Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/1/3137372e36362e3138382e302f32322d3234203d3e20323632353032.roa
File:                     3137372e36362e3138382e302f32322d3234203d3e20323632353032.roa (raw, json)
Hash identifier:          rXeFIxWgkZQsKylEpqLngFvKlK5t2v3dzagkgcgCZkg=
Subject key identifier:   A9:6E:4A:1B:CF:7D:3A:DB:F7:8A:FC:B8:74:78:62:3B:3E:73:2C:F7
Certificate issuer:       /CN=B083E1F6554A0DAB0E83AC5CDA1783B3B5A995C8
Certificate serial:       35E96D6D676CB98572FF039A1596A5D838FAF0B1
Authority key identifier: B0:83:E1:F6:55:4A:0D:AB:0E:83:AC:5C:DA:17:83:B3:B5:A9:95:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B083E1F6554A0DAB0E83AC5CDA1783B3B5A995C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/1/3137372e36362e3138382e302f32322d3234203d3e20323632353032.roa
Signing time:             Thu 04 Apr 2024 12:33:46 +0000
ROA not before:           Thu 04 Apr 2024 12:28:46 +0000
ROA not after:            Thu 03 Apr 2025 12:33:46 +0000
asID:                     262502
IP address blocks:        177.66.188.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/1/B083E1F6554A0DAB0E83AC5CDA1783B3B5A995C8.crl
                          rsync://rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/1/B083E1F6554A0DAB0E83AC5CDA1783B3B5A995C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B083E1F6554A0DAB0E83AC5CDA1783B3B5A995C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 21:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:e9:6d:6d:67:6c:b9:85:72:ff:03:9a:15:96:a5:d8:38:fa:f0:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B083E1F6554A0DAB0E83AC5CDA1783B3B5A995C8
        Validity
            Not Before: Apr  4 12:28:46 2024 GMT
            Not After : Apr  3 12:33:46 2025 GMT
        Subject: CN=A96E4A1BCF7D3ADBF78AFCB87478623B3E732CF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:db:fa:03:50:4b:58:dc:c3:25:46:12:9a:16:
                    43:4a:a5:d5:da:d4:ea:5a:74:88:1e:4f:de:98:58:
                    0e:5e:a5:e7:d1:0e:a4:5a:d5:80:61:43:57:b3:73:
                    51:cb:af:37:f6:39:cd:ad:a2:94:6f:1f:81:e5:bd:
                    a0:8e:b0:77:54:88:27:e9:31:fc:ca:5a:97:eb:20:
                    cd:c8:b9:17:71:37:cf:35:eb:ac:f8:07:4c:53:7c:
                    3f:ee:9b:e0:9a:0b:ad:17:d4:cc:97:fa:b2:42:59:
                    11:1e:08:3d:44:6d:04:55:fc:28:25:98:63:be:93:
                    b7:da:dc:21:78:ca:0d:44:65:a5:bc:88:67:de:f0:
                    20:4a:3c:30:fe:5d:84:51:7b:35:3b:2e:6c:d8:9c:
                    23:dc:1b:c3:64:2f:1b:04:28:c4:0c:0a:66:8f:9b:
                    3a:15:ed:d8:78:52:4d:89:e3:d6:75:fe:b4:d7:36:
                    9a:59:22:3c:06:85:47:1a:f4:87:2e:65:cf:18:fe:
                    3f:08:07:df:26:93:77:57:27:75:4b:01:6a:ea:56:
                    06:85:36:59:99:82:0f:f7:ea:89:78:8e:d7:21:5d:
                    f7:1e:5e:3c:61:89:ab:be:4d:17:27:2e:93:90:fd:
                    b5:49:a0:83:4c:93:b3:4b:d4:e8:fe:88:af:09:6b:
                    68:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:6E:4A:1B:CF:7D:3A:DB:F7:8A:FC:B8:74:78:62:3B:3E:73:2C:F7
            X509v3 Authority Key Identifier:
                keyid:B0:83:E1:F6:55:4A:0D:AB:0E:83:AC:5C:DA:17:83:B3:B5:A9:95:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/1/B083E1F6554A0DAB0E83AC5CDA1783B3B5A995C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B083E1F6554A0DAB0E83AC5CDA1783B3B5A995C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/1/3137372e36362e3138382e302f32322d3234203d3e20323632353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:52:f2:0c:80:ee:17:ab:4d:25:38:7b:71:cf:fd:11:2a:db:
         f4:3f:48:65:53:c6:ac:f1:45:fe:0c:eb:fd:58:e7:eb:e8:07:
         1a:50:49:b4:e2:a8:64:10:4a:57:73:b3:ef:85:33:d8:cb:9b:
         87:70:93:f7:2b:e1:ea:11:23:07:70:6f:e8:37:83:a6:20:48:
         0b:e2:f8:9c:4a:db:bf:51:17:d7:43:1a:e7:ba:91:cd:86:5f:
         44:bd:bf:95:15:35:95:06:df:9c:f9:e2:70:ea:a4:f8:77:c7:
         48:ea:8d:46:d1:82:88:bc:8f:85:a0:d8:64:23:bf:56:81:6d:
         c4:c2:a3:ff:83:c9:a8:6a:75:4a:ea:6e:94:19:25:6b:c9:40:
         71:d6:36:08:ea:9c:2a:9d:83:d9:dc:ba:fd:1e:02:a1:9c:d3:
         b5:5d:dd:4e:a6:ab:bb:21:7a:9d:7b:95:94:62:25:28:0a:57:
         70:99:fa:26:13:f9:84:90:f7:dd:ee:61:ac:73:80:0a:25:88:
         d4:06:4b:0a:4b:48:96:41:c9:27:4c:cc:97:68:86:65:f6:2e:
         a7:59:62:38:fe:81:a3:dd:38:92:41:8e:6f:0f:60:c9:3a:70:
         10:7c:66:3b:5b:18:5e:57:bf:5c:6a:c2:7d:f3:14:8d:4b:2c:
         18:ec:97:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 21:52:36 2024 by rpki-client on console-fra.rpki-client.org