Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/3138362e3235302e3230362e302f32332d3233203d3e20323635393131.roa
File:                     3138362e3235302e3230362e302f32332d3233203d3e20323635393131.roa (raw, json)
Hash identifier:          MW18C3Ecggf0uTLUYW+DGxWrVB0T6c9LGYIsUqBWciY=
Subject key identifier:   4D:3E:65:36:B3:72:49:6F:D4:74:6B:83:E4:DE:BD:37:03:B3:1D:B0
Certificate issuer:       /CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
Certificate serial:       0C9726EE5D587F402A67BD2BFFBB1DA743499F96
Authority key identifier: E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/3138362e3235302e3230362e302f32332d3233203d3e20323635393131.roa
Signing time:             Thu 04 Apr 2024 01:17:19 +0000
ROA not before:           Thu 04 Apr 2024 01:12:19 +0000
ROA not after:            Thu 03 Apr 2025 01:17:19 +0000
asID:                     265911
IP address blocks:        186.250.206.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl
                          rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:97:26:ee:5d:58:7f:40:2a:67:bd:2b:ff:bb:1d:a7:43:49:9f:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
        Validity
            Not Before: Apr  4 01:12:19 2024 GMT
            Not After : Apr  3 01:17:19 2025 GMT
        Subject: CN=4D3E6536B372496FD4746B83E4DEBD3703B31DB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8b:ca:0b:59:6e:7e:e9:9e:b6:42:03:cc:d0:
                    a1:2f:60:5c:26:e2:0b:ad:c1:e0:54:28:f8:a4:de:
                    16:b5:e8:f4:d2:8a:b8:33:75:0b:b5:b3:70:6c:b6:
                    2c:ad:2c:55:a8:4e:b3:62:f4:30:4a:ed:78:b7:27:
                    1c:36:16:92:ff:b2:36:31:af:79:49:33:93:9c:02:
                    71:6d:b5:04:ed:f4:d6:12:9c:35:50:ee:6a:1c:ed:
                    ef:e0:31:1a:a2:03:47:4d:ee:f3:71:27:c9:fe:6a:
                    86:d4:f8:c2:56:d8:09:13:b0:6b:1d:1f:89:9d:6b:
                    8e:41:d2:f5:66:c8:c1:02:b1:fb:b6:54:98:7a:6d:
                    8a:7a:c7:9b:61:2a:48:b4:dd:c2:28:eb:02:b8:25:
                    f5:3e:4b:78:76:b5:b4:02:6d:a0:94:f2:48:18:74:
                    59:dd:cd:1d:0b:53:93:95:ec:63:d3:f9:7e:69:c1:
                    2f:8e:b0:f9:ab:0e:10:39:78:07:13:54:e4:a0:ac:
                    ec:c7:c7:29:b0:93:36:73:92:28:82:58:d6:66:36:
                    fc:5b:6b:92:17:28:fa:25:e7:a4:91:66:b4:59:ca:
                    a8:6e:8c:9c:a1:55:9a:f1:a3:1f:37:6e:da:ae:5d:
                    c2:24:a1:9e:72:6e:5b:53:b8:53:e5:ec:3a:e3:3c:
                    9d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:3E:65:36:B3:72:49:6F:D4:74:6B:83:E4:DE:BD:37:03:B3:1D:B0
            X509v3 Authority Key Identifier:
                keyid:E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/3138362e3235302e3230362e302f32332d3233203d3e20323635393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:48:81:f3:e0:d0:83:cd:46:70:ff:0a:d4:9d:47:89:1b:77:
         dd:aa:0d:88:43:8d:c1:17:75:48:c2:44:34:09:86:d3:eb:8e:
         3b:e0:e7:de:d4:be:19:5c:e7:29:2e:52:bd:a9:c3:88:3b:ba:
         ca:22:0d:f0:75:a6:1d:f5:9f:9a:a5:78:93:5f:26:3e:c9:12:
         70:c2:ed:58:0e:4e:c6:1b:73:6b:e3:c7:b5:92:63:fc:8c:b9:
         24:24:7b:01:fd:94:b0:45:9d:cb:76:60:b7:54:f0:fc:be:6e:
         e8:77:21:3c:02:63:f3:57:0a:ab:ad:e4:b6:ed:d0:66:17:6c:
         9b:9e:a2:d9:69:d1:5f:08:4b:75:fe:ae:3a:5d:64:df:2b:f4:
         ba:88:c4:5c:69:ef:1d:be:e6:a6:0c:45:c2:97:0e:a4:bd:d3:
         22:97:0f:00:69:78:6b:56:ac:17:91:f0:c5:bd:16:1e:de:11:
         ff:39:8e:05:e8:87:81:6c:d7:f7:a8:bd:53:a8:24:55:fd:81:
         1f:47:b1:58:2e:ec:b7:12:40:0f:44:71:d0:76:51:8f:10:b5:
         0e:2c:ff:51:c4:66:35:e3:9a:93:01:b3:2c:c5:e8:15:cb:04:
         c3:18:dc:e0:26:b7:0c:c6:a2:cb:1a:46:0c:86:de:a5:43:83:
         a5:89:fa:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:20:59 2024 by rpki-client on console-fra.rpki-client.org