Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/3133382e3131382e3133342e302f32332d3233203d3e20323632363338.roa
File:                     3133382e3131382e3133342e302f32332d3233203d3e20323632363338.roa (raw, json)
Hash identifier:          kcdZbrmbcN843DevT0CnTowzCeP4mpByrM7v0B6Vf0A=
Subject key identifier:   DC:11:A4:9A:AB:B9:37:25:4A:E2:31:34:C4:D4:4E:52:0B:6F:DE:43
Certificate issuer:       /CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
Certificate serial:       30F3236624F3A008479B97746DF4EDBBE6AC35EA
Authority key identifier: E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/3133382e3131382e3133342e302f32332d3233203d3e20323632363338.roa
Signing time:             Thu 04 Apr 2024 01:17:35 +0000
ROA not before:           Thu 04 Apr 2024 01:12:35 +0000
ROA not after:            Thu 03 Apr 2025 01:17:35 +0000
asID:                     262638
IP address blocks:        138.118.134.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl
                          rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:07:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:f3:23:66:24:f3:a0:08:47:9b:97:74:6d:f4:ed:bb:e6:ac:35:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
        Validity
            Not Before: Apr  4 01:12:35 2024 GMT
            Not After : Apr  3 01:17:35 2025 GMT
        Subject: CN=DC11A49AABB937254AE23134C4D44E520B6FDE43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b1:a4:51:50:cd:54:7a:2b:6e:05:4c:e6:02:
                    aa:bd:5d:83:46:ec:d3:63:ad:07:29:76:5c:fc:65:
                    50:bf:10:40:cb:07:29:28:96:81:85:2c:fd:c3:19:
                    68:38:0a:8a:5b:5f:b7:28:37:ae:44:1d:cc:7f:26:
                    43:26:0a:5b:0d:a9:ec:42:ee:ed:ef:1d:8c:68:41:
                    49:ee:8a:90:55:b3:3e:28:c2:19:de:aa:3f:08:3c:
                    c6:0e:63:1e:2a:64:43:38:5b:d9:2e:35:6c:45:4e:
                    fb:cf:17:e1:db:8a:06:06:e8:22:ed:80:c7:cb:10:
                    c4:3f:76:a4:a0:d9:91:aa:42:b2:60:d5:bb:8a:88:
                    e4:2d:ef:6f:46:28:d0:8f:8a:74:6a:61:b5:60:b5:
                    03:57:85:81:3d:3e:92:d3:96:43:90:a3:ae:68:10:
                    eb:25:34:44:44:c9:10:d0:76:a3:f6:4f:13:c7:0e:
                    90:43:ec:20:65:28:8c:fe:82:4d:31:f8:75:3f:55:
                    88:bc:82:d1:c2:c0:38:fb:cd:ea:e9:b0:6c:e5:5a:
                    d1:a1:5e:ad:3b:4a:65:10:7b:35:cf:84:ac:c8:2d:
                    5b:9b:d6:3a:14:a8:85:16:13:7c:7d:f4:69:50:96:
                    d2:5f:dc:b9:da:62:ee:4c:39:b7:12:16:cb:a2:de:
                    3e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:11:A4:9A:AB:B9:37:25:4A:E2:31:34:C4:D4:4E:52:0B:6F:DE:43
            X509v3 Authority Key Identifier:
                keyid:E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/3133382e3131382e3133342e302f32332d3233203d3e20323632363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:d5:1b:fe:8b:df:9a:89:4c:61:da:55:55:2e:78:a5:67:19:
         96:84:05:fb:0d:1e:86:75:ed:99:30:7e:3d:f5:c2:70:82:2e:
         e9:5e:21:95:92:3a:2b:d3:c9:a6:86:97:bb:08:74:7c:2d:c4:
         1c:11:34:2b:fb:fb:b0:a7:70:81:21:6c:a5:65:2a:33:54:a3:
         ea:85:23:74:48:18:e7:b6:85:60:39:0c:40:73:98:d0:2d:1e:
         de:11:6b:f6:ed:af:dd:46:3a:d8:27:cc:8f:59:95:9d:5d:81:
         d5:6a:98:5e:9d:37:70:c7:60:72:7c:3a:f6:f7:ca:00:23:48:
         47:78:cd:35:71:0c:99:93:a8:d1:9e:23:64:5f:81:d0:85:49:
         71:9d:fa:ad:d7:1c:02:7d:01:80:52:7a:ef:52:cd:e6:2c:bf:
         61:7c:c6:b4:b9:26:11:c3:fd:03:0c:94:e6:e4:ee:39:59:a1:
         c0:64:15:ff:32:09:4b:5b:8d:23:b1:ae:d5:d7:d2:6a:48:4a:
         7f:2a:e8:4e:40:a3:9f:92:b6:1c:e7:1e:b9:1a:3a:f1:e7:5c:
         4e:56:d1:16:1e:0f:e8:e9:2b:82:18:89:f4:fa:2c:5a:54:20:
         09:bf:ef:5b:84:56:90:12:0b:cc:ce:01:57:2a:c8:ca:77:0f:
         bc:8b:5c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:07 2024 by rpki-client on console-fra.rpki-client.org