Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/3137302e3233392e38322e302f32332d3233203d3e20323636333432.roa
File:                     3137302e3233392e38322e302f32332d3233203d3e20323636333432.roa (raw, json)
Hash identifier:          LFhtAZQ5Q/lMPvqk9lCZwrMCcduoLOXpWmmJwRgSFEQ=
Subject key identifier:   62:C2:C6:91:E0:7D:14:24:C2:A1:CE:06:D0:68:94:BC:C8:9D:6B:B4
Certificate issuer:       /CN=F6088D67AA9EAECE20D46E4D20E46A3447420A58
Certificate serial:       3BE3E8AEFD3F1D472D627A072A59D1DA516A2629
Authority key identifier: F6:08:8D:67:AA:9E:AE:CE:20:D4:6E:4D:20:E4:6A:34:47:42:0A:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6088D67AA9EAECE20D46E4D20E46A3447420A58.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/3137302e3233392e38322e302f32332d3233203d3e20323636333432.roa
Signing time:             Wed 19 Jun 2024 19:24:46 +0000
ROA not before:           Wed 19 Jun 2024 19:19:46 +0000
ROA not after:            Wed 18 Jun 2025 19:24:46 +0000
asID:                     266342
IP address blocks:        170.239.82.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/F6088D67AA9EAECE20D46E4D20E46A3447420A58.crl
                          rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/F6088D67AA9EAECE20D46E4D20E46A3447420A58.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6088D67AA9EAECE20D46E4D20E46A3447420A58.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 02:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:e3:e8:ae:fd:3f:1d:47:2d:62:7a:07:2a:59:d1:da:51:6a:26:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6088D67AA9EAECE20D46E4D20E46A3447420A58
        Validity
            Not Before: Jun 19 19:19:46 2024 GMT
            Not After : Jun 18 19:24:46 2025 GMT
        Subject: CN=62C2C691E07D1424C2A1CE06D06894BCC89D6BB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a1:97:22:d6:e8:39:30:c9:c8:74:85:75:4e:
                    c1:49:4e:86:d6:78:f0:1f:38:f9:43:62:e0:80:db:
                    8c:f9:8e:f4:e7:c6:4a:c6:79:05:ad:d1:12:35:12:
                    a8:88:e8:d9:8b:09:41:a6:64:c6:44:a0:40:80:54:
                    cd:14:71:e7:67:b1:49:1a:50:2c:87:4f:44:1e:c1:
                    0f:2e:a3:d2:c2:38:73:c3:c9:b7:df:77:0b:5c:56:
                    ef:9f:71:94:48:dc:be:0c:d5:4a:8c:d2:d6:9e:aa:
                    3e:0a:d7:59:ec:9e:55:ed:9f:15:69:02:4e:d2:89:
                    54:44:5a:a3:52:c5:35:a4:a8:6c:66:71:86:6f:de:
                    c0:5b:ea:d9:ce:46:af:5f:c0:51:05:e5:81:29:29:
                    60:41:90:61:aa:b9:b9:38:fa:9a:b9:71:96:58:a9:
                    21:99:08:35:70:1f:64:9e:b1:4e:f6:0b:83:2e:44:
                    fe:03:9f:16:f6:8c:85:00:68:f0:f9:24:ee:2b:d8:
                    f7:5f:c8:12:48:1f:32:f9:4d:ba:32:c8:45:26:0e:
                    43:bf:d0:2c:f0:d0:cf:aa:97:a5:57:ad:43:bd:77:
                    2b:7c:9b:73:41:cb:5c:2c:c4:6a:f2:fd:01:38:9b:
                    bd:e6:23:e0:bd:bb:d3:df:31:85:dd:b3:ad:aa:85:
                    a6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C2:C6:91:E0:7D:14:24:C2:A1:CE:06:D0:68:94:BC:C8:9D:6B:B4
            X509v3 Authority Key Identifier:
                keyid:F6:08:8D:67:AA:9E:AE:CE:20:D4:6E:4D:20:E4:6A:34:47:42:0A:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/F6088D67AA9EAECE20D46E4D20E46A3447420A58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6088D67AA9EAECE20D46E4D20E46A3447420A58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/3137302e3233392e38322e302f32332d3233203d3e20323636333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         e6:78:01:d9:6f:60:a0:93:57:63:45:88:e1:ed:59:85:7c:ac:
         2d:75:ea:0e:d0:24:42:66:e7:a3:d5:cd:41:5d:1c:0c:7a:9b:
         70:9c:85:1b:65:a5:c5:ba:9f:9b:64:c9:9e:90:ce:c1:62:7f:
         44:de:99:01:76:b3:46:d5:58:82:87:ce:54:5f:56:ad:2d:61:
         1d:cd:34:00:7b:76:a7:3c:cd:89:35:c2:7c:17:00:53:50:46:
         1b:af:36:b5:75:73:38:8a:2f:f6:a4:c3:ef:ae:2f:cc:3a:f3:
         91:81:2b:31:35:f8:ae:18:20:40:8b:23:58:7c:81:0b:d8:11:
         bf:07:9f:16:b0:2a:b5:c0:b8:e2:5b:4c:19:93:79:18:46:d3:
         4e:5b:33:53:95:8c:42:d8:a1:bd:1d:ba:19:f6:e6:13:7d:b5:
         66:c6:bf:36:b4:d0:8f:0f:a6:a3:5f:d8:4d:d6:98:c4:f4:0d:
         c3:99:d7:58:19:ef:30:a1:bd:ba:24:53:68:c3:59:d3:ab:b1:
         fa:92:65:cc:56:c4:f2:73:3f:46:3d:80:85:ce:ad:e8:a2:4f:
         b1:ff:87:f9:75:37:f4:9a:7e:56:d4:fa:9d:1d:ea:3b:84:e6:
         b4:65:9f:c0:2e:33:5d:37:9b:7f:b8:cc:d1:1e:cb:39:79:c9:
         65:75:73:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:00:28 2024 by rpki-client on console-ams.rpki-client.org