Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/34352e3136352e3231382e302f32342d3234203d3e20323637393430.roa
File:                     34352e3136352e3231382e302f32342d3234203d3e20323637393430.roa (raw, json)
Hash identifier:          jn15qMZdLfhliPBKgYulvFr3ibVXBJgp6hHXcJksGnU=
Subject key identifier:   FA:0A:51:28:BC:AC:A5:AC:37:73:14:90:07:D3:4F:7E:BB:7D:B9:ED
Certificate issuer:       /CN=666E558ABAE9C9586902077E3E697F13A69C98BE
Certificate serial:       10F6CED3DEC105163BB5B8CFB4CBCEC0084FAB5D
Authority key identifier: 66:6E:55:8A:BA:E9:C9:58:69:02:07:7E:3E:69:7F:13:A6:9C:98:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666E558ABAE9C9586902077E3E697F13A69C98BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/34352e3136352e3231382e302f32342d3234203d3e20323637393430.roa
Signing time:             Tue 30 Apr 2024 19:54:45 +0000
ROA not before:           Tue 30 Apr 2024 19:49:45 +0000
ROA not after:            Tue 29 Apr 2025 19:54:45 +0000
asID:                     267940
IP address blocks:        45.165.218.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/666E558ABAE9C9586902077E3E697F13A69C98BE.crl
                          rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/666E558ABAE9C9586902077E3E697F13A69C98BE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666E558ABAE9C9586902077E3E697F13A69C98BE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 19:24:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:f6:ce:d3:de:c1:05:16:3b:b5:b8:cf:b4:cb:ce:c0:08:4f:ab:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=666E558ABAE9C9586902077E3E697F13A69C98BE
        Validity
            Not Before: Apr 30 19:49:45 2024 GMT
            Not After : Apr 29 19:54:45 2025 GMT
        Subject: CN=FA0A5128BCACA5AC3773149007D34F7EBB7DB9ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3f:e6:12:e3:fd:be:43:e7:87:56:f1:92:52:
                    17:38:b9:3a:2c:cf:0b:15:34:2b:2b:84:e2:8d:fd:
                    f8:b0:35:c8:18:d1:59:3f:ad:ec:7f:17:e7:7a:f7:
                    ca:dd:79:fc:2f:c5:d5:78:c2:fa:d1:91:f1:eb:50:
                    18:f2:4a:36:ee:81:9e:2d:4e:a0:20:f1:1f:95:22:
                    7c:ea:f7:99:68:56:7f:64:2c:5c:7e:60:54:7f:ea:
                    47:ec:64:a9:e8:63:0e:e6:b0:e6:69:7f:7e:89:70:
                    41:e9:a2:cb:24:45:08:ad:8a:79:ba:7e:8e:73:e3:
                    75:e5:3c:d1:52:7c:25:cc:2a:47:bc:1e:5e:9a:e3:
                    9c:24:cc:6e:0b:2a:46:ce:04:0a:19:e6:ac:96:f8:
                    61:e5:8a:b9:3b:f3:fb:30:5a:a6:60:44:89:0e:d5:
                    aa:52:f6:84:39:45:21:21:0a:78:f8:0b:77:b0:61:
                    59:59:95:8f:27:a5:8e:a9:14:ce:7f:67:a9:b0:01:
                    12:94:69:45:83:67:ba:4c:d0:96:d7:3e:b6:25:80:
                    c8:30:78:01:fb:fc:e0:4a:50:41:0f:04:d2:e5:f2:
                    ef:7c:7f:20:6d:55:8b:9e:d3:f2:52:c5:4c:2a:f1:
                    17:04:7b:78:44:be:07:18:7e:ec:47:72:c1:47:1a:
                    b4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:0A:51:28:BC:AC:A5:AC:37:73:14:90:07:D3:4F:7E:BB:7D:B9:ED
            X509v3 Authority Key Identifier:
                keyid:66:6E:55:8A:BA:E9:C9:58:69:02:07:7E:3E:69:7F:13:A6:9C:98:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/666E558ABAE9C9586902077E3E697F13A69C98BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666E558ABAE9C9586902077E3E697F13A69C98BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/34352e3136352e3231382e302f32342d3234203d3e20323637393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:ba:00:a5:45:1c:d4:26:c1:0b:73:66:b9:f0:9e:ed:e3:e2:
         57:54:65:47:39:25:26:ae:d2:1f:4c:22:b8:1a:17:68:12:e8:
         43:8f:c1:a6:fd:f4:ff:e9:02:3d:0b:9f:ba:d3:0e:77:3b:b4:
         a3:75:5b:ed:43:5b:24:b2:d3:7e:28:5f:b3:d5:8d:11:1d:8b:
         26:59:81:0c:fc:50:9d:69:53:f4:44:80:5f:98:17:33:f2:5d:
         b3:fc:4a:fb:5d:71:88:a0:14:fe:68:cf:09:b7:f9:7d:73:af:
         ce:28:67:20:ff:32:22:1f:ff:32:c6:cc:ac:66:df:52:26:56:
         6e:10:70:2d:6b:76:6a:a7:91:fc:3c:c0:30:e0:92:d9:fa:7d:
         b6:c2:59:98:3d:ce:00:be:12:f1:5c:f2:87:74:e5:66:05:f1:
         58:e1:87:f6:e1:84:a0:76:f7:5d:7c:e8:5a:ea:26:52:6f:00:
         32:8f:ad:97:f5:59:7c:97:7c:ce:b3:15:ae:f8:e8:98:89:44:
         88:6e:25:ba:cd:d0:59:ef:13:25:ac:f6:c3:4e:d2:3e:56:18:
         91:34:78:f5:52:bc:26:85:ce:da:f9:16:b8:4a:ea:eb:37:b9:
         08:6c:8a:5b:2d:fc:c4:82:db:11:77:cc:4b:c0:e5:da:6d:0a:
         95:8b:73:ba
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUEPbO097BBRY7tbjPtMvOwAhPq10wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjY2RTU1OEFCQUU5Qzk1ODY5MDIwNzdFM0U2OTdGMTNB
NjlDOThCRTAeFw0yNDA0MzAxOTQ5NDVaFw0yNTA0MjkxOTU0NDVaMDMxMTAvBgNV
BAMTKEZBMEE1MTI4QkNBQ0E1QUMzNzczMTQ5MDA3RDM0RjdFQkI3REI5RUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOP+YS4/2+Q+eHVvGSUhc4uTos
zwsVNCsrhOKN/fiwNcgY0Vk/rex/F+d698rdefwvxdV4wvrRkfHrUBjySjbugZ4t
TqAg8R+VInzq95loVn9kLFx+YFR/6kfsZKnoYw7msOZpf36JcEHposskRQitinm6
fo5z43XlPNFSfCXMKke8Hl6a45wkzG4LKkbOBAoZ5qyW+GHlirk78/swWqZgRIkO
1apS9oQ5RSEhCnj4C3ewYVlZlY8npY6pFM5/Z6mwARKUaUWDZ7pM0JbXPrYlgMgw
eAH7/OBKUEEPBNLl8u98fyBtVYue0/JSxUwq8RcEe3hEvgcYfuxHcsFHGrSTAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU+gpRKLyspaw3cxSQB9NPfrt9ue0wHwYDVR0j
BBgwFoAUZm5VirrpyVhpAgd+Pml/E6acmL4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNldjNk5IeWtnd0d6NmtyQU5LSkxoNGNOUmY1MWExc2NGUkFkTXVHanQ3
a3cvMC82NjZFNTU4QUJBRTlDOTU4NjkwMjA3N0UzRTY5N0YxM0E2OUM5OEJFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY2NkU1NThBQkFFOUM5NTg2
OTAyMDc3RTNFNjk3RjEzQTY5Qzk4QkUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZXYzZOSHlrZ3dHejZrckFOS0pMaDRjTlJmNTFhMXNjRlJBZE11R2p0N2t3LzAv
MzQzNTJlMzEzNjM1MmUzMjMxMzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzczOTM0MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtpdowDQYJKoZIhvcNAQELBQADggEBAJG6AKVF
HNQmwQtzZrnwnu3j4ldUZUc5JSau0h9MIrgaF2gS6EOPwab99P/pAj0Ln7rTDnc7
tKN1W+1DWySy034oX7PVjREdiyZZgQz8UJ1pU/REgF+YFzPyXbP8SvtdcYigFP5o
zwm3+X1zr84oZyD/MiIf/zLGzKxm31ImVm4QcC1rdmqnkfw8wDDgktn6fbbCWZg9
zgC+EvFc8od05WYF8Vjhh/bhhKB291186FrqJlJvADKPrZf1WXyXfM6zFa746JiJ
RIhuJbrN0FnvEyWs9sNO0j5WGJE0ePVSvCaFztr5FrhK6us3uQhsilst/MSC2xF3
zEvA5dptCpWLc7o=
-----END CERTIFICATE-----
Generated at Sat Jun 1 18:06:31 2024 by rpki-client on console-ams.rpki-client.org