85:79:a3:7b:8a:b4:c4:30:c8:cb:19:b2:
         0e:d2:6d:c9:90:85:30:d2:f6:0e:a7:74:8f:90:68:03:06:16:
         49:a9:ce:61:7d:8b:a6:74:b8:6e:ab:17:87:fd:69:3c:8e:04:
         11:de:b3:fc:7c:d2:71:ad:41:9d:d1:5f:ee:8a:71:9f:e0:03:
         2e:e9:dd:85:69:33:a4:62:ef:22:e1:37:fc:35:b3:24:90:3d:
         8a:72:7f:6d:75:5e:ee:27:91:49:52:1b:1a:13:20:6f:eb:9a:
         6d:cf:a6:ff:7c:df:3e:b5:85:0a:c9:41:de:28:25:32:10:68:
         0f:08:99:76:6b:e6:15:a4:9b:4e:4a:67:e6:97:86:39:d8:a4:
         20:ff:ce:17:4f:63:82:9f:96:cc:ad:40:86:bf:1a:10:db:59:
         a6:de:c8:5f:75:87:19:35:ee:bd:da:17:32:5f:27:16:11:7d:
         83:15:e7:f7:af:05:a4:6f:4e:d3:98:81:23:5f:ed:94:34:94:
         e2:a7:56:74:c6:a9:92:fb:51:42:88:76:39:61:2e:df:82:ce:
         d9:a3:75:54:69:38:a9:b4:82:82:da:65:ba:5a:45:18:1c:ba:
         b3:73:86:2f:9a:73:bc:6a:36:36:42:bc:5d:e8:c0:60:ea:15:
         5b:25:0e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:20:59 2024 by rpki-client on console-fra.rpki-client.org