Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dk83qqzMNzXUzJdD1Ne4hLbne1K8WS6Rpi5xBykRFZ14/0/3137372e36362e3135362e302f32332d3332203d3e203532363532.roa
File:                     3137372e36362e3135362e302f32332d3332203d3e203532363532.roa (raw, json)
Hash identifier:          m/MIF91bR9hz8lyallbbCr2OV9e6edIRBaan88T6Ns8=
Subject key identifier:   FE:C2:02:15:6C:5E:CB:52:F5:2D:94:A1:54:87:CB:2B:05:A3:72:ED
Certificate issuer:       /CN=6C15DB2FEE5E171C04E748A2B002640082E651E8
Certificate serial:       66843975C1FAE7EA583FEBB288F9C33742CCACD9
Authority key identifier: 6C:15:DB:2F:EE:5E:17:1C:04:E7:48:A2:B0:02:64:00:82:E6:51:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C15DB2FEE5E171C04E748A2B002640082E651E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dk83qqzMNzXUzJdD1Ne4hLbne1K8WS6Rpi5xBykRFZ14/0/3137372e36362e3135362e302f32332d3332203d3e203532363532.roa
Signing time:             Thu 07 Nov 2024 13:57:30 +0000
ROA not before:           Thu 07 Nov 2024 13:52:30 +0000
ROA not after:            Thu 06 Nov 2025 13:57:30 +0000
asID:                     52652
IP address blocks:        177.66.156.0/23 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dk83qqzMNzXUzJdD1Ne4hLbne1K8WS6Rpi5xBykRFZ14/0/6C15DB2FEE5E171C04E748A2B002640082E651E8.crl
                          rsync://rpki-repo.registro.br/repo/Dk83qqzMNzXUzJdD1Ne4hLbne1K8WS6Rpi5xBykRFZ14/0/6C15DB2FEE5E171C04E748A2B002640082E651E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C15DB2FEE5E171C04E748A2B002640082E651E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 23:39:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:84:39:75:c1:fa:e7:ea:58:3f:eb:b2:88:f9:c3:37:42:cc:ac:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C15DB2FEE5E171C04E748A2B002640082E651E8
        Validity
            Not Before: Nov  7 13:52:30 2024 GMT
            Not After : Nov  6 13:57:30 2025 GMT
        Subject: CN=FEC202156C5ECB52F52D94A15487CB2B05A372ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:cf:95:85:ee:12:b8:ee:f2:ba:1e:b3:92:b0:
                    e9:5d:82:fd:16:cd:6f:ff:4e:54:f3:8a:23:3f:ea:
                    55:2c:fd:fa:07:05:40:55:e5:1a:95:09:4a:9a:30:
                    4c:f3:58:a9:e2:26:24:39:91:a3:b6:03:64:14:c7:
                    19:71:86:6e:d7:64:9a:15:e7:60:ef:09:1a:63:8f:
                    ea:f1:ad:64:87:9f:00:c9:4f:4e:fd:c3:9f:61:a3:
                    40:b3:fe:17:2d:57:fb:00:89:6a:0b:1f:18:0c:5e:
                    1b:c3:ef:f3:27:30:4f:a0:60:db:4d:9e:e4:7f:91:
                    0f:c3:b0:bb:89:c0:36:95:c6:fb:6b:f3:0b:15:79:
                    33:3a:72:bd:8e:e1:50:44:6b:31:12:23:d8:11:76:
                    29:8b:d1:2d:9d:bf:bc:02:42:6c:a1:d5:c5:7e:31:
                    82:fc:28:13:ab:44:90:35:70:8c:e5:ad:1b:30:68:
                    68:57:73:ea:87:13:b6:3f:10:0a:cb:60:3b:af:5c:
                    d2:aa:48:b2:51:8d:a1:10:6a:18:aa:09:0b:2b:71:
                    da:dd:f2:76:94:53:29:3c:ac:3f:63:38:a1:ee:ea:
                    26:80:ed:ee:2f:1a:e0:ab:eb:70:d8:de:0e:4b:9d:
                    fa:eb:be:39:77:85:54:13:84:87:c3:d2:7b:2e:b7:
                    ca:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:C2:02:15:6C:5E:CB:52:F5:2D:94:A1:54:87:CB:2B:05:A3:72:ED
            X509v3 Authority Key Identifier:
                keyid:6C:15:DB:2F:EE:5E:17:1C:04:E7:48:A2:B0:02:64:00:82:E6:51:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dk83qqzMNzXUzJdD1Ne4hLbne1K8WS6Rpi5xBykRFZ14/0/6C15DB2FEE5E171C04E748A2B002640082E651E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C15DB2FEE5E171C04E748A2B002640082E651E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dk83qqzMNzXUzJdD1Ne4hLbne1K8WS6Rpi5xBykRFZ14/0/3137372e36362e3135362e302f32332d3332203d3e203532363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:f2:39:08:d3:ff:10:20:df:3c:86:fc:1e:df:cb:b3:ed:f0:
         0d:e4:84:8b:27:56:90:46:d7:68:ed:a1:7d:db:f2:2d:42:ba:
         d7:4f:c6:d8:35:ea:af:b0:03:29:44:8f:ed:18:2b:55:36:5c:
         34:47:34:a8:42:d6:9d:3a:a1:78:7f:76:b5:04:0b:79:88:4a:
         09:9f:7f:48:df:11:5f:ab:74:c6:00:55:fd:e1:51:81:02:e8:
         23:e3:12:cd:1c:ac:8b:e8:62:f6:60:5e:b7:a7:66:b4:41:d8:
         61:b2:96:18:cf:1d:2d:63:f6:77:e1:cd:6c:b2:2b:3c:1f:7c:
         fe:60:bc:5b:f9:a1:1d:f8:38:47:8d:05:df:1f:bc:a9:92:bd:
         45:7f:33:3d:ec:cc:18:27:dd:ca:0b:53:c3:af:62:76:dd:d1:
         8b:bd:6e:65:4a:91:59:b8:6c:8a:1e:4b:0e:68:12:b2:cf:4e:
         96:f4:6c:82:23:ce:db:3c:15:e0:8c:37:bb:17:4b:c3:08:26:
         9c:1b:af:f4:52:ed:cf:d1:d2:9c:3b:f7:c6:dc:03:32:65:f1:
         49:69:cc:3a:9b:e9:31:da:25:e0:4e:be:8b:b5:5e:ff:d0:e6:
         d7:d8:f9:41:8c:67:72:37:8e:f4:f8:96:75:b1:a2:7c:a5:6c:
         6b:63:88:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:33:12 2024 by rpki-client on console-ams.rpki-client.org