Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/3138362e3235302e3139322e302f32332d3234203d3e20323635393131.roa
File:                     3138362e3235302e3139322e302f32332d3234203d3e20323635393131.roa (raw, json)
Hash identifier:          KDeMNrm2uFM7RpjWQ6Eyba4I0yji9OVVZp4odER7zR4=
Subject key identifier:   81:9D:BB:F4:B4:70:00:4F:5D:CE:C7:C1:89:EA:1D:8A:F1:E4:0D:FC
Certificate issuer:       /CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
Certificate serial:       452C38E3C0FED58B256CBEBAB26F234722281E1C
Authority key identifier: E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/3138362e3235302e3139322e302f32332d3234203d3e20323635393131.roa
Signing time:             Thu 04 Apr 2024 01:17:14 +0000
ROA not before:           Thu 04 Apr 2024 01:12:14 +0000
ROA not after:            Thu 03 Apr 2025 01:17:14 +0000
asID:                     265911
IP address blocks:        186.250.192.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl
                          rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:2c:38:e3:c0:fe:d5:8b:25:6c:be:ba:b2:6f:23:47:22:28:1e:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
        Validity
            Not Before: Apr  4 01:12:14 2024 GMT
            Not After : Apr  3 01:17:14 2025 GMT
        Subject: CN=819DBBF4B470004F5DCEC7C189EA1D8AF1E40DFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ce:8b:1d:40:af:e2:77:f5:6b:a8:02:be:8d:
                    d1:83:8e:32:0f:0d:f7:6d:a3:49:85:31:6e:32:c4:
                    bc:5d:2b:73:31:3a:e0:1f:ea:5e:3f:a5:7f:63:18:
                    bb:0c:63:f7:d6:67:6c:c2:73:1e:41:8f:fc:61:dd:
                    95:f3:91:b6:1b:6b:8c:cd:75:f6:58:64:68:ab:15:
                    bd:e6:da:7b:3f:f5:d7:97:cd:42:ae:a9:67:21:d5:
                    b7:88:99:68:24:7a:2c:a6:23:94:8e:a1:71:03:c7:
                    61:c3:e7:3e:ea:e6:42:c8:2a:ef:a3:2d:54:b9:89:
                    d1:08:bc:10:15:51:89:55:92:b0:05:02:a6:95:71:
                    bf:cb:1a:8a:4c:0d:67:03:ef:f5:7c:b2:fb:38:72:
                    4a:9a:f8:8e:c3:b1:e3:ab:06:ac:9a:ed:aa:b3:36:
                    17:dc:cc:f6:fb:3a:c3:ec:f6:e5:17:cc:c9:e2:09:
                    2d:16:ba:ab:75:5f:9f:04:f4:3e:68:b3:88:9d:f9:
                    d7:22:ee:51:f0:df:51:13:aa:36:20:c1:0f:cd:55:
                    ce:56:8f:02:4e:5d:2c:35:69:32:ec:17:e5:4b:02:
                    6c:88:6f:54:29:d2:ca:93:7a:cf:36:fa:b2:6f:d0:
                    7a:9f:06:75:df:e6:76:1b:04:07:a8:53:36:a9:07:
                    cc:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:9D:BB:F4:B4:70:00:4F:5D:CE:C7:C1:89:EA:1D:8A:F1:E4:0D:FC
            X509v3 Authority Key Identifier:
                keyid:E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/3138362e3235302e3139322e302f32332d3234203d3e20323635393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:3a:e6:bc:ba:cc:ed:5d:9b:17:f4:21:92:f4:5f:26:de:7c:
         2d:ab:a7:e6:97:8e:46:d1:a8:93:c9:2e:19:35:6d:d5:e0:9c:
         27:70:2d:9b:6f:ab:18:c0:b3:eb:4d:61:f5:8f:2e:b3:f2:cb:
         d6:18:83:80:07:6e:bc:c8:d5:c3:83:52:73:b9:23:76:83:f0:
         62:6a:08:86:26:18:28:38:30:b3:5a:34:49:eb:42:09:8c:da:
         df:33:f9:f1:64:e1:d8:d2:78:8e:7f:1f:1e:b4:e4:2e:e7:fc:
         13:52:7c:a6:d9:ff:de:bd:fb:9e:e5:b6:60:a0:de:78:cd:08:
         fd:3a:f9:7a:26:5b:dc:64:e8:b7:db:75:0f:ba:c4:11:ce:17:
         7b:0a:2c:b2:89:d2:fd:e6:26:f3:52:7f:77:75:e5:ca:b1:fc:
         2b:e9:7e:81:7b:e7:88:ca:37:e0:25:4f:fe:89:f8:28:b1:3e:
         65:45:0b:52:aa:9c:c1:a6:a1:cf:58:ba:70:1a:3f:db:b5:27:
         8a:e5:06:7a:08:84:5a:e9:55:cc:6f:a9:ba:d2:55:c2:cd:3f:
         3d:35:3c:d2:58:c5:e4:3e:90:dc:59:0e:ed:3e:f3:30:7a:44:
         f4:cd:72:5b:db:93:9a:0e:23:ab:55:35:ec:68:ae:88:c2:ed:
         e2:56:c8:ac
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIURSw448D+1YslbL66sm8jRyIoHhwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTYxMTVDNEIwRERGMzU2NkQ4N0YzNzgzREQ4NzMwNDk3
RTNDQ0UwNTAeFw0yNDA0MDQwMTEyMTRaFw0yNTA0MDMwMTE3MTRaMDMxMTAvBgNV
BAMTKDgxOURCQkY0QjQ3MDAwNEY1RENFQzdDMTg5RUExRDhBRjFFNDBERkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCczosdQK/id/VrqAK+jdGDjjIP
Dfdto0mFMW4yxLxdK3MxOuAf6l4/pX9jGLsMY/fWZ2zCcx5Bj/xh3ZXzkbYba4zN
dfZYZGirFb3m2ns/9deXzUKuqWch1beImWgkeiymI5SOoXEDx2HD5z7q5kLIKu+j
LVS5idEIvBAVUYlVkrAFAqaVcb/LGopMDWcD7/V8svs4ckqa+I7DseOrBqya7aqz
NhfczPb7OsPs9uUXzMniCS0Wuqt1X58E9D5os4id+dci7lHw31ETqjYgwQ/NVc5W
jwJOXSw1aTLsF+VLAmyIb1Qp0sqTes82+rJv0HqfBnXf5nYbBAeoUzapB8wFAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUgZ279LRwAE9dzsfBieodivHkDfwwHwYDVR0j
BBgwFoAU5hFcSw3fNWbYfzeD3YcwSX48zgUwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby91ZGNwd1BlTEN5eVpIWDJEUGlvbWtrdkM2dlRzUFhTS3FndWRNRGhKVWlh
LzEvRTYxMTVDNEIwRERGMzU2NkQ4N0YzNzgzREQ4NzMwNDk3RTNDQ0UwNS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FNjExNUM0QjBEREYzNTY2RDg3
RjM3ODNERDg3MzA0OTdFM0NDRTA1LmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby91
ZGNwd1BlTEN5eVpIWDJEUGlvbWtrdkM2dlRzUFhTS3FndWRNRGhKVWlhLzEvMzEz
ODM2MmUzMjM1MzAyZTMxMzkzMjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMyMzYz
NTM5MzEzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAbr6wDANBgkqhkiG9w0BAQsFAAOCAQEAeDrmvLrM
7V2bF/QhkvRfJt58Laun5peORtGok8kuGTVt1eCcJ3Atm2+rGMCz601h9Y8us/LL
1hiDgAduvMjVw4NSc7kjdoPwYmoIhiYYKDgws1o0SetCCYza3zP58WTh2NJ4jn8f
HrTkLuf8E1J8ptn/3r37nuW2YKDeeM0I/Tr5eiZb3GTot9t1D7rEEc4XewossonS
/eYm81J/d3XlyrH8K+l+gXvniMo34CVP/on4KLE+ZUULUqqcwaahz1i6cBo/27Un
iuUGegiEWulVzG+putJVws0/PTU80ljF5D6Q3FkO7T7zMHpE9M1yW9uTmg4jq1U1
7GiuiMLt4lbIrA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:12:24 2024 by rpki-client on console-ams.rpki-client.org