Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/3137302e36362e302e302f31362d3234203d3e203131393933.roa
File:                     3137302e36362e302e302f31362d3234203d3e203131393933.roa (raw, json)
Hash identifier:          c+wWZzIIOkuNOApK65JJO4bV1avf87IRN81auqmH2i8=
Subject key identifier:   0E:99:53:59:71:19:D2:66:F1:B8:1A:4C:4C:DD:9F:B6:69:AF:4C:C3
Certificate issuer:       /CN=6321913B8F265DB266263684C1BC420640061E1A
Certificate serial:       2741D5B64230AAA916E89798F2F0DC45C51A99F9
Authority key identifier: 63:21:91:3B:8F:26:5D:B2:66:26:36:84:C1:BC:42:06:40:06:1E:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6321913B8F265DB266263684C1BC420640061E1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/3137302e36362e302e302f31362d3234203d3e203131393933.roa
Signing time:             Thu 04 Apr 2024 06:05:06 +0000
ROA not before:           Thu 04 Apr 2024 06:00:06 +0000
ROA not after:            Thu 03 Apr 2025 06:05:06 +0000
asID:                     11993
IP address blocks:        170.66.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/6321913B8F265DB266263684C1BC420640061E1A.crl
                          rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/6321913B8F265DB266263684C1BC420640061E1A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6321913B8F265DB266263684C1BC420640061E1A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 04:47:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:41:d5:b6:42:30:aa:a9:16:e8:97:98:f2:f0:dc:45:c5:1a:99:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6321913B8F265DB266263684C1BC420640061E1A
        Validity
            Not Before: Apr  4 06:00:06 2024 GMT
            Not After : Apr  3 06:05:06 2025 GMT
        Subject: CN=0E9953597119D266F1B81A4C4CDD9FB669AF4CC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:54:bb:32:d3:e2:0b:fc:34:6c:93:38:9e:96:
                    51:c0:29:eb:83:31:12:38:56:53:a2:29:87:09:87:
                    8e:e3:71:5e:52:82:df:5f:76:0d:1a:39:49:80:77:
                    57:16:20:30:54:58:fd:ec:16:c3:9e:c5:95:90:8a:
                    40:07:d4:c8:f2:1a:cb:cf:8a:e9:d5:d0:75:b4:b5:
                    40:97:73:4f:6b:8e:ed:23:1d:0d:3a:39:c0:6c:9f:
                    93:96:48:58:d6:23:1b:bc:98:0a:31:77:d2:71:5c:
                    29:dd:45:ae:be:52:55:5d:c5:a7:7e:1b:56:9c:e8:
                    fa:1b:4d:73:57:e0:03:7c:8c:fd:3e:39:bd:b0:6d:
                    90:bb:2e:94:cc:b6:48:5d:b4:9a:7e:39:ba:e8:d8:
                    8d:f0:d3:02:32:b8:2b:5b:72:ea:33:5f:f9:9e:6d:
                    e4:17:c5:18:e8:66:a9:db:67:1b:4c:f3:10:2b:50:
                    7a:d0:3e:b8:90:58:54:5a:7a:10:0f:63:a0:95:6d:
                    8c:a2:83:40:67:43:ce:b6:cd:66:61:16:70:8b:07:
                    73:ed:9f:d1:85:55:a9:8a:c4:2a:91:56:97:d9:36:
                    9a:10:a8:76:49:fb:d0:de:a3:86:81:71:e1:d6:58:
                    76:a9:db:da:f0:cf:4a:6a:f0:eb:76:6a:4c:90:b3:
                    e6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:99:53:59:71:19:D2:66:F1:B8:1A:4C:4C:DD:9F:B6:69:AF:4C:C3
            X509v3 Authority Key Identifier:
                keyid:63:21:91:3B:8F:26:5D:B2:66:26:36:84:C1:BC:42:06:40:06:1E:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/6321913B8F265DB266263684C1BC420640061E1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6321913B8F265DB266263684C1BC420640061E1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/3137302e36362e302e302f31362d3234203d3e203131393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.66.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         00:4a:5c:1a:82:e4:eb:35:a3:71:34:10:2c:5f:1a:0c:2f:04:
         83:1a:e6:a5:98:1f:50:87:a5:0d:7f:05:9a:2e:ad:68:62:4d:
         70:f4:58:46:2d:3d:b8:d3:70:7b:ae:6b:2a:41:a0:59:fb:4a:
         e5:2c:46:97:96:78:15:c2:0e:10:0c:d4:b3:0b:f8:39:c1:67:
         68:71:74:7a:9d:19:37:10:ae:1e:d8:20:a6:21:cb:0a:e6:8e:
         20:21:a1:23:8a:52:ec:ca:f7:83:80:83:bc:c3:08:97:27:85:
         88:45:97:0c:e2:6c:8b:e7:e7:15:ec:55:92:43:fb:f3:29:cd:
         88:43:5f:1c:2f:25:78:77:09:0c:f3:82:92:f7:3c:6b:a4:da:
         51:d8:81:b1:95:dd:e3:24:16:63:48:d1:73:cf:16:87:73:1c:
         d2:bf:88:84:52:5d:73:ce:ef:f4:84:3b:e3:e6:a6:60:40:f1:
         0d:34:c8:bf:04:03:0f:c2:f1:56:ab:e8:a5:39:e4:03:97:99:
         b7:0b:63:c2:28:45:4b:b4:75:65:0d:f4:ef:fd:43:2b:f2:48:
         a4:e5:ca:e0:4d:44:0b:5c:c2:4e:f1:d1:17:c8:90:02:ee:e6:
         6d:4f:9b:01:2a:48:2f:fb:89:e3:63:39:59:d0:81:98:df:93:
         42:b8:9b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:25:28 2024 by rpki-client on console-ams.rpki-client.org