Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bww3ckGMSHyNQ9N67DKh3QJJ9zstRjo65UjZ4Uhy4eqy/1/3137302e3233332e3134302e302f32322d3234203d3e20323635303838.roa
File:                     3137302e3233332e3134302e302f32322d3234203d3e20323635303838.roa (raw, json)
Hash identifier:          u4yIKZFgq4W7/YGozW9Ml3h98S8Ee0BMSAguVzcgiGQ=
Subject key identifier:   D2:5D:98:FA:C4:05:08:EA:DD:55:49:BE:B1:10:05:F5:40:1D:ED:3F
Certificate issuer:       /CN=66AB3C6D6962BBC20DBFF597969F5D2B8ED6E1A7
Certificate serial:       7F8B1A7F3AC112FC0143206C202506337E16E80F
Authority key identifier: 66:AB:3C:6D:69:62:BB:C2:0D:BF:F5:97:96:9F:5D:2B:8E:D6:E1:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66AB3C6D6962BBC20DBFF597969F5D2B8ED6E1A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bww3ckGMSHyNQ9N67DKh3QJJ9zstRjo65UjZ4Uhy4eqy/1/3137302e3233332e3134302e302f32322d3234203d3e20323635303838.roa
Signing time:             Thu 04 Apr 2024 11:42:20 +0000
ROA not before:           Thu 04 Apr 2024 11:37:20 +0000
ROA not after:            Thu 03 Apr 2025 11:42:20 +0000
asID:                     265088
IP address blocks:        170.233.140.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bww3ckGMSHyNQ9N67DKh3QJJ9zstRjo65UjZ4Uhy4eqy/1/66AB3C6D6962BBC20DBFF597969F5D2B8ED6E1A7.crl
                          rsync://rpki-repo.registro.br/repo/Bww3ckGMSHyNQ9N67DKh3QJJ9zstRjo65UjZ4Uhy4eqy/1/66AB3C6D6962BBC20DBFF597969F5D2B8ED6E1A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66AB3C6D6962BBC20DBFF597969F5D2B8ED6E1A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:8b:1a:7f:3a:c1:12:fc:01:43:20:6c:20:25:06:33:7e:16:e8:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66AB3C6D6962BBC20DBFF597969F5D2B8ED6E1A7
        Validity
            Not Before: Apr  4 11:37:20 2024 GMT
            Not After : Apr  3 11:42:20 2025 GMT
        Subject: CN=D25D98FAC40508EADD5549BEB11005F5401DED3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:11:f6:7d:18:71:f3:ad:b1:f6:7f:7c:30:7e:
                    09:bf:09:f0:e8:90:92:ad:b0:95:05:06:c3:63:78:
                    44:7c:2b:fc:b2:e4:15:1b:b3:2b:e9:3d:3f:1e:f1:
                    a9:d9:94:08:e0:0a:58:79:6a:ea:29:cd:f2:7e:72:
                    73:09:73:68:21:ca:80:83:47:c0:84:75:f2:fd:00:
                    27:62:05:01:36:6d:19:c0:e4:6a:75:12:78:92:00:
                    5a:d2:cc:b4:b5:c1:26:43:c6:e8:92:0b:af:bc:79:
                    c5:ca:e8:cb:37:05:d5:7a:86:75:18:36:f5:4c:3d:
                    18:bd:95:a7:21:03:4b:e5:7a:76:16:c1:cb:d4:be:
                    8d:04:fc:20:e8:d3:fa:e5:72:70:52:36:ec:a8:75:
                    a4:7d:8a:36:e3:3a:2b:4b:30:e8:5b:79:19:d8:0c:
                    78:c6:9b:ec:84:ab:ba:cb:a0:e4:45:c4:04:9c:55:
                    8b:67:d9:03:91:73:dc:09:ca:d8:ba:b3:e7:f0:4d:
                    88:a1:e3:7a:71:d0:d7:ba:52:97:1b:44:2e:69:5f:
                    00:66:39:54:67:8a:a5:69:18:83:e8:a0:48:5f:42:
                    1e:12:a8:94:4a:e8:b3:9b:2d:7c:b9:0d:99:5c:19:
                    d6:06:57:92:32:47:2c:39:59:7c:62:c9:db:4f:a9:
                    1c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:5D:98:FA:C4:05:08:EA:DD:55:49:BE:B1:10:05:F5:40:1D:ED:3F
            X509v3 Authority Key Identifier:
                keyid:66:AB:3C:6D:69:62:BB:C2:0D:BF:F5:97:96:9F:5D:2B:8E:D6:E1:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bww3ckGMSHyNQ9N67DKh3QJJ9zstRjo65UjZ4Uhy4eqy/1/66AB3C6D6962BBC20DBFF597969F5D2B8ED6E1A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66AB3C6D6962BBC20DBFF597969F5D2B8ED6E1A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bww3ckGMSHyNQ9N67DKh3QJJ9zstRjo65UjZ4Uhy4eqy/1/3137302e3233332e3134302e302f32322d3234203d3e20323635303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:4b:55:49:2b:e8:d1:95:51:3d:c4:7c:8b:28:b5:67:19:87:
         f4:51:f1:07:75:f3:5a:c8:e7:25:12:5d:93:26:f7:2e:87:35:
         6e:6a:67:03:77:9b:eb:ad:5c:96:60:db:5a:f5:5e:96:24:4d:
         de:e6:9b:58:17:6e:1c:c8:a1:f6:83:41:23:95:40:1c:9d:da:
         65:5b:4f:74:69:89:23:2a:ed:68:28:25:2f:66:bc:3f:c2:69:
         06:ac:fd:b2:86:f9:40:3b:2d:8d:0f:b9:f6:d0:fe:20:5a:19:
         b0:c5:f3:40:aa:03:5e:83:72:b5:b3:70:4d:06:36:0b:47:96:
         d3:a8:91:09:53:66:b3:24:ca:3d:43:a0:67:be:bc:fa:95:5e:
         de:b9:60:5e:92:21:5b:5f:a2:4f:0c:15:a9:a2:31:d1:f4:80:
         28:cd:05:07:ad:07:c8:58:d2:54:be:20:d3:e4:66:5c:43:8d:
         be:a4:a5:0c:29:6a:eb:67:b9:99:dc:cd:9a:3e:ca:75:cd:31:
         b9:f5:7b:b5:61:45:95:d7:f7:57:9b:9f:d7:b2:dc:a8:ff:71:
         cc:4f:5b:ec:b2:d8:2b:84:82:9a:88:36:2b:79:a8:2f:9f:ad:
         70:48:0a:c4:7f:c9:af:f4:3c:68:b2:22:9a:a7:69:2f:50:b5:
         b3:4a:97:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:24 2024 by rpki-client on console-ams.rpki-client.org