Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dk83qqzMNzXUzJdD1Ne4hLbne1K8WS6Rpi5xBykRFZ14/0/3137372e36362e3135362e302f32332d3234203d3e203532363532.roa
File:                     3137372e36362e3135362e302f32332d3234203d3e203532363532.roa (raw, json)
Hash identifier:          2mOTFtqyuMpcFJ//6FKMiZfZEbKlNc8mLN78Od2OKT0=
Subject key identifier:   F5:4E:36:B0:EA:1C:09:CA:95:54:4E:A4:C7:2A:5F:5F:46:F6:6C:D6
Certificate issuer:       /CN=6C15DB2FEE5E171C04E748A2B002640082E651E8
Certificate serial:       16B9C21384045913EC2A6CD9F57F03E5B910D444
Authority key identifier: 6C:15:DB:2F:EE:5E:17:1C:04:E7:48:A2:B0:02:64:00:82:E6:51:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C15DB2FEE5E171C04E748A2B002640082E651E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dk83qqzMNzXUzJdD1Ne4hLbne1K8WS6Rpi5xBykRFZ14/0/3137372e36362e3135362e302f32332d3234203d3e203532363532.roa
Signing time:             Wed 22 May 2024 17:15:37 +0000
ROA not before:           Wed 22 May 2024 17:10:37 +0000
ROA not after:            Wed 21 May 2025 17:15:37 +0000
asID:                     52652
IP address blocks:        177.66.156.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dk83qqzMNzXUzJdD1Ne4hLbne1K8WS6Rpi5xBykRFZ14/0/6C15DB2FEE5E171C04E748A2B002640082E651E8.crl
                          rsync://rpki-repo.registro.br/repo/Dk83qqzMNzXUzJdD1Ne4hLbne1K8WS6Rpi5xBykRFZ14/0/6C15DB2FEE5E171C04E748A2B002640082E651E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C15DB2FEE5E171C04E748A2B002640082E651E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:b9:c2:13:84:04:59:13:ec:2a:6c:d9:f5:7f:03:e5:b9:10:d4:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C15DB2FEE5E171C04E748A2B002640082E651E8
        Validity
            Not Before: May 22 17:10:37 2024 GMT
            Not After : May 21 17:15:37 2025 GMT
        Subject: CN=F54E36B0EA1C09CA95544EA4C72A5F5F46F66CD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:80:49:0d:c1:d5:b8:83:a7:7a:95:57:fe:b5:
                    60:ce:dd:eb:2b:b6:79:8b:8b:e8:c4:51:d1:a1:3e:
                    cc:f3:4e:6d:ef:d2:18:ac:e4:fa:bd:37:f2:38:bb:
                    49:2a:1f:b8:12:96:5c:31:be:1d:77:e0:62:18:fb:
                    8d:33:93:24:eb:19:09:c2:64:8e:89:7b:63:8d:8d:
                    bb:81:4d:b1:5a:cd:ab:8b:e4:98:b0:d2:4c:8a:47:
                    7c:e5:6b:00:7a:90:dd:8f:ca:95:17:df:08:78:30:
                    51:a8:19:49:19:51:3e:f5:f0:21:8e:af:36:05:9d:
                    d0:15:e6:95:c8:a0:75:e5:c2:aa:b0:0b:70:55:38:
                    98:8f:c5:8c:b8:2a:13:67:18:bf:5d:72:76:fd:91:
                    ea:f0:df:24:73:05:1b:4f:0b:35:ca:41:4e:20:6a:
                    b3:d2:e0:8c:68:e3:1a:d4:06:cb:06:9a:51:04:2d:
                    15:7b:a5:91:0b:ae:1a:78:cb:fe:3d:bc:d7:d8:5b:
                    49:48:65:5f:db:68:69:39:74:0b:7a:c4:31:60:59:
                    c8:24:57:46:80:0a:f4:5a:47:4f:8b:f8:e8:95:e4:
                    81:e1:b2:1c:51:63:39:18:99:97:41:b4:25:25:52:
                    6f:e1:63:1c:2b:2d:4f:c3:0e:bf:4e:aa:7b:98:dd:
                    e5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:4E:36:B0:EA:1C:09:CA:95:54:4E:A4:C7:2A:5F:5F:46:F6:6C:D6
            X509v3 Authority Key Identifier:
                keyid:6C:15:DB:2F:EE:5E:17:1C:04:E7:48:A2:B0:02:64:00:82:E6:51:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dk83qqzMNzXUzJdD1Ne4hLbne1K8WS6Rpi5xBykRFZ14/0/6C15DB2FEE5E171C04E748A2B002640082E651E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C15DB2FEE5E171C04E748A2B002640082E651E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dk83qqzMNzXUzJdD1Ne4hLbne1K8WS6Rpi5xBykRFZ14/0/3137372e36362e3135362e302f32332d3234203d3e203532363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:53:f0:82:db:15:02:c4:fc:58:cf:ea:74:db:d7:b1:ac:f9:
         de:a8:f6:c1:be:4c:68:65:42:bf:6d:89:d0:a7:4e:9b:77:67:
         c4:bd:bf:04:e7:89:44:ff:1f:4e:f5:47:90:76:b1:f7:7f:6d:
         e2:b7:4b:a4:c3:a1:56:c2:8a:1b:b1:23:14:79:3e:20:2c:e6:
         bb:fa:79:18:3c:de:2e:d5:7d:de:23:09:34:92:f5:8d:25:ba:
         a1:da:0d:d9:90:f3:a9:91:86:08:96:5a:99:4f:4e:23:57:0b:
         6a:3d:77:51:7d:a3:7d:e1:92:8a:d1:9d:7c:c1:ce:cb:12:7f:
         cf:62:a3:42:f3:47:ac:e9:85:46:77:fa:dc:32:26:8b:fc:94:
         12:f4:86:f4:2a:97:94:2b:e0:5c:6b:75:ce:41:d0:70:4d:81:
         64:15:38:02:48:8a:a3:b7:c8:58:d3:3a:6f:b7:03:d7:e3:8e:
         b8:9e:84:b1:de:97:db:94:73:68:ee:34:ba:a8:d2:0d:e7:3f:
         58:38:4c:2f:80:b8:2e:35:a6:a3:f8:51:69:aa:a0:a2:68:d5:
         50:59:a7:99:5c:95:fb:aa:fb:db:c2:af:fc:6e:c0:20:7b:56:
         ea:6a:29:60:82:f3:53:44:c9:f1:29:f6:43:2c:59:e5:75:b4:
         59:9d:de:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 06:35:45 2024 by rpki-client on console-ams.rpki-client.org