Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/3230312e3135392e3135322e302f32322d3234203d3e20323635393131.roa
File:                     3230312e3135392e3135322e302f32322d3234203d3e20323635393131.roa (raw, json)
Hash identifier:          2/XJHhHYd+ieLfX1JdUI8hQPvTMYcg8i9CNTz+aUSdE=
Subject key identifier:   28:70:17:62:FF:3B:F4:80:C9:EE:FD:2F:46:BD:6C:A8:25:AC:74:B7
Certificate issuer:       /CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
Certificate serial:       044D0643B4C99AD2C9B406CE94CE3F918AF577D5
Authority key identifier: E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/3230312e3135392e3135322e302f32322d3234203d3e20323635393131.roa
Signing time:             Thu 04 Apr 2024 01:17:34 +0000
ROA not before:           Thu 04 Apr 2024 01:12:34 +0000
ROA not after:            Thu 03 Apr 2025 01:17:34 +0000
asID:                     265911
IP address blocks:        201.159.152.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl
                          rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:4d:06:43:b4:c9:9a:d2:c9:b4:06:ce:94:ce:3f:91:8a:f5:77:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
        Validity
            Not Before: Apr  4 01:12:34 2024 GMT
            Not After : Apr  3 01:17:34 2025 GMT
        Subject: CN=28701762FF3BF480C9EEFD2F46BD6CA825AC74B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b7:e5:20:11:5c:92:9b:cd:32:9a:a4:bc:f7:
                    98:9d:6a:c8:cd:f0:f9:e2:c7:ea:19:7f:e4:10:4b:
                    4a:f8:06:50:65:3e:e3:66:9b:75:bd:31:d8:29:46:
                    1e:8a:99:c1:d8:c8:7d:27:6e:55:c7:a2:fe:e0:73:
                    49:ba:10:47:34:15:aa:e8:21:8d:09:1e:9f:8c:05:
                    12:41:18:56:ba:71:8f:3a:29:7c:67:30:fc:b3:a7:
                    5e:a9:02:c1:99:0f:72:2b:e6:7f:b3:13:c4:5b:af:
                    fd:49:ba:e5:82:52:4e:c3:e4:73:10:07:15:72:61:
                    f2:3d:6e:96:72:fc:9f:7c:70:22:a3:60:d4:d5:51:
                    94:b5:c9:1c:a8:a9:07:35:0d:88:3a:64:6f:b7:6a:
                    44:c1:0e:37:04:58:52:3e:3e:39:cd:91:f6:78:bb:
                    ff:a4:68:f0:16:f0:f6:93:e6:76:e5:1c:cd:b3:86:
                    38:50:c2:95:7e:04:e5:06:8a:8e:af:35:95:7c:39:
                    e7:b6:ac:6c:6f:ef:28:b7:be:9c:32:2d:69:59:c3:
                    8b:38:7f:3b:8a:f0:a3:e1:92:3b:6a:fe:1a:ff:b0:
                    3e:22:23:ce:5b:a4:dc:67:14:08:0c:48:43:88:06:
                    5d:de:c7:0d:8a:db:2e:77:99:42:ca:06:2f:6b:41:
                    a5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:70:17:62:FF:3B:F4:80:C9:EE:FD:2F:46:BD:6C:A8:25:AC:74:B7
            X509v3 Authority Key Identifier:
                keyid:E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/3230312e3135392e3135322e302f32322d3234203d3e20323635393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:46:f9:37:cd:37:80:66:ed:fe:b1:16:c0:a8:8a:fa:bb:3b:
         7f:58:c8:4a:7f:22:61:a3:ca:36:92:2a:02:29:2a:1c:1f:11:
         b7:7e:7a:19:5d:9d:c9:71:b8:78:5c:3f:41:b3:12:fe:77:05:
         e3:6b:bd:ab:83:0f:44:c0:31:ec:3d:6c:e2:61:1e:80:25:5b:
         b4:1d:a9:45:59:3e:a4:85:62:8b:b1:4c:ee:a4:41:65:15:f2:
         be:40:db:72:7e:60:47:60:0d:30:80:f4:c1:42:32:a5:5f:da:
         ca:53:97:da:1f:0c:d0:7e:68:3c:72:dd:05:d1:76:5b:4f:b3:
         be:32:f1:c9:4c:dd:a2:42:be:46:52:a3:c6:1d:97:53:c4:aa:
         bd:fa:de:9e:5b:3a:c4:9a:c6:be:83:8d:cf:91:22:68:a9:72:
         b2:85:cf:21:a7:d2:49:f3:a6:08:91:9e:b9:0d:cf:23:b6:86:
         04:3f:78:8e:92:aa:30:b2:b4:93:60:8f:d3:9b:24:26:9e:c0:
         96:15:33:f4:61:90:f4:c5:5a:00:72:a3:d3:30:6e:b1:40:6b:
         a3:0b:6f:b5:91:e4:98:2b:2a:31:de:6b:71:9f:71:89:86:74:
         c8:15:37:c4:d7:91:da:5b:07:7a:75:68:b1:cf:a4:e2:e1:52:
         d7:bb:08:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:12:24 2024 by rpki-client on console-ams.rpki-client.org