Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/34352e3136352e3231382e302f32332d3233203d3e20323637393430.roa
File:                     34352e3136352e3231382e302f32332d3233203d3e20323637393430.roa (raw, json)
Hash identifier:          QMDOgJubeu3qtr1Q7w5JFh6RbOd1fIBdo9qfpUPWZ34=
Subject key identifier:   2B:74:71:29:F7:5F:2E:77:C8:4D:C3:D9:90:69:ED:14:6B:8A:2C:9D
Certificate issuer:       /CN=666E558ABAE9C9586902077E3E697F13A69C98BE
Certificate serial:       6A9F97AA323AE88117456C4070B7C1836406DC2E
Authority key identifier: 66:6E:55:8A:BA:E9:C9:58:69:02:07:7E:3E:69:7F:13:A6:9C:98:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666E558ABAE9C9586902077E3E697F13A69C98BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/34352e3136352e3231382e302f32332d3233203d3e20323637393430.roa
Signing time:             Tue 30 Apr 2024 19:54:44 +0000
ROA not before:           Tue 30 Apr 2024 19:49:44 +0000
ROA not after:            Tue 29 Apr 2025 19:54:44 +0000
asID:                     267940
IP address blocks:        45.165.218.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/666E558ABAE9C9586902077E3E697F13A69C98BE.crl
                          rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/666E558ABAE9C9586902077E3E697F13A69C98BE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666E558ABAE9C9586902077E3E697F13A69C98BE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 16:28:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:9f:97:aa:32:3a:e8:81:17:45:6c:40:70:b7:c1:83:64:06:dc:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=666E558ABAE9C9586902077E3E697F13A69C98BE
        Validity
            Not Before: Apr 30 19:49:44 2024 GMT
            Not After : Apr 29 19:54:44 2025 GMT
        Subject: CN=2B747129F75F2E77C84DC3D99069ED146B8A2C9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7f:c0:a7:87:f7:0a:8c:a6:d1:ec:42:e0:c8:
                    9e:64:5d:1d:33:ed:cb:fe:68:cd:12:9d:0f:b0:60:
                    1d:89:ec:bf:02:6c:0e:85:8f:7d:c3:46:c4:e5:9d:
                    2e:97:06:db:f8:b5:b7:a5:c2:d9:3f:07:8f:f3:2f:
                    b1:dc:62:78:4b:8d:d5:7a:14:88:86:b3:b8:f2:1b:
                    57:98:27:bb:99:2d:ad:f0:9e:c0:d8:e8:7b:89:b1:
                    3d:e2:d7:47:c5:3b:a3:1e:e7:49:70:78:f2:b3:81:
                    98:65:51:ca:56:68:3a:a5:b6:24:f6:1a:2f:a9:77:
                    e3:74:4e:af:12:25:b0:02:92:ad:06:53:78:4f:88:
                    2d:cc:61:84:57:14:d4:27:37:e1:4d:fd:1f:1c:61:
                    17:6d:a4:39:85:c6:e3:87:7d:8a:15:88:d9:df:91:
                    be:cc:ab:89:04:41:ae:86:49:60:aa:60:d6:b2:37:
                    88:11:8f:51:06:56:48:40:76:3b:43:f9:b7:04:a0:
                    f9:df:22:14:fc:30:54:7d:63:98:6c:ae:cd:77:aa:
                    5f:8c:a7:18:db:99:cd:60:6b:b8:30:1d:ab:84:b2:
                    72:37:1a:30:3f:93:21:75:fd:8b:dd:f2:28:99:6c:
                    69:77:9a:54:19:0a:43:55:90:54:d2:a5:29:c4:86:
                    39:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:74:71:29:F7:5F:2E:77:C8:4D:C3:D9:90:69:ED:14:6B:8A:2C:9D
            X509v3 Authority Key Identifier:
                keyid:66:6E:55:8A:BA:E9:C9:58:69:02:07:7E:3E:69:7F:13:A6:9C:98:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/666E558ABAE9C9586902077E3E697F13A69C98BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666E558ABAE9C9586902077E3E697F13A69C98BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/34352e3136352e3231382e302f32332d3233203d3e20323637393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         84:23:2f:84:8b:7f:8e:99:91:6c:b8:d4:fb:94:58:e6:19:ac:
         45:3a:a9:9f:ff:40:70:21:37:48:18:e9:6f:38:cb:3f:b2:2d:
         93:33:04:7b:a0:5e:7b:fb:24:0a:3d:72:d1:60:32:ce:5a:dc:
         7e:1c:62:a9:ae:f2:1b:48:b1:7d:22:f5:1b:4b:c5:e3:bc:b4:
         d0:4e:e2:7d:99:5c:ae:ac:d0:27:17:c7:e5:99:a3:4f:70:7a:
         92:15:ff:7d:be:72:33:6b:bd:b8:e5:a4:c4:af:f0:70:68:9d:
         51:0e:38:13:6c:9a:ff:67:a6:2f:12:a9:ee:bb:21:19:e4:3c:
         29:50:27:8e:fb:67:10:6a:3c:2e:5b:06:ae:b9:1e:a7:6a:b6:
         85:4d:b3:49:13:65:0f:44:dd:64:fc:6c:86:52:77:97:74:5c:
         05:a8:4d:a0:66:8a:b5:23:1c:c7:9a:db:35:1b:06:2e:04:7d:
         10:df:dc:35:00:53:3b:68:6b:3c:89:c3:58:40:a2:fa:d9:a0:
         bb:13:d1:00:37:40:8c:80:aa:1f:87:6c:b1:4e:ca:8b:c4:5a:
         f7:b6:e1:de:68:a0:06:4f:33:21:24:f6:b6:e7:46:7f:9d:b3:
         83:a6:87:3d:e7:db:95:bb:90:e5:3d:68:12:58:b9:79:dd:71:
         ce:e6:c3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:05:13 2024 by rpki-client on console-fra.rpki-client.org