Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/1/3139302e3139362e3234342e302f32322d3232203d3e20323636313736.roa
File:                     3139302e3139362e3234342e302f32322d3232203d3e20323636313736.roa (raw, json)
Hash identifier:          Gn5gZk80qWK7thyrmFPLmk+ARQL4h6pRue0GxmES1YQ=
Subject key identifier:   5B:53:B8:C7:DE:D2:7C:0E:37:29:2A:CD:AF:1B:F1:B8:C6:8E:3F:25
Certificate issuer:       /CN=EBCADF4D0592A8CD0131D2F68CFD7741566B7FE4
Certificate serial:       0227E1A1FC54FA55E974232784795CF01DE77212
Authority key identifier: EB:CA:DF:4D:05:92:A8:CD:01:31:D2:F6:8C:FD:77:41:56:6B:7F:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBCADF4D0592A8CD0131D2F68CFD7741566B7FE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/1/3139302e3139362e3234342e302f32322d3232203d3e20323636313736.roa
Signing time:             Fri 05 Apr 2024 00:44:52 +0000
ROA not before:           Fri 05 Apr 2024 00:39:52 +0000
ROA not after:            Fri 04 Apr 2025 00:44:52 +0000
asID:                     266176
IP address blocks:        190.196.244.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/1/EBCADF4D0592A8CD0131D2F68CFD7741566B7FE4.crl
                          rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/1/EBCADF4D0592A8CD0131D2F68CFD7741566B7FE4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBCADF4D0592A8CD0131D2F68CFD7741566B7FE4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:27:e1:a1:fc:54:fa:55:e9:74:23:27:84:79:5c:f0:1d:e7:72:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBCADF4D0592A8CD0131D2F68CFD7741566B7FE4
        Validity
            Not Before: Apr  5 00:39:52 2024 GMT
            Not After : Apr  4 00:44:52 2025 GMT
        Subject: CN=5B53B8C7DED27C0E37292ACDAF1BF1B8C68E3F25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:dc:0f:fb:40:68:29:f4:fe:7b:02:31:78:3d:
                    d9:50:f7:8a:29:40:b8:1d:f4:7f:0d:63:e7:9e:dd:
                    4a:16:24:06:5e:8b:3b:4f:5b:ae:6c:3a:27:fa:5c:
                    9c:54:9c:d2:28:e7:51:9a:ea:ae:73:a3:76:af:0b:
                    4b:2e:f4:d3:00:84:c9:60:3b:47:4a:46:d6:15:34:
                    c8:c5:e2:24:9d:dd:9c:c2:2f:d3:a6:ba:4b:93:e7:
                    a8:37:e8:13:cf:ad:93:b5:9f:48:77:8b:d2:84:c4:
                    6b:06:6f:cc:18:de:a6:30:c4:40:99:3e:69:56:46:
                    72:14:f6:72:26:44:4a:ab:53:aa:f5:8e:56:2d:e3:
                    05:53:bf:f0:a0:a7:1b:24:2c:30:bd:b5:a9:5c:9a:
                    b0:0c:0b:82:22:5f:f0:2f:50:1d:f1:d9:06:7a:e6:
                    ac:60:a3:6f:5e:15:02:fd:b1:9b:72:c8:1f:b1:00:
                    79:6d:3b:65:8a:0e:09:bc:16:b4:7c:fc:61:be:47:
                    79:50:c3:58:4a:8d:b7:52:a0:82:e9:5e:00:cc:70:
                    99:36:67:cf:e5:eb:b3:5a:78:bd:0b:c2:b2:d8:e2:
                    2c:ed:55:ca:a4:ed:1e:6c:33:9b:4a:50:89:62:3d:
                    02:a8:f8:08:f0:3b:0d:c6:5d:8f:63:bc:8f:5e:eb:
                    cf:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:53:B8:C7:DE:D2:7C:0E:37:29:2A:CD:AF:1B:F1:B8:C6:8E:3F:25
            X509v3 Authority Key Identifier:
                keyid:EB:CA:DF:4D:05:92:A8:CD:01:31:D2:F6:8C:FD:77:41:56:6B:7F:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/1/EBCADF4D0592A8CD0131D2F68CFD7741566B7FE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBCADF4D0592A8CD0131D2F68CFD7741566B7FE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/1/3139302e3139362e3234342e302f32322d3232203d3e20323636313736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.196.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:dc:8c:fb:4b:78:3d:19:c4:af:d4:fc:94:2d:08:65:7d:2e:
         e6:b0:43:f9:d9:70:da:c0:e5:e4:f3:89:2f:6e:56:6a:ee:fa:
         61:05:70:a0:82:8c:ee:b3:92:5c:b8:50:aa:a3:57:1e:fb:43:
         80:76:03:3b:3d:22:2b:5d:18:57:2f:81:a7:c5:ab:13:a3:5f:
         f7:ae:d2:56:e9:08:2c:5a:64:16:ed:71:a5:06:28:15:c5:10:
         13:05:e5:40:48:b4:8e:c5:04:50:3b:6e:dd:06:ec:e3:8a:69:
         aa:a5:d0:47:65:33:79:a3:d2:9c:4a:72:c2:5c:ff:e2:79:59:
         ff:2b:1d:a9:12:3a:b7:31:e7:dc:d0:89:a6:a3:c0:5f:c8:9b:
         f4:89:29:e3:6c:32:96:ad:fe:bc:20:d5:95:88:e1:cd:9f:4b:
         e0:e2:31:5b:c7:ec:8d:87:32:df:35:3e:6d:fe:5f:b0:b6:7a:
         5b:e0:91:85:13:32:a4:ce:c5:5b:5d:c0:28:86:f2:15:7c:48:
         b1:a0:5e:5d:4e:5c:d0:61:dc:e7:41:12:f6:8c:bd:48:b3:7e:
         8e:c1:0c:8a:6b:3f:30:74:82:d9:c9:33:70:4c:9f:0c:c8:19:
         55:51:07:22:dc:60:2d:a7:90:c1:ce:1b:73:18:26:80:2f:85:
         b6:cb:f1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 07:19:15 2024 by rpki-client on console-ams.rpki-client.org