Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/3138362e3235302e3230342e302f32332d3233203d3e20323635393131.roa
File:                     3138362e3235302e3230342e302f32332d3233203d3e20323635393131.roa (raw, json)
Hash identifier:          SaRdzr2reASz0aewT5lRZHkWbEC+RZHiwNitz6h68aY=
Subject key identifier:   E8:3C:28:35:7A:FE:35:B0:2F:85:DB:14:0F:19:BC:3A:4A:69:94:02
Certificate issuer:       /CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
Certificate serial:       2BEF8BEFBEC85AD1BFF5EDBA4EE9059F7C1DDEAE
Authority key identifier: E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/3138362e3235302e3230342e302f32332d3233203d3e20323635393131.roa
Signing time:             Tue 21 May 2024 19:47:17 +0000
ROA not before:           Tue 21 May 2024 19:42:17 +0000
ROA not after:            Tue 20 May 2025 19:47:17 +0000
asID:                     265911
IP address blocks:        186.250.204.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl
                          rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:ef:8b:ef:be:c8:5a:d1:bf:f5:ed:ba:4e:e9:05:9f:7c:1d:de:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
        Validity
            Not Before: May 21 19:42:17 2024 GMT
            Not After : May 20 19:47:17 2025 GMT
        Subject: CN=E83C28357AFE35B02F85DB140F19BC3A4A699402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c4:25:f2:5d:21:0f:2f:51:fe:cb:81:38:f5:
                    4e:04:86:7e:98:24:c4:75:83:b6:7c:a8:5c:aa:42:
                    26:f7:12:80:c9:50:e3:21:b4:a7:71:bb:15:cb:d2:
                    01:15:d3:89:03:84:11:77:dd:68:94:14:35:b4:ff:
                    14:3b:ee:d5:91:98:9f:4f:bd:2b:47:90:8f:3b:58:
                    42:ab:91:12:d8:92:1f:12:94:94:bd:a1:25:68:3c:
                    5a:3a:09:48:42:aa:fc:c6:ce:07:c2:c2:ea:e3:6e:
                    29:89:eb:97:b1:9f:57:3e:72:2c:b6:f9:fc:1f:a0:
                    71:3d:92:58:07:1a:ef:a1:b1:30:cd:2b:60:06:a2:
                    54:eb:c9:86:c7:35:24:e3:56:78:8e:c1:5a:a2:13:
                    8e:e3:1a:c7:bd:70:80:e2:1c:8e:4c:42:fd:91:3e:
                    7d:7e:84:9c:c3:15:81:47:61:9c:e6:e4:60:72:02:
                    15:7b:39:42:ca:6f:75:f6:fc:dd:69:79:2c:71:33:
                    63:4a:29:31:00:f3:db:df:c6:91:9b:1b:c0:05:38:
                    10:7b:2a:bb:b0:03:d1:c4:74:25:2f:f1:f4:44:85:
                    7d:15:8b:a3:b7:fc:86:b0:d1:54:c8:e4:1e:60:1e:
                    25:72:ec:c9:98:87:b4:f5:43:20:c2:04:52:60:66:
                    5b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:3C:28:35:7A:FE:35:B0:2F:85:DB:14:0F:19:BC:3A:4A:69:94:02
            X509v3 Authority Key Identifier:
                keyid:E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/3138362e3235302e3230342e302f32332d3233203d3e20323635393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:04:ec:bd:9e:d6:46:9f:c6:39:b4:60:ea:50:15:43:3d:ae:
         d9:b3:cc:26:fb:85:17:d5:ce:9b:62:ee:e7:a2:37:57:98:39:
         2a:70:e1:50:fd:56:d0:73:0c:a2:e6:ca:37:fb:17:2e:ea:50:
         6b:08:e8:1c:96:14:f1:6a:50:04:ab:c9:a9:11:ec:2e:1e:b7:
         fb:a0:fc:51:aa:33:d1:c8:0d:f0:5e:16:3d:fd:b8:55:13:e6:
         d2:57:a9:99:fe:ac:82:b1:c9:06:2a:54:95:0c:a5:bb:0d:c3:
         1a:4f:19:aa:af:11:84:13:59:e3:06:33:7c:e0:17:30:13:61:
         b5:28:bd:2d:90:32:33:8d:ac:fd:48:94:3d:c1:e2:87:3d:81:
         98:9e:18:23:5f:bf:f1:38:46:f6:e9:9f:ef:50:97:cc:94:5c:
         63:01:fb:bd:85:0d:c1:8d:a6:38:59:c8:d2:84:bd:5a:84:fa:
         6a:93:9c:f5:82:e5:81:02:66:3d:ef:79:5e:d4:1d:30:71:e2:
         09:78:1e:9a:75:b9:9f:88:f4:98:7a:3f:11:03:16:b6:cc:ad:
         de:08:b8:58:ab:11:0b:0d:bf:38:b1:cc:9c:2c:1b:94:c9:26:
         da:e7:af:31:4e:1a:d6:bd:3e:f2:13:bc:33:3c:31:18:3d:a0:
         24:ab:1f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:12:24 2024 by rpki-client on console-ams.rpki-client.org