Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/34352e3136352e3231362e302f32322d3232203d3e20323637393430.roa
File:                     34352e3136352e3231362e302f32322d3232203d3e20323637393430.roa (raw, json)
Hash identifier:          sdc9Bf3DqCDWF9Fswil3eHpwMNmkrwW0lkm5lzXBWFA=
Subject key identifier:   07:24:7B:37:AA:AF:0C:83:85:73:BA:1F:0D:A5:2E:B7:84:AF:5A:B0
Certificate issuer:       /CN=666E558ABAE9C9586902077E3E697F13A69C98BE
Certificate serial:       1ADCB6DB3EB0C361B029F293DA4CC563A5B9F5CD
Authority key identifier: 66:6E:55:8A:BA:E9:C9:58:69:02:07:7E:3E:69:7F:13:A6:9C:98:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666E558ABAE9C9586902077E3E697F13A69C98BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/34352e3136352e3231362e302f32322d3232203d3e20323637393430.roa
Signing time:             Tue 30 Apr 2024 19:54:45 +0000
ROA not before:           Tue 30 Apr 2024 19:49:45 +0000
ROA not after:            Tue 29 Apr 2025 19:54:45 +0000
asID:                     267940
IP address blocks:        45.165.216.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/666E558ABAE9C9586902077E3E697F13A69C98BE.crl
                          rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/666E558ABAE9C9586902077E3E697F13A69C98BE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666E558ABAE9C9586902077E3E697F13A69C98BE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Jun 2024 05:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:dc:b6:db:3e:b0:c3:61:b0:29:f2:93:da:4c:c5:63:a5:b9:f5:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=666E558ABAE9C9586902077E3E697F13A69C98BE
        Validity
            Not Before: Apr 30 19:49:45 2024 GMT
            Not After : Apr 29 19:54:45 2025 GMT
        Subject: CN=07247B37AAAF0C838573BA1F0DA52EB784AF5AB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:4b:7a:0a:cd:ba:18:30:0d:84:9a:17:aa:eb:
                    10:82:50:7d:63:52:6c:fd:4a:ae:a7:88:fc:23:a4:
                    1c:10:ba:6c:f8:39:60:26:23:9e:23:c2:47:af:b7:
                    c3:5f:a6:b9:73:27:22:8f:92:72:7e:ab:5e:1d:02:
                    74:dd:8e:41:b9:86:99:6a:d0:db:2d:c0:34:de:60:
                    62:1e:7d:da:09:d8:ab:66:bf:fc:d1:79:e6:35:85:
                    0e:94:0b:fc:6c:74:91:93:25:87:94:66:d3:f2:e9:
                    aa:db:14:32:b4:c7:58:05:09:d8:43:1c:79:1f:70:
                    e0:11:64:61:1e:15:af:70:c5:cc:e6:90:f3:b4:d0:
                    63:bf:77:ea:5d:cd:de:bf:03:05:8e:8e:29:ed:b8:
                    f6:04:71:30:d6:71:71:1f:4c:97:2c:e0:74:87:7c:
                    63:40:bc:fe:94:7e:b0:90:53:da:bb:2b:20:c3:c7:
                    93:46:15:24:c4:89:1f:be:7a:16:37:06:b5:44:a4:
                    05:9d:c3:37:a6:3e:a5:9d:f4:d0:9e:d1:33:44:3a:
                    18:3c:3a:f7:04:f2:fd:64:33:52:ad:5a:b8:92:86:
                    53:dd:ca:68:54:d7:07:b0:b5:3d:e3:c3:90:72:2f:
                    4d:7a:b4:79:0b:e3:4f:02:5f:63:e2:03:7b:73:1d:
                    ac:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:24:7B:37:AA:AF:0C:83:85:73:BA:1F:0D:A5:2E:B7:84:AF:5A:B0
            X509v3 Authority Key Identifier:
                keyid:66:6E:55:8A:BA:E9:C9:58:69:02:07:7E:3E:69:7F:13:A6:9C:98:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/666E558ABAE9C9586902077E3E697F13A69C98BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666E558ABAE9C9586902077E3E697F13A69C98BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/34352e3136352e3231362e302f32322d3232203d3e20323637393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:aa:3b:02:87:a8:89:d0:bd:b3:12:6b:c3:6b:d3:80:92:d9:
         1f:98:14:65:3d:93:44:d3:e6:8a:9f:92:61:87:cf:77:1c:a2:
         7c:7c:1c:ce:43:60:9b:de:20:d9:cd:9c:5d:88:93:c6:93:5e:
         6a:d9:03:95:63:16:5e:84:38:5c:b6:bc:dc:12:43:e4:ca:9b:
         34:a4:92:ce:65:8a:f1:9c:04:1e:16:f1:31:da:c2:d9:43:3e:
         d4:76:6a:4b:ec:83:f4:25:36:7d:12:0e:76:98:38:23:fb:9f:
         9c:de:c6:37:6e:7f:88:ba:00:98:d9:db:13:0c:96:76:1f:e4:
         36:61:cc:dd:0c:d4:9e:fe:e5:ac:2e:98:5c:5e:6d:78:c1:1e:
         bd:bd:cd:49:4c:0a:0e:fc:c4:0d:f8:b9:7d:05:64:80:f4:e3:
         68:85:c8:db:2f:aa:57:b7:cc:30:ed:02:47:ed:15:59:49:d2:
         44:ae:39:b2:0a:9c:47:9a:ee:75:bb:39:2e:54:cd:b3:4b:74:
         f9:99:59:73:d0:b2:f0:72:33:e6:00:24:8d:69:42:72:a2:b4:
         2d:3d:5c:e6:11:79:9f:df:1a:3b:44:d7:7a:5b:78:ec:ad:c3:
         2f:cc:e5:32:b2:d2:93:0a:d8:28:51:d6:92:c4:5c:79:cf:f5:
         9c:ad:7b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 07:40:29 2024 by rpki-client on console-ams.rpki-client.org