Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/0/3138362e3231312e39362e302f32302d3234203d3e203533303632.roa
File:                     3138362e3231312e39362e302f32302d3234203d3e203533303632.roa (raw, json)
Hash identifier:          B4+NAPXOXNtiGeQ4Z8hz5AKILp/v5IEvMG8Cq0OM/2w=
Subject key identifier:   E4:39:A5:99:92:DA:16:E8:C7:27:1E:47:6F:2A:DB:91:1A:A4:D2:A1
Certificate issuer:       /CN=66ACB5D5C8CD99E00F2480BAB1FC6F95F62059D9
Certificate serial:       33ED6F0A94180CE5A4B5735EEEE9F20047A581F4
Authority key identifier: 66:AC:B5:D5:C8:CD:99:E0:0F:24:80:BA:B1:FC:6F:95:F6:20:59:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66ACB5D5C8CD99E00F2480BAB1FC6F95F62059D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/0/3138362e3231312e39362e302f32302d3234203d3e203533303632.roa
Signing time:             Wed 14 Aug 2024 00:36:38 +0000
ROA not before:           Wed 14 Aug 2024 00:31:38 +0000
ROA not after:            Wed 13 Aug 2025 00:36:38 +0000
asID:                     53062
IP address blocks:        186.211.96.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/0/66ACB5D5C8CD99E00F2480BAB1FC6F95F62059D9.crl
                          rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/0/66ACB5D5C8CD99E00F2480BAB1FC6F95F62059D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66ACB5D5C8CD99E00F2480BAB1FC6F95F62059D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:ed:6f:0a:94:18:0c:e5:a4:b5:73:5e:ee:e9:f2:00:47:a5:81:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ACB5D5C8CD99E00F2480BAB1FC6F95F62059D9
        Validity
            Not Before: Aug 14 00:31:38 2024 GMT
            Not After : Aug 13 00:36:38 2025 GMT
        Subject: CN=E439A59992DA16E8C7271E476F2ADB911AA4D2A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:99:34:f8:88:7a:7e:46:b6:9a:a7:19:83:b2:
                    d8:7b:6f:dd:64:e6:49:ca:c6:53:00:32:1b:a0:67:
                    d1:31:25:6f:e5:67:f1:7d:60:8a:8e:77:1b:d4:cb:
                    09:c8:6d:d0:ee:8c:86:94:d0:4e:94:1e:b3:ec:ca:
                    d1:4b:a1:05:d5:9c:f7:6e:49:89:80:d9:b1:95:db:
                    ab:56:1b:d1:1e:b9:f8:9a:9b:ee:16:0b:d3:c6:52:
                    54:47:09:03:9d:4c:bb:8e:44:73:40:2a:53:4b:82:
                    14:69:76:eb:af:13:41:4c:db:8d:24:d1:22:d5:76:
                    c7:6b:29:d5:b1:e4:51:9d:21:b6:c8:03:c7:c0:ee:
                    1b:dd:21:7b:0e:62:ba:9e:ef:77:29:52:c5:8a:be:
                    ab:8e:42:f5:21:ca:16:75:4c:ad:47:9a:34:84:0c:
                    5b:cf:6d:4e:88:52:2f:3c:c7:f2:c6:b3:98:3b:83:
                    c7:d1:e8:e4:58:0b:63:55:e8:6e:4e:59:16:9b:0f:
                    3c:55:1a:72:4f:fd:df:7a:46:75:c2:69:55:45:32:
                    18:0e:e8:62:b8:fa:d5:62:27:c8:56:b7:c8:2c:2e:
                    a2:93:ad:42:ec:01:7f:3c:2e:e8:3a:62:03:f0:4b:
                    a0:3a:2a:db:1a:25:ab:3c:c4:4b:9f:a3:ec:12:69:
                    c0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:39:A5:99:92:DA:16:E8:C7:27:1E:47:6F:2A:DB:91:1A:A4:D2:A1
            X509v3 Authority Key Identifier:
                keyid:66:AC:B5:D5:C8:CD:99:E0:0F:24:80:BA:B1:FC:6F:95:F6:20:59:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/0/66ACB5D5C8CD99E00F2480BAB1FC6F95F62059D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66ACB5D5C8CD99E00F2480BAB1FC6F95F62059D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/0/3138362e3231312e39362e302f32302d3234203d3e203533303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.211.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8d:58:c9:26:8a:d6:2f:03:dd:d8:77:d9:38:03:a2:6f:2d:72:
         79:a5:a3:38:12:74:a9:4a:0c:56:9c:35:f8:ec:e7:78:88:d3:
         37:29:0a:8d:38:8b:49:59:36:fc:fc:9f:5d:9d:8a:a2:05:ef:
         72:d6:d3:76:47:be:3b:2c:b4:86:e4:6e:ad:c4:01:7b:bb:e3:
         fb:49:78:3d:a4:92:90:0a:c2:fb:2f:6e:9d:09:64:09:38:91:
         1e:2b:0b:c0:22:43:dd:e3:a9:eb:9e:2e:41:5f:df:be:9c:4e:
         02:48:15:bc:ed:fd:17:bb:14:4a:85:93:c8:da:6e:7a:63:7f:
         20:96:88:d6:99:2f:6d:c0:06:39:67:1b:80:65:0e:3a:90:69:
         3d:17:33:1e:1d:ac:46:f0:e4:9a:fc:cd:8b:cd:e7:c9:f0:47:
         b1:d9:90:91:07:fb:c5:f2:4b:3f:40:c1:62:ea:70:48:b3:03:
         05:2a:60:90:a6:5e:c9:a2:34:54:b9:49:74:69:a1:64:78:21:
         1e:3b:5c:7d:03:29:14:75:87:cf:b6:bc:24:de:37:84:92:5d:
         d7:24:76:52:c2:27:0f:03:be:18:e2:60:fd:de:a2:39:62:74:
         33:ea:df:ff:bf:02:b2:65:90:df:6b:c9:8b:50:50:de:04:b4:
         79:54:41:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:38 2024 by rpki-client on console-ams.rpki-client.org