Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/1/3136382e3139342e34302e302f32322d3232203d3e203631363934.roa
File:                     3136382e3139342e34302e302f32322d3232203d3e203631363934.roa (raw, json)
Hash identifier:          OqYOHbJpECFK0+11N97qpnXnDkeSPSMGZq+lUclz1Ck=
Subject key identifier:   E0:41:04:26:B1:C9:EA:B6:B0:51:B9:E0:F9:3F:3C:47:C1:9B:08:61
Certificate issuer:       /CN=EE9E3B8C44E817B12E9E0A3E53713589553FDE47
Certificate serial:       0DA65F5417F6185BEA3214674A3409B39269D8D0
Authority key identifier: EE:9E:3B:8C:44:E8:17:B1:2E:9E:0A:3E:53:71:35:89:55:3F:DE:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE9E3B8C44E817B12E9E0A3E53713589553FDE47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/1/3136382e3139342e34302e302f32322d3232203d3e203631363934.roa
Signing time:             Wed 03 Apr 2024 19:19:07 +0000
ROA not before:           Wed 03 Apr 2024 19:14:07 +0000
ROA not after:            Wed 02 Apr 2025 19:19:07 +0000
asID:                     61694
IP address blocks:        168.194.40.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/1/EE9E3B8C44E817B12E9E0A3E53713589553FDE47.crl
                          rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/1/EE9E3B8C44E817B12E9E0A3E53713589553FDE47.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE9E3B8C44E817B12E9E0A3E53713589553FDE47.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:a6:5f:54:17:f6:18:5b:ea:32:14:67:4a:34:09:b3:92:69:d8:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE9E3B8C44E817B12E9E0A3E53713589553FDE47
        Validity
            Not Before: Apr  3 19:14:07 2024 GMT
            Not After : Apr  2 19:19:07 2025 GMT
        Subject: CN=E0410426B1C9EAB6B051B9E0F93F3C47C19B0861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:08:d8:8c:2e:40:cc:6f:4b:8d:b0:d8:ab:46:
                    3b:be:6a:a7:57:8a:42:87:7c:a4:bf:86:4c:60:55:
                    e2:f8:68:cf:e0:c8:32:a6:49:9d:ee:9c:76:f3:4a:
                    d7:6e:df:31:cf:de:ed:84:c1:14:02:24:a2:82:a6:
                    20:23:95:bd:08:02:51:05:11:ed:8d:51:55:ac:86:
                    99:ee:0b:15:27:a4:85:2d:ff:12:e4:c0:06:9f:19:
                    8d:fa:56:74:03:4b:e0:1b:7b:dd:95:19:e4:16:06:
                    f5:00:83:ab:cc:f6:9e:08:21:7f:f4:44:35:ed:81:
                    52:5b:6c:06:27:60:dd:d8:17:55:66:32:ce:cd:92:
                    7d:05:5d:da:b3:d4:c1:ee:06:c0:b6:9e:e1:8e:60:
                    9e:f1:96:f7:10:2b:ee:7a:49:75:4a:5a:91:85:ba:
                    42:1f:25:28:6e:49:09:ce:5e:f5:32:7c:3a:32:01:
                    d3:ce:11:f0:96:98:cb:18:23:39:ef:ee:10:50:16:
                    57:a6:68:2a:57:0b:f7:ed:44:f8:a3:b6:fc:56:93:
                    5e:75:10:e1:55:a0:44:eb:20:78:62:f5:33:8d:9c:
                    be:93:ef:56:da:db:64:51:35:81:3c:12:10:5c:68:
                    2a:f2:48:53:9c:2b:66:72:f1:a0:65:ec:e5:66:91:
                    29:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:41:04:26:B1:C9:EA:B6:B0:51:B9:E0:F9:3F:3C:47:C1:9B:08:61
            X509v3 Authority Key Identifier:
                keyid:EE:9E:3B:8C:44:E8:17:B1:2E:9E:0A:3E:53:71:35:89:55:3F:DE:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/1/EE9E3B8C44E817B12E9E0A3E53713589553FDE47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE9E3B8C44E817B12E9E0A3E53713589553FDE47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/1/3136382e3139342e34302e302f32322d3232203d3e203631363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:b2:64:a0:8f:b5:1a:46:d1:72:9a:62:9a:b7:1a:9e:40:92:
         94:2d:a2:e2:dd:8f:1a:b0:59:9d:08:0d:dd:b8:2f:e6:8b:d5:
         c2:0c:eb:60:b1:12:e5:60:8d:17:a1:e8:46:35:25:8d:cb:e0:
         6d:66:11:1f:48:e1:d8:ef:16:7c:39:8d:c7:11:a4:dc:a5:54:
         e1:08:eb:bf:ed:11:0e:0f:ac:85:ea:34:da:54:d8:2c:f8:da:
         af:1c:3f:f6:36:e6:81:ee:10:55:d8:13:1f:c5:cf:ce:a8:58:
         71:4b:86:9d:e3:79:a5:95:71:b5:50:49:7c:b5:9b:41:79:ac:
         92:a1:95:b1:eb:21:89:41:0d:6d:80:63:8d:fd:1d:eb:0b:71:
         1e:16:22:bb:7c:ee:22:d1:f5:50:c8:f6:19:31:8a:bb:20:1f:
         e5:01:b0:38:e4:ac:b4:3b:a8:bf:d1:6e:1b:b4:62:ab:fc:d5:
         48:5d:77:7c:cd:ba:55:1d:b1:fd:dd:5b:c9:fb:34:68:f8:e6:
         2b:40:a1:50:72:0d:3d:03:df:00:8c:8e:ff:7a:2d:f4:06:ce:
         9f:b2:b1:e4:bb:75:dd:aa:97:6a:37:69:9c:cc:51:0b:15:67:
         a2:af:07:db:b9:36:bd:4c:e7:58:70:03:bf:fa:a2:50:50:15:
         7d:42:50:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 06:40:40 2024 by rpki-client on console-ams.rpki-client.org