Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/3136372e3234392e3136302e302f32322d3232203d3e20323637353735.roa
File:                     3136372e3234392e3136302e302f32322d3232203d3e20323637353735.roa (raw, json)
Hash identifier:          0IXVlij5hjOOgGksRspDNTiUOu6h8Ab70D3YschCS84=
Subject key identifier:   47:65:F8:04:55:51:5B:EA:DF:93:7E:1E:3C:49:76:9C:A7:AB:CE:15
Certificate issuer:       /CN=E6E033681DC6E1958D9D3974EBB609A1AB57CB49
Certificate serial:       6EECBCB50265F661DCC63C15EA465AC5DEA2DB85
Authority key identifier: E6:E0:33:68:1D:C6:E1:95:8D:9D:39:74:EB:B6:09:A1:AB:57:CB:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6E033681DC6E1958D9D3974EBB609A1AB57CB49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/3136372e3234392e3136302e302f32322d3232203d3e20323637353735.roa
Signing time:             Wed 18 Sep 2024 12:17:30 +0000
ROA not before:           Wed 18 Sep 2024 12:12:30 +0000
ROA not after:            Wed 17 Sep 2025 12:17:30 +0000
asID:                     267575
IP address blocks:        167.249.160.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/E6E033681DC6E1958D9D3974EBB609A1AB57CB49.crl
                          rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/E6E033681DC6E1958D9D3974EBB609A1AB57CB49.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6E033681DC6E1958D9D3974EBB609A1AB57CB49.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 16:37:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:ec:bc:b5:02:65:f6:61:dc:c6:3c:15:ea:46:5a:c5:de:a2:db:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6E033681DC6E1958D9D3974EBB609A1AB57CB49
        Validity
            Not Before: Sep 18 12:12:30 2024 GMT
            Not After : Sep 17 12:17:30 2025 GMT
        Subject: CN=4765F80455515BEADF937E1E3C49769CA7ABCE15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:79:48:8c:0a:c8:14:b8:6f:ea:a7:d6:26:ff:
                    78:19:38:ae:95:2a:74:e7:d3:5c:bb:b0:44:c7:9d:
                    9f:43:be:13:ae:b5:ba:bf:31:31:52:c6:3a:13:9d:
                    ea:d2:0a:cb:7d:31:15:7e:60:d9:ad:48:87:76:7e:
                    82:fd:8e:4c:97:3c:73:ab:70:1b:30:09:a4:85:b0:
                    f2:fd:2d:55:72:e1:6e:44:40:4e:4b:04:63:42:7a:
                    7c:fd:b3:12:99:99:f4:56:05:8e:1c:b5:89:0f:01:
                    8b:a4:e0:79:c5:a2:eb:c1:e5:c9:b0:47:db:33:2c:
                    0f:a3:3f:06:f9:0b:21:77:cc:fd:93:f4:65:35:ac:
                    28:05:55:9a:5d:c1:50:b7:12:7f:08:6c:7d:3c:db:
                    0f:e0:5d:4d:d8:bd:dd:60:38:89:fc:01:8f:51:5b:
                    f3:4a:0a:89:7d:f2:57:31:83:9b:c9:33:2d:7f:8d:
                    f1:73:bf:58:fe:e9:27:e0:7e:d2:63:23:86:67:23:
                    a4:a6:d8:fa:a9:87:27:cf:7d:08:e3:c0:0f:a7:0b:
                    44:7d:74:03:ba:e9:b8:1f:80:49:65:28:3f:d7:59:
                    6c:65:29:df:5f:ea:5c:0e:2e:a0:2c:1d:cf:2f:52:
                    53:07:ac:64:71:ee:42:db:39:9a:cf:e0:fd:fe:66:
                    3c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:65:F8:04:55:51:5B:EA:DF:93:7E:1E:3C:49:76:9C:A7:AB:CE:15
            X509v3 Authority Key Identifier:
                keyid:E6:E0:33:68:1D:C6:E1:95:8D:9D:39:74:EB:B6:09:A1:AB:57:CB:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/E6E033681DC6E1958D9D3974EBB609A1AB57CB49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6E033681DC6E1958D9D3974EBB609A1AB57CB49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/3136372e3234392e3136302e302f32322d3232203d3e20323637353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:12:91:c4:24:2b:e8:a7:94:dd:ad:93:0b:24:a9:f2:b2:40:
         94:b4:b1:fe:ce:3b:f5:6c:ea:89:aa:f8:93:f4:80:fc:ee:01:
         07:3b:5d:8b:c8:f9:ef:56:62:de:b7:d7:b5:34:0a:c5:a8:41:
         1c:e5:68:25:b2:5b:f1:36:48:81:fb:ac:0c:10:08:69:45:5a:
         a7:f8:2a:4d:19:da:96:b2:dc:b5:ee:c3:3b:61:89:f3:5c:5e:
         93:87:cb:de:a5:c5:80:79:ab:b5:b7:5f:65:12:8d:e3:85:45:
         15:f1:d0:57:13:7b:2b:8e:23:68:b2:45:4a:e9:a2:a9:02:00:
         bd:c5:60:4d:c5:c8:02:81:8e:f2:20:1b:c6:89:ac:ce:ad:83:
         96:d1:3a:ed:27:04:4a:0e:85:b2:6a:84:60:a4:fc:ff:fa:48:
         3c:5d:78:8e:91:f8:15:fb:f2:69:93:bb:45:23:90:84:65:14:
         17:c4:28:16:15:54:0c:ce:6b:36:5b:b6:d0:9d:41:05:76:cd:
         f3:f8:fa:90:b5:06:ce:af:45:d0:5f:8f:04:06:05:8f:dc:5c:
         b7:99:d8:2a:3f:a4:32:7a:35:4d:ff:30:fd:64:40:f4:89:f1:
         e5:39:ac:ff:8b:d4:54:b2:4a:73:1f:7b:65:83:ea:d5:ab:74:
         6d:3b:6e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:14:01 2024 by rpki-client on console-ams.rpki-client.org