Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/34352e3136352e3231392e302f32342d3234203d3e20323637393430.roa
File:                     34352e3136352e3231392e302f32342d3234203d3e20323637393430.roa (raw, json)
Hash identifier:          KyICAyY0JR7gX2/QVZ+Qi/H45OJrCg4wm0RjCr4gVao=
Subject key identifier:   B7:A3:C5:8D:43:EC:D1:4B:5E:64:CB:C6:C2:6E:42:EC:62:27:78:79
Certificate issuer:       /CN=666E558ABAE9C9586902077E3E697F13A69C98BE
Certificate serial:       3BA853013A7BE9F7EE842F8F8B8A4A4516C8EC83
Authority key identifier: 66:6E:55:8A:BA:E9:C9:58:69:02:07:7E:3E:69:7F:13:A6:9C:98:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666E558ABAE9C9586902077E3E697F13A69C98BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/34352e3136352e3231392e302f32342d3234203d3e20323637393430.roa
Signing time:             Tue 30 Apr 2024 19:54:44 +0000
ROA not before:           Tue 30 Apr 2024 19:49:44 +0000
ROA not after:            Tue 29 Apr 2025 19:54:44 +0000
asID:                     267940
IP address blocks:        45.165.219.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/666E558ABAE9C9586902077E3E697F13A69C98BE.crl
                          rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/666E558ABAE9C9586902077E3E697F13A69C98BE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666E558ABAE9C9586902077E3E697F13A69C98BE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 18 Jun 2024 06:13:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:a8:53:01:3a:7b:e9:f7:ee:84:2f:8f:8b:8a:4a:45:16:c8:ec:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=666E558ABAE9C9586902077E3E697F13A69C98BE
        Validity
            Not Before: Apr 30 19:49:44 2024 GMT
            Not After : Apr 29 19:54:44 2025 GMT
        Subject: CN=B7A3C58D43ECD14B5E64CBC6C26E42EC62277879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2b:92:2b:1b:aa:12:cd:6a:56:63:c3:04:f9:
                    9e:37:58:16:b8:6e:77:2d:fa:a2:3d:fd:e0:b9:70:
                    68:4e:6c:45:1b:e7:16:b7:fe:25:95:12:df:4b:da:
                    35:d8:2d:fe:ce:2e:a1:70:48:01:6d:d6:aa:f0:1a:
                    42:18:fa:65:77:2a:26:83:e5:30:a2:67:a8:42:d7:
                    9a:69:37:1d:ff:9c:1e:8d:66:23:a9:e4:44:bb:f9:
                    8d:5d:23:e0:c3:5a:f9:87:9f:42:d8:2f:4a:6b:1b:
                    48:83:5c:b1:fc:32:b1:cd:11:df:da:a3:44:0a:ce:
                    a3:66:41:53:f9:87:8c:91:b6:53:ca:df:73:34:13:
                    ca:0e:83:0f:c7:ef:24:8f:7c:c2:f0:cf:f7:ac:cb:
                    51:76:2a:7d:76:66:77:be:44:5c:c3:db:80:11:7a:
                    56:7a:e2:af:85:e5:28:44:87:3d:ec:72:ee:06:c2:
                    f3:11:1c:ca:bd:d4:94:29:30:e1:58:21:8b:ba:38:
                    5a:40:32:62:66:0d:df:60:ac:d5:4d:96:f8:3b:67:
                    1f:ae:91:6c:f8:a9:95:c3:2f:c6:e7:76:c3:5b:42:
                    92:25:ed:4f:11:63:34:75:e4:a2:8a:aa:58:18:e6:
                    91:9a:20:1f:42:20:21:c6:10:cb:59:2d:08:8b:87:
                    a5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:A3:C5:8D:43:EC:D1:4B:5E:64:CB:C6:C2:6E:42:EC:62:27:78:79
            X509v3 Authority Key Identifier:
                keyid:66:6E:55:8A:BA:E9:C9:58:69:02:07:7E:3E:69:7F:13:A6:9C:98:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/666E558ABAE9C9586902077E3E697F13A69C98BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666E558ABAE9C9586902077E3E697F13A69C98BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/34352e3136352e3231392e302f32342d3234203d3e20323637393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:c1:9f:5a:77:d3:32:d3:fe:4e:02:4e:a0:58:96:b2:16:aa:
         e0:9b:1e:a1:3c:7b:4b:60:12:d6:8b:5a:1c:fa:ca:d5:d1:c9:
         dc:34:e8:3f:54:50:c4:29:6d:dd:c1:d2:25:2b:88:c7:86:30:
         cd:ab:2d:ab:e4:ac:35:46:f9:45:97:83:ff:95:72:a2:b3:07:
         51:27:6e:e1:a9:4e:0a:62:8f:4c:8b:56:47:4f:8c:5a:4d:02:
         54:f0:fe:93:35:2e:16:19:aa:5f:02:cb:83:e2:36:a7:c6:c6:
         92:b0:cc:8f:0c:cf:08:a8:1a:d3:d8:3b:fc:ad:33:8e:06:f7:
         df:d0:20:d0:39:6f:7e:cd:ae:7d:ff:9a:2c:8c:6a:9e:f1:44:
         9e:bc:2c:dd:e6:08:de:55:64:c9:46:1b:24:f7:e4:41:cd:d7:
         8c:f9:ca:98:e4:4c:c6:16:34:9c:d6:66:85:e5:44:a2:80:81:
         9d:59:a0:ad:d4:27:a3:07:3e:8d:ad:20:62:de:62:af:d4:e4:
         19:ff:a7:30:e5:61:b3:4a:e1:64:f0:74:1d:3a:f7:c6:d9:59:
         7f:db:a7:b5:23:3e:e0:28:d8:23:3b:98:2d:16:08:93:21:22:
         56:03:18:f1:72:ff:c2:6d:06:20:63:13:a9:4a:c0:02:dd:39:
         78:e1:96:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 11:41:17 2024 by rpki-client on console-ams.rpki-client.org