Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/3138362e3235302e3139322e302f32332d3234203d3e20323635393131.roa
File:                     3138362e3235302e3139322e302f32332d3234203d3e20323635393131.roa (raw, json)
Hash identifier:          vsdzo9CwvM2T3kpbuLwjVstyqC+m5vOO2O/ZmYr3orQ=
Subject key identifier:   44:5D:A2:C9:D1:A8:20:3A:54:83:5B:DB:46:54:3F:9E:4D:A4:75:8A
Certificate issuer:       /CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
Certificate serial:       6FC4BDDF79869989EE16137842FB75CF13BBFEB0
Authority key identifier: E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/3138362e3235302e3139322e302f32332d3234203d3e20323635393131.roa
Signing time:             Thu 06 Mar 2025 01:43:39 +0000
ROA not before:           Thu 06 Mar 2025 01:38:39 +0000
ROA not after:            Thu 05 Mar 2026 01:43:39 +0000
asID:                     265911
IP address blocks:        186.250.192.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl
                          rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 24 Apr 2025 00:17:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:c4:bd:df:79:86:99:89:ee:16:13:78:42:fb:75:cf:13:bb:fe:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
        Validity
            Not Before: Mar  6 01:38:39 2025 GMT
            Not After : Mar  5 01:43:39 2026 GMT
        Subject: CN=445DA2C9D1A8203A54835BDB46543F9E4DA4758A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6a:af:c8:d4:6c:6e:b5:ef:91:7a:f9:fc:f2:
                    7a:f6:ba:b7:8d:fe:c9:e9:fa:a0:11:7e:cc:bf:05:
                    57:7f:d0:72:f0:cc:8d:a0:63:78:42:d5:ae:41:e9:
                    77:af:4d:42:f2:b3:9e:37:fd:a5:35:60:24:3f:b9:
                    36:0f:8a:fa:7e:8e:cd:07:77:2a:d5:fc:bc:7b:88:
                    df:08:e5:d8:40:9b:3b:1f:be:0b:97:07:fa:e7:b0:
                    74:ed:62:b0:04:04:8d:33:d2:bc:6f:0c:50:24:72:
                    ed:81:38:96:68:91:8e:39:2e:bb:29:cf:02:fd:e2:
                    b4:dc:fb:2b:ca:22:e2:31:2f:20:37:24:2e:f4:e8:
                    d5:fd:c7:4b:ea:f8:79:a5:38:5c:26:2f:e1:73:b1:
                    92:4d:06:42:3c:2b:e8:50:2d:f0:a1:c9:b1:f2:d0:
                    8f:6a:c6:62:e2:83:1f:b6:23:35:39:59:0c:57:49:
                    bf:fb:63:7c:ef:fd:e9:2a:20:d9:c7:c3:8c:9e:4b:
                    f7:51:48:d1:aa:96:4d:be:e3:b7:a5:44:dd:0a:18:
                    fc:69:38:8b:b4:7a:d2:f7:24:fb:30:6d:ce:ce:e7:
                    f6:fb:66:15:13:16:d4:ab:c9:5d:1e:d0:93:3f:eb:
                    81:08:72:9f:fe:91:02:72:c4:8f:8c:5d:e1:65:6d:
                    a3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:5D:A2:C9:D1:A8:20:3A:54:83:5B:DB:46:54:3F:9E:4D:A4:75:8A
            X509v3 Authority Key Identifier:
                keyid:E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/3138362e3235302e3139322e302f32332d3234203d3e20323635393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:d7:18:d0:62:8f:c5:5b:5f:01:16:0a:08:99:59:5b:0d:b6:
         b2:08:e2:e6:85:a8:a6:8f:d2:e0:e4:9b:ed:05:5e:7f:12:f0:
         39:ef:9e:b2:33:1c:42:49:57:a7:49:6d:91:83:3b:8d:20:3b:
         e7:6f:49:88:96:13:37:cc:d8:dc:d2:18:cf:3e:b6:83:da:9e:
         54:5a:9c:10:3c:85:96:81:07:67:74:4b:6b:01:67:3e:61:7e:
         7f:69:c4:96:16:3c:99:9b:a5:2a:06:b0:cb:b8:16:af:e0:77:
         64:22:fc:3e:9e:c2:62:c1:01:f9:8e:a6:b6:06:2b:89:5d:55:
         ab:84:10:e4:09:aa:69:a8:62:0a:36:b5:48:f2:39:55:31:f1:
         d3:ee:8d:fb:cb:5d:b4:8b:b1:d7:dc:91:22:c6:7f:27:4b:fa:
         35:25:8e:c3:3f:7f:0f:f1:fe:25:54:86:2d:73:55:a2:2c:5c:
         db:48:9f:66:2e:87:16:c6:32:94:7d:76:ab:8d:2e:7d:8b:ea:
         46:5b:2f:20:28:66:53:fc:af:3d:02:ff:dd:fb:19:0d:59:ba:
         5c:7d:51:0c:05:d5:66:9c:b8:5a:42:53:ae:38:31:32:01:cf:
         ec:bb:8b:0d:99:ef:f7:63:bb:f7:03:4d:a1:43:5b:d6:50:37:
         20:f7:cd:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 07:26:35 2025 by rpki-client