Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/3139322e3134342e36362e302f32342d3234203d3e20323636313738.roa
File:                     3139322e3134342e36362e302f32342d3234203d3e20323636313738.roa (raw, json)
Hash identifier:          +YZh8J+CtdHGGXjlgvEKRqtx6gjBc/SpIAm7NuXkENE=
Subject key identifier:   8E:93:FE:AA:E6:AF:28:46:41:98:90:E2:76:CF:5D:76:FC:F6:DF:26
Certificate issuer:       /CN=8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90
Certificate serial:       69C7362EA555B50F91AAB60D1FC2B783774403C7
Authority key identifier: 8B:B2:3F:B0:F3:8F:7C:DE:17:85:2D:C6:1B:D2:34:DC:EB:C3:BB:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/3139322e3134342e36362e302f32342d3234203d3e20323636313738.roa
Signing time:             Sat 18 May 2024 20:11:57 +0000
ROA not before:           Sat 18 May 2024 20:06:57 +0000
ROA not after:            Sat 17 May 2025 20:11:57 +0000
asID:                     266178
IP address blocks:        192.144.66.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.crl
                          rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 03:20:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:c7:36:2e:a5:55:b5:0f:91:aa:b6:0d:1f:c2:b7:83:77:44:03:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90
        Validity
            Not Before: May 18 20:06:57 2024 GMT
            Not After : May 17 20:11:57 2025 GMT
        Subject: CN=8E93FEAAE6AF2846419890E276CF5D76FCF6DF26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:cd:1b:f3:c5:33:ad:52:f2:43:9a:be:3d:39:
                    2f:33:4b:43:01:55:c5:c5:07:fe:2c:31:ea:4c:4e:
                    a5:f7:d6:66:7d:a8:60:22:83:a2:25:8d:c6:ef:63:
                    e8:b4:da:3f:71:5e:5a:16:df:3b:fe:bd:38:86:4e:
                    72:8b:22:54:2b:bd:a2:83:1e:68:b1:b7:d5:9f:ba:
                    33:06:10:68:da:4c:61:39:5b:03:7e:36:a2:42:71:
                    89:5f:2a:5c:90:bb:b1:a1:db:23:e2:73:c3:27:4f:
                    f9:4e:b7:79:7c:ca:dc:a7:26:68:4e:ca:5b:ff:15:
                    f6:f8:07:97:ab:af:dd:2b:39:c6:8b:64:7f:21:26:
                    ff:cd:55:ef:3a:1c:11:09:7c:41:68:e3:31:4a:5e:
                    4b:4a:ee:50:08:60:a8:15:43:6d:aa:56:cc:f3:49:
                    45:b8:2d:4b:7b:38:4a:78:86:59:9d:e5:87:7e:cf:
                    5d:73:c8:9d:00:c6:66:f0:f4:7e:0d:4d:ad:a5:b2:
                    be:4d:ac:81:3d:23:04:28:02:1f:11:dd:a7:f1:bd:
                    3d:32:61:c5:1b:96:69:c2:f4:6e:ca:0b:a1:06:54:
                    e9:5c:25:7b:f2:95:bc:fc:c9:8d:50:fd:31:41:3d:
                    ba:35:11:ae:45:ad:ac:ce:7a:86:f4:2d:2b:db:fa:
                    d1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:93:FE:AA:E6:AF:28:46:41:98:90:E2:76:CF:5D:76:FC:F6:DF:26
            X509v3 Authority Key Identifier:
                keyid:8B:B2:3F:B0:F3:8F:7C:DE:17:85:2D:C6:1B:D2:34:DC:EB:C3:BB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/3139322e3134342e36362e302f32342d3234203d3e20323636313738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.144.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:5c:ef:39:a2:29:09:f6:04:0e:b3:27:5b:ba:d5:cf:d2:99:
         53:4d:6a:26:ec:d8:e1:f9:18:bb:fe:9e:0f:e9:d6:cd:86:ae:
         83:a6:46:1b:c7:16:91:f4:ca:8c:a4:f2:96:9a:4a:b1:bb:7c:
         f4:e5:62:97:ef:c7:1a:8b:06:fc:54:18:17:1c:0f:4e:f1:19:
         d0:60:6c:8f:9a:90:18:13:98:56:5b:9c:58:65:5a:3c:aa:62:
         d0:b3:90:7f:18:92:41:fe:05:de:4b:1d:30:54:6d:c8:2e:5c:
         4f:ac:30:50:43:60:0a:ce:ff:81:dd:00:2f:97:45:78:0c:b0:
         65:5a:5c:18:ea:62:46:da:45:de:f2:c8:96:49:77:63:26:09:
         08:2b:d4:ec:c5:07:da:8e:c9:44:14:ef:a1:aa:30:92:9f:28:
         17:96:1b:78:89:b7:e2:3f:e0:b4:98:be:f1:32:20:0b:71:11:
         ca:f1:1b:7c:c2:ee:d5:f7:a0:16:3e:e4:5b:5d:dd:69:2f:6d:
         dc:d2:8d:be:e8:c6:97:4e:30:e6:7c:30:31:87:7c:88:b0:16:
         39:bb:74:7f:e7:81:62:cf:25:84:a1:de:3e:6e:2a:dc:a9:2e:
         d2:ea:a9:68:ab:6a:fa:ee:03:02:59:fc:2e:08:6d:88:7b:73:
         c9:6d:05:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 05:33:57 2024 by rpki-client on console-ams.rpki-client.org