Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/3139302e38332e33332e302f32342d3234203d3e20323635393131.roa
File:                     3139302e38332e33332e302f32342d3234203d3e20323635393131.roa (raw, json)
Hash identifier:          eFpeUwWdtY9pYLTcUoKtVweU5w18vuVvM4f66wklBeY=
Subject key identifier:   D0:3B:7E:65:23:88:3E:E1:93:FD:C8:DC:00:CC:04:75:0D:C5:D4:C9
Certificate issuer:       /CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
Certificate serial:       5E63ED73E492981FA2322300DBD6B0604DBAA342
Authority key identifier: E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/3139302e38332e33332e302f32342d3234203d3e20323635393131.roa
Signing time:             Thu 04 Apr 2024 01:17:16 +0000
ROA not before:           Thu 04 Apr 2024 01:12:16 +0000
ROA not after:            Thu 03 Apr 2025 01:17:16 +0000
asID:                     265911
IP address blocks:        190.83.33.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl
                          rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:63:ed:73:e4:92:98:1f:a2:32:23:00:db:d6:b0:60:4d:ba:a3:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
        Validity
            Not Before: Apr  4 01:12:16 2024 GMT
            Not After : Apr  3 01:17:16 2025 GMT
        Subject: CN=D03B7E6523883EE193FDC8DC00CC04750DC5D4C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:8a:83:0a:11:dc:05:0f:aa:b7:fc:b7:ad:3f:
                    62:fd:9e:d6:60:1e:74:f1:d3:10:e1:ac:5b:03:07:
                    b0:40:75:9b:63:03:0f:d1:27:92:c8:1e:f1:06:15:
                    a3:7c:d2:a5:be:81:c5:bd:fe:a7:0c:4c:53:4d:4f:
                    cf:b6:9c:53:a0:dd:e8:ff:80:50:da:7c:33:52:64:
                    f1:14:93:3b:ec:98:b4:46:af:d7:49:cf:bd:3e:21:
                    fe:19:02:4c:4c:2a:89:4b:8f:d1:2c:8c:48:dc:cd:
                    9c:1a:57:37:c6:13:a6:7a:b6:58:d9:c1:18:2d:a8:
                    3f:d0:11:a2:72:3d:4d:bd:89:6a:5c:8a:2e:9f:d4:
                    8b:9a:a3:f2:f3:a5:ef:db:60:e5:cf:33:0d:f9:6f:
                    ad:92:f2:c0:10:b5:83:11:48:7f:59:56:83:67:5f:
                    87:c0:64:d4:a4:e0:0f:ae:8d:fa:f4:4d:fd:e9:cf:
                    53:ac:02:60:e0:9f:51:9c:ff:c0:bc:1b:b9:98:c6:
                    8d:e1:7e:a3:40:a9:7f:68:7c:c9:c0:e4:9c:e5:87:
                    20:1f:c2:67:7e:1c:bd:93:6f:28:f6:07:ec:7d:6a:
                    22:27:90:f9:9d:71:4c:be:d9:d6:d3:8c:21:bf:b3:
                    7b:2b:9c:4b:96:b1:f4:f7:e2:eb:47:39:b5:65:30:
                    97:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:3B:7E:65:23:88:3E:E1:93:FD:C8:DC:00:CC:04:75:0D:C5:D4:C9
            X509v3 Authority Key Identifier:
                keyid:E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/3139302e38332e33332e302f32342d3234203d3e20323635393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:ba:8f:4f:29:c4:1f:ce:95:62:aa:f3:0c:da:45:5a:51:a1:
         87:40:74:0a:ca:be:ef:65:1e:7a:cb:11:cc:36:78:16:8f:2f:
         be:de:b9:17:0a:ca:42:d6:42:d3:6b:90:eb:b9:09:05:20:bc:
         72:d5:0a:65:91:4f:35:31:f1:08:3f:83:b0:d8:2b:81:2b:14:
         43:b8:07:34:da:a4:c4:66:57:bc:54:3b:de:7a:3f:4b:6f:0f:
         8a:d1:bc:79:63:4f:71:d0:64:ae:c9:16:b3:8a:ff:8e:51:83:
         cf:56:8b:0a:c7:fe:9b:89:16:e0:eb:aa:17:b7:d7:f8:d0:52:
         a4:08:e9:2c:44:a0:c4:05:99:17:20:f0:f4:fb:2f:94:9f:e7:
         63:78:1b:32:94:a2:eb:39:a4:e8:97:ae:55:02:e4:d3:80:ee:
         53:ee:7b:07:6e:22:17:ef:58:54:79:92:94:13:0c:2c:ea:d6:
         d4:b0:93:93:33:cf:3f:d5:9d:4b:0e:55:78:3f:d4:75:6f:b9:
         5b:c9:e6:8f:a1:87:d7:76:4a:13:ff:14:1f:bb:ce:5e:84:93:
         fd:e9:60:15:63:ad:ad:22:51:b9:15:ca:33:de:c0:c6:7a:ff:
         4b:cc:e8:ea:3c:95:fe:08:89:2b:7d:aa:a2:87:3b:f2:06:e2:
         c0:c6:92:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:12:24 2024 by rpki-client on console-ams.rpki-client.org