Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/1/3137372e36362e3138342e302f32322d3234203d3e20323632353032.roa
File:                     3137372e36362e3138342e302f32322d3234203d3e20323632353032.roa (raw, json)
Hash identifier:          pUHF4tZxzxAXVJRMxina6ZP6e1q+eBEOeHN1LS6ccfE=
Subject key identifier:   18:21:8F:B3:4A:A2:A8:CD:7E:08:FC:F4:FB:E4:1D:AC:49:41:0F:66
Certificate issuer:       /CN=B083E1F6554A0DAB0E83AC5CDA1783B3B5A995C8
Certificate serial:       5605C04883E6C342D212C7184448BD46D81EFCE0
Authority key identifier: B0:83:E1:F6:55:4A:0D:AB:0E:83:AC:5C:DA:17:83:B3:B5:A9:95:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B083E1F6554A0DAB0E83AC5CDA1783B3B5A995C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/1/3137372e36362e3138342e302f32322d3234203d3e20323632353032.roa
Signing time:             Thu 04 Apr 2024 12:33:46 +0000
ROA not before:           Thu 04 Apr 2024 12:28:46 +0000
ROA not after:            Thu 03 Apr 2025 12:33:46 +0000
asID:                     262502
IP address blocks:        177.66.184.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/1/B083E1F6554A0DAB0E83AC5CDA1783B3B5A995C8.crl
                          rsync://rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/1/B083E1F6554A0DAB0E83AC5CDA1783B3B5A995C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B083E1F6554A0DAB0E83AC5CDA1783B3B5A995C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 21:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:05:c0:48:83:e6:c3:42:d2:12:c7:18:44:48:bd:46:d8:1e:fc:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B083E1F6554A0DAB0E83AC5CDA1783B3B5A995C8
        Validity
            Not Before: Apr  4 12:28:46 2024 GMT
            Not After : Apr  3 12:33:46 2025 GMT
        Subject: CN=18218FB34AA2A8CD7E08FCF4FBE41DAC49410F66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:25:71:b8:7a:fe:f6:7e:e9:98:1c:9b:86:b2:
                    c1:93:09:3e:fc:7f:3a:2c:b7:86:69:bf:25:e2:81:
                    c3:30:66:13:0e:a6:d5:87:2a:0d:6c:10:cd:37:40:
                    9c:f6:b3:3a:03:0b:7d:7f:2d:c4:67:95:70:f0:14:
                    db:9e:04:08:58:01:eb:42:20:c1:72:28:d4:4c:0c:
                    8a:52:bc:b0:09:c8:83:2f:3f:9b:e3:23:54:6a:d8:
                    6e:0e:bf:58:1d:6f:a6:28:db:b0:f8:98:1d:cd:0f:
                    f3:a3:64:68:cb:76:f9:6a:34:35:57:12:15:73:18:
                    60:e6:2a:ae:09:16:bf:9e:70:f9:05:68:e8:4c:5f:
                    24:5b:c7:b4:1f:43:1e:b3:2d:3e:a4:68:fc:98:46:
                    03:61:1c:2d:4f:e1:06:4d:9f:40:f5:46:ef:52:0e:
                    87:db:86:39:71:af:f4:f4:76:33:cc:14:ce:58:08:
                    79:f0:19:db:db:21:50:6b:50:6d:77:56:ad:51:de:
                    99:3f:6d:85:00:75:87:9d:28:cc:9e:a5:a6:40:f5:
                    a4:56:f2:47:ba:8a:77:fd:04:12:2d:4c:88:f8:b5:
                    8e:05:dc:3a:f6:31:89:d3:8f:f1:49:ad:a7:8c:37:
                    a2:13:fd:8b:5a:61:b3:e1:8c:bb:14:54:24:21:f6:
                    10:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:21:8F:B3:4A:A2:A8:CD:7E:08:FC:F4:FB:E4:1D:AC:49:41:0F:66
            X509v3 Authority Key Identifier:
                keyid:B0:83:E1:F6:55:4A:0D:AB:0E:83:AC:5C:DA:17:83:B3:B5:A9:95:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/1/B083E1F6554A0DAB0E83AC5CDA1783B3B5A995C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B083E1F6554A0DAB0E83AC5CDA1783B3B5A995C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/1/3137372e36362e3138342e302f32322d3234203d3e20323632353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ca:9e:73:e1:43:b2:36:67:4b:dc:36:aa:12:c5:f4:86:94:d3:
         8b:df:24:18:b4:b7:51:c2:89:12:86:33:0d:4e:52:fd:86:c1:
         8a:de:f1:0e:6e:ca:de:eb:e4:4b:68:d6:f7:0d:41:d3:5d:0e:
         71:45:cb:fd:47:f5:b3:e6:95:0c:b1:1a:64:6b:91:c1:21:d2:
         a8:04:a5:1e:4e:af:ed:1a:64:35:8f:b2:46:b4:f2:4c:57:88:
         c5:d1:21:fd:8a:ac:fc:84:06:eb:26:0f:e3:a8:cc:7f:d1:36:
         d5:8b:9b:ea:0f:0a:9c:fb:e0:ea:c0:67:5b:92:8a:6e:41:53:
         55:4e:82:ed:db:60:ee:3d:74:b0:7d:11:80:0a:99:25:cc:0f:
         f7:d7:b0:fe:4d:24:49:1c:a6:e9:39:73:43:c0:5d:b5:6a:d0:
         ef:b2:16:2f:95:1b:23:0e:bf:f7:03:02:a8:0c:c9:d0:cd:27:
         85:f1:70:a3:2f:f2:47:0c:ef:72:50:3f:ff:d4:97:63:5c:b3:
         ab:3f:be:f3:0c:83:32:14:9a:aa:9b:49:6f:b4:d1:b0:ca:25:
         c5:98:09:9a:86:9c:e7:45:70:f5:9e:3e:b9:ee:07:64:bd:f0:
         71:66:e6:c7:d4:90:78:c6:8a:c5:03:41:18:c5:62:18:a9:74:
         48:76:a4:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 21:52:36 2024 by rpki-client on console-fra.rpki-client.org