Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/3136372e3235302e34342e302f32322d3234203d3e20323635313839.roa
File:                     3136372e3235302e34342e302f32322d3234203d3e20323635313839.roa (raw, json)
Hash identifier:          /4XnvZnIpqFNXFBf6w1FG8ydtRhWlz3OMaKA2CYsIP8=
Subject key identifier:   EF:F9:1A:1D:0E:F5:FE:04:35:7D:08:11:79:A6:68:70:36:3B:02:76
Certificate issuer:       /CN=37F55E9132B65DF93AC7E8F542B2A3115CFE1A79
Certificate serial:       68CF13E3BCFD45115569569D67BD4249B67109CC
Authority key identifier: 37:F5:5E:91:32:B6:5D:F9:3A:C7:E8:F5:42:B2:A3:11:5C:FE:1A:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/3136372e3235302e34342e302f32322d3234203d3e20323635313839.roa
Signing time:             Thu 04 Apr 2024 07:44:48 +0000
ROA not before:           Thu 04 Apr 2024 07:39:48 +0000
ROA not after:            Thu 03 Apr 2025 07:44:48 +0000
asID:                     265189
IP address blocks:        167.250.44.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.crl
                          rsync://rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:cf:13:e3:bc:fd:45:11:55:69:56:9d:67:bd:42:49:b6:71:09:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37F55E9132B65DF93AC7E8F542B2A3115CFE1A79
        Validity
            Not Before: Apr  4 07:39:48 2024 GMT
            Not After : Apr  3 07:44:48 2025 GMT
        Subject: CN=EFF91A1D0EF5FE04357D081179A66870363B0276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a0:7e:e9:e7:4f:41:10:9e:5d:4d:3b:98:eb:
                    ac:5e:61:12:3e:5a:f5:3e:b4:d5:71:bc:3e:26:e7:
                    9a:8b:0e:0d:31:39:08:e1:34:dc:0a:50:25:13:55:
                    c5:1b:ab:87:90:49:eb:87:ad:21:2a:b3:12:81:0c:
                    37:e7:fa:80:14:30:35:82:ec:5f:86:89:bc:38:23:
                    8f:3e:68:e9:ec:37:50:69:cb:f3:31:cb:9c:6e:6b:
                    c4:0b:b2:75:a6:86:eb:53:a5:10:1b:20:5d:94:0d:
                    48:ae:ca:ea:5a:fe:d2:8b:f3:b7:cd:b7:4c:77:02:
                    29:e7:e9:ca:b0:08:2f:1a:fa:d0:23:c1:50:22:ed:
                    c6:3c:4d:49:63:fd:0e:bf:bf:18:54:08:8e:a7:88:
                    46:97:5c:46:10:31:95:ea:27:42:32:c5:a8:a6:a8:
                    28:27:ed:dc:54:56:d1:f9:0d:0b:c0:bd:a5:2d:42:
                    cb:6a:0f:21:35:32:8b:23:ac:4d:c4:f5:60:22:ec:
                    4d:23:3e:a9:d8:34:61:1f:f0:63:2e:c7:32:70:a0:
                    e8:96:89:0f:15:f6:9d:6c:6b:05:bf:b6:c8:b5:8c:
                    f9:b1:3d:13:4d:fe:76:a6:2f:14:94:09:b9:4e:20:
                    77:69:64:d1:04:39:9e:3a:3f:b6:a0:75:b4:d2:d2:
                    f6:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F9:1A:1D:0E:F5:FE:04:35:7D:08:11:79:A6:68:70:36:3B:02:76
            X509v3 Authority Key Identifier:
                keyid:37:F5:5E:91:32:B6:5D:F9:3A:C7:E8:F5:42:B2:A3:11:5C:FE:1A:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/3136372e3235302e34342e302f32322d3234203d3e20323635313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:04:bd:0d:2a:8b:89:3b:8c:9c:d2:95:c1:70:51:46:b3:14:
         c1:9e:0a:bb:ec:3a:8b:50:a8:6e:70:5b:8f:55:6d:b0:96:6d:
         71:40:5d:fb:0b:30:cb:df:08:78:d7:5d:0f:89:86:9c:1f:89:
         03:b5:1d:28:a3:ac:71:96:cc:93:1b:57:f7:1d:4c:97:fe:d2:
         2b:37:ef:37:ba:b4:b6:5f:de:16:0f:b6:db:27:4f:dc:88:43:
         31:89:c2:3f:f5:c7:c8:95:84:4f:54:68:7f:0c:65:3c:82:47:
         04:d1:76:b5:38:e3:57:35:41:27:ab:50:54:e5:06:df:1c:c6:
         a1:e0:dc:b8:d7:d2:f2:22:05:d2:10:3d:c5:c5:41:a6:10:fc:
         d9:17:ba:da:84:31:b4:df:34:fa:e7:ce:26:b2:24:6c:c8:27:
         ef:4d:52:c3:89:ca:0f:36:99:39:b4:0d:a6:75:a5:38:9a:91:
         f9:78:ab:1f:cb:fd:73:c7:fe:09:d6:c0:d7:a4:38:c8:88:9a:
         cc:99:b1:4e:28:0c:2b:9c:76:3c:50:64:bc:d6:28:b3:8c:c2:
         59:79:60:6e:9a:79:49:4b:78:1e:a9:9e:59:1e:e3:10:5b:28:
         88:1c:8c:72:73:21:df:b0:06:7e:66:7d:3f:55:a7:8a:c8:df:
         ac:c2:d3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 14:04:00 2024 by rpki-client on console-fra.rpki-client.org