Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/1/3139302e3139362e3234372e302f32342d3234203d3e20323636313736.roa
File:                     3139302e3139362e3234372e302f32342d3234203d3e20323636313736.roa (raw, json)
Hash identifier:          wx4JF9WNqALKkuXbKiHySIgvtTR59U5+G7tgztZ0QR0=
Subject key identifier:   CB:79:FF:40:5D:47:DE:4A:D4:FE:3B:0A:F3:C8:F8:D7:B2:2B:99:F7
Certificate issuer:       /CN=EBCADF4D0592A8CD0131D2F68CFD7741566B7FE4
Certificate serial:       6F26A3D8FF8F4AE085F8FDDD7C161383439286F0
Authority key identifier: EB:CA:DF:4D:05:92:A8:CD:01:31:D2:F6:8C:FD:77:41:56:6B:7F:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBCADF4D0592A8CD0131D2F68CFD7741566B7FE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/1/3139302e3139362e3234372e302f32342d3234203d3e20323636313736.roa
Signing time:             Fri 05 Apr 2024 00:44:52 +0000
ROA not before:           Fri 05 Apr 2024 00:39:52 +0000
ROA not after:            Fri 04 Apr 2025 00:44:52 +0000
asID:                     266176
IP address blocks:        190.196.247.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/1/EBCADF4D0592A8CD0131D2F68CFD7741566B7FE4.crl
                          rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/1/EBCADF4D0592A8CD0131D2F68CFD7741566B7FE4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBCADF4D0592A8CD0131D2F68CFD7741566B7FE4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 05:14:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:26:a3:d8:ff:8f:4a:e0:85:f8:fd:dd:7c:16:13:83:43:92:86:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBCADF4D0592A8CD0131D2F68CFD7741566B7FE4
        Validity
            Not Before: Apr  5 00:39:52 2024 GMT
            Not After : Apr  4 00:44:52 2025 GMT
        Subject: CN=CB79FF405D47DE4AD4FE3B0AF3C8F8D7B22B99F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ba:1d:86:ee:fd:b1:c8:0b:b1:c8:1b:2e:77:
                    1c:9d:f2:ef:b3:17:af:4c:24:c4:d0:0c:32:fa:37:
                    b1:10:ab:4a:e8:03:4d:b4:b1:2b:c5:51:a9:65:03:
                    b6:36:dd:d8:aa:9f:c5:e3:a0:e3:56:0d:31:6d:12:
                    3e:25:da:08:e1:3c:31:53:8d:52:96:ae:d1:6d:6b:
                    75:80:44:cc:d9:f8:35:b7:ea:0a:20:d1:8f:9d:d2:
                    23:dc:23:41:fd:38:b2:0a:e3:e8:dd:95:a5:86:37:
                    56:85:9f:76:57:67:7c:96:32:43:b5:9a:9a:bd:88:
                    a5:57:a1:8e:0c:e2:1c:76:4f:58:d7:b5:51:40:0c:
                    2d:85:b3:08:d9:4d:65:42:f3:79:d4:b0:71:67:2e:
                    d1:13:16:24:f3:ba:f4:ba:b0:0f:13:2b:4e:f0:d3:
                    6f:db:16:02:a3:0b:62:85:1b:e7:20:d5:14:54:6e:
                    2c:78:43:40:23:3e:fa:57:41:86:48:ab:4e:ad:42:
                    56:a1:36:9b:ef:1f:eb:56:87:fa:b1:e0:7b:ba:84:
                    a0:90:fc:7e:bf:a1:6a:2d:fd:16:5c:71:fc:68:32:
                    ac:bf:dc:a2:5e:1c:af:c8:08:04:dd:9f:54:ac:ab:
                    4f:5b:16:f7:04:5e:c2:18:18:06:58:30:45:52:d2:
                    e1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:79:FF:40:5D:47:DE:4A:D4:FE:3B:0A:F3:C8:F8:D7:B2:2B:99:F7
            X509v3 Authority Key Identifier:
                keyid:EB:CA:DF:4D:05:92:A8:CD:01:31:D2:F6:8C:FD:77:41:56:6B:7F:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/1/EBCADF4D0592A8CD0131D2F68CFD7741566B7FE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBCADF4D0592A8CD0131D2F68CFD7741566B7FE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/1/3139302e3139362e3234372e302f32342d3234203d3e20323636313736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.196.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:44:5f:65:8c:d0:6c:b5:3f:2b:19:c8:fb:37:0a:89:c1:e5:
         ac:37:96:4d:29:d7:3a:5d:3d:55:1e:38:c3:2c:47:99:6f:37:
         e2:89:c8:f0:e6:ee:1f:9e:3c:67:22:81:f3:f0:35:14:48:a5:
         41:c0:ea:53:2a:de:91:56:60:f8:88:5a:2c:65:77:19:7b:50:
         0a:32:66:c6:c0:f9:67:86:bf:1f:36:a9:a6:5c:a8:77:94:10:
         b2:4f:db:4e:a2:42:38:b1:fd:69:b8:00:41:5e:e7:85:86:2e:
         ed:ba:c8:75:49:0d:47:3b:53:6b:00:70:8f:cd:35:2b:e9:e1:
         0d:13:85:ed:b5:58:37:b4:a5:2e:4f:d8:c5:92:51:db:89:38:
         a1:23:c9:a7:0a:58:27:fe:6c:65:6b:00:87:12:f6:c9:62:f3:
         2a:90:ee:2b:2d:cb:46:60:b1:6c:22:0b:68:8b:e9:6f:5c:84:
         e4:ae:8e:43:49:f3:eb:7c:fc:7e:dc:ad:3d:8a:9a:54:1b:ad:
         f0:b5:d7:f6:8e:0d:1c:cb:62:f6:02:ff:e9:d0:c6:f8:d5:16:
         bf:c5:3c:5a:59:f2:7b:3b:8b:80:3c:71:1a:c6:e1:4b:24:a5:
         4c:12:ab:b0:a0:cf:b3:72:86:17:12:1a:d8:61:ac:46:8e:69:
         59:9f:2e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:35:45 2024 by rpki-client on console-fra.rpki-client.org