Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/1/3139302e3139362e3234342e302f32332d3234203d3e20323636313736.roa
File:                     3139302e3139362e3234342e302f32332d3234203d3e20323636313736.roa (raw, json)
Hash identifier:          vEvA5JL6p6uh8alJ42XwnqpiARsP/sUVdxK9ItgwZZ0=
Subject key identifier:   71:A0:C3:1D:12:3B:4A:10:F9:F3:25:BD:7D:D3:0E:87:71:35:BE:C2
Certificate issuer:       /CN=EBCADF4D0592A8CD0131D2F68CFD7741566B7FE4
Certificate serial:       666AA6A07E65870BC7FF2B47F99F039DCA1FFE43
Authority key identifier: EB:CA:DF:4D:05:92:A8:CD:01:31:D2:F6:8C:FD:77:41:56:6B:7F:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBCADF4D0592A8CD0131D2F68CFD7741566B7FE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/1/3139302e3139362e3234342e302f32332d3234203d3e20323636313736.roa
Signing time:             Tue 21 May 2024 01:39:06 +0000
ROA not before:           Tue 21 May 2024 01:34:06 +0000
ROA not after:            Tue 20 May 2025 01:39:06 +0000
asID:                     266176
IP address blocks:        190.196.244.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/1/EBCADF4D0592A8CD0131D2F68CFD7741566B7FE4.crl
                          rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/1/EBCADF4D0592A8CD0131D2F68CFD7741566B7FE4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBCADF4D0592A8CD0131D2F68CFD7741566B7FE4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 10:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:6a:a6:a0:7e:65:87:0b:c7:ff:2b:47:f9:9f:03:9d:ca:1f:fe:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBCADF4D0592A8CD0131D2F68CFD7741566B7FE4
        Validity
            Not Before: May 21 01:34:06 2024 GMT
            Not After : May 20 01:39:06 2025 GMT
        Subject: CN=71A0C31D123B4A10F9F325BD7DD30E877135BEC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3c:e9:fd:ff:ad:7d:2c:03:a1:37:ff:23:d3:
                    30:24:bc:dd:a7:f1:21:23:a3:08:d1:f3:fa:77:d1:
                    a5:a8:b1:e8:ce:78:cd:a4:3f:00:9d:21:61:cc:6f:
                    fa:17:78:74:db:84:23:8e:c5:01:db:6b:c7:af:a6:
                    39:f4:93:ae:9c:3f:f6:b5:2c:77:e8:ec:bc:89:64:
                    d0:3e:a9:97:81:09:5e:8c:03:96:a1:ef:ac:e6:10:
                    35:3a:c5:48:f5:80:57:d3:0b:8b:76:46:4a:de:f9:
                    01:f1:49:2a:15:50:86:3d:66:56:bd:d8:11:e6:8b:
                    d2:ef:85:7e:35:b5:64:df:2a:33:41:bb:e6:0b:b2:
                    ce:26:0c:f6:da:2a:6c:65:42:65:c0:d8:99:86:a5:
                    9d:99:ff:cc:11:52:93:55:4d:96:d2:9c:94:44:a4:
                    74:8c:1c:6b:2e:ac:8f:57:bd:33:6e:1a:96:3b:94:
                    30:ca:0b:79:c3:d3:04:02:25:ed:9e:12:78:1d:64:
                    f9:81:74:91:67:7a:fc:8b:8e:2f:bd:cc:2a:68:03:
                    38:14:72:83:1a:7f:3a:a5:3f:ba:c4:31:5f:88:32:
                    ba:75:34:0d:2c:22:75:e9:6c:08:38:68:5f:81:a9:
                    c0:a5:c8:95:da:0f:25:91:d7:1b:24:fc:82:24:12:
                    8f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:A0:C3:1D:12:3B:4A:10:F9:F3:25:BD:7D:D3:0E:87:71:35:BE:C2
            X509v3 Authority Key Identifier:
                keyid:EB:CA:DF:4D:05:92:A8:CD:01:31:D2:F6:8C:FD:77:41:56:6B:7F:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/1/EBCADF4D0592A8CD0131D2F68CFD7741566B7FE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBCADF4D0592A8CD0131D2F68CFD7741566B7FE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/1/3139302e3139362e3234342e302f32332d3234203d3e20323636313736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.196.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         84:30:9c:89:0b:12:d8:30:6b:e4:32:5a:23:4c:5d:a0:6c:5d:
         5f:78:81:61:f2:00:12:a4:d9:e8:6b:d4:e7:97:6e:48:2d:cc:
         01:f3:40:33:5f:7c:49:89:0f:44:df:58:6a:1c:bb:50:d5:a7:
         27:7f:de:ce:49:d4:6a:8c:03:bd:4f:e8:10:4c:04:45:6b:f4:
         22:8f:80:28:a1:b9:f6:1f:c9:57:c3:bd:f1:7d:02:af:4f:6b:
         14:34:2b:5c:41:d1:c0:21:02:a4:f2:f8:3f:3b:17:c5:28:11:
         39:63:d5:68:7b:04:e2:fb:43:81:20:96:ee:47:9c:20:f3:4f:
         66:5b:35:ec:b3:45:d9:38:41:a0:70:fa:bc:36:ec:10:56:e5:
         eb:ea:5d:de:15:e0:39:2d:f9:e4:5b:45:e5:6f:4c:43:5e:62:
         d7:e0:37:68:e0:2d:46:db:d3:45:98:ff:f5:03:d6:c9:3d:6a:
         fe:0c:79:89:2c:62:68:17:b7:cb:34:58:f6:64:82:3f:f7:3b:
         0f:42:19:bd:37:36:68:47:62:ec:9b:b1:e7:1f:23:4a:c2:8d:
         fa:1f:9a:98:ec:12:9b:56:74:72:41:1d:6c:23:46:04:3a:fe:
         84:b6:21:d0:55:d2:47:93:33:71:cc:a5:39:b8:48:4d:f2:97:
         27:a3:6a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 10:31:29 2024 by rpki-client on console-fra.rpki-client.org