Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ei1x7C4PLT4TrfZYbMKFU8kMK2CvB3pjcxKz1K8HHtE3/0/3136372e3235302e3234332e302f32342d3234203d3e20323635323337.roa
File:                     3136372e3235302e3234332e302f32342d3234203d3e20323635323337.roa (raw, json)
Hash identifier:          JUr1HWwWJ/lQ2DNyT/1sB2lbrBDE6qoT1k8vSc+NIfc=
Subject key identifier:   66:BA:43:E3:53:45:96:B9:BB:33:F9:79:A2:4F:DB:6A:30:34:84:D6
Certificate issuer:       /CN=9ED61BBB952B0175F930148E2D9C222C7409D32C
Certificate serial:       0322736B0F76B6D1DAFE65867899497E1C6F9EC8
Authority key identifier: 9E:D6:1B:BB:95:2B:01:75:F9:30:14:8E:2D:9C:22:2C:74:09:D3:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ED61BBB952B0175F930148E2D9C222C7409D32C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ei1x7C4PLT4TrfZYbMKFU8kMK2CvB3pjcxKz1K8HHtE3/0/3136372e3235302e3234332e302f32342d3234203d3e20323635323337.roa
Signing time:             Fri 17 May 2024 14:57:55 +0000
ROA not before:           Fri 17 May 2024 14:52:55 +0000
ROA not after:            Fri 16 May 2025 14:57:55 +0000
asID:                     265237
IP address blocks:        167.250.243.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ei1x7C4PLT4TrfZYbMKFU8kMK2CvB3pjcxKz1K8HHtE3/0/9ED61BBB952B0175F930148E2D9C222C7409D32C.crl
                          rsync://rpki-repo.registro.br/repo/Ei1x7C4PLT4TrfZYbMKFU8kMK2CvB3pjcxKz1K8HHtE3/0/9ED61BBB952B0175F930148E2D9C222C7409D32C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ED61BBB952B0175F930148E2D9C222C7409D32C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:22:73:6b:0f:76:b6:d1:da:fe:65:86:78:99:49:7e:1c:6f:9e:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ED61BBB952B0175F930148E2D9C222C7409D32C
        Validity
            Not Before: May 17 14:52:55 2024 GMT
            Not After : May 16 14:57:55 2025 GMT
        Subject: CN=66BA43E3534596B9BB33F979A24FDB6A303484D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:77:5b:95:f8:25:f6:4e:01:0f:a0:cc:a9:68:
                    32:0b:35:57:6f:cd:01:1b:00:1e:72:07:e1:16:8b:
                    15:38:ac:66:77:2d:e3:44:be:a6:6f:3a:a3:62:d0:
                    71:f0:2c:ea:73:e7:5e:e0:3d:2d:b4:9c:74:25:7f:
                    40:da:bc:7b:ad:fa:3b:ba:73:96:b6:1d:59:81:c7:
                    20:dd:06:7d:fb:7c:29:4b:04:c8:80:25:b1:ab:23:
                    eb:8e:e6:67:12:f3:8a:46:ed:a7:5d:ab:40:2b:3c:
                    c1:46:b1:97:bc:95:db:c4:34:63:18:f0:d3:64:74:
                    ae:1a:f6:01:68:69:78:13:8d:9e:0c:44:4a:85:9b:
                    df:f5:e1:bc:66:32:42:7a:5f:08:7d:ea:98:85:36:
                    56:f2:70:d0:39:1e:3f:45:66:66:80:5b:f8:a6:cd:
                    5c:c0:6f:dd:71:e0:94:fe:4a:30:ca:f7:0e:b1:01:
                    69:ac:c8:aa:8f:f6:d1:76:0c:8c:e8:94:41:36:bd:
                    57:e8:80:51:9e:dc:13:60:93:94:41:ed:13:d0:6a:
                    d7:cc:ab:e4:fa:57:a5:20:67:7f:c2:a7:1d:22:97:
                    2d:4d:f7:ad:52:e2:19:94:81:77:48:81:8e:fb:4f:
                    15:b2:ba:9e:be:14:02:fd:fc:9c:08:24:28:13:f2:
                    c5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:BA:43:E3:53:45:96:B9:BB:33:F9:79:A2:4F:DB:6A:30:34:84:D6
            X509v3 Authority Key Identifier:
                keyid:9E:D6:1B:BB:95:2B:01:75:F9:30:14:8E:2D:9C:22:2C:74:09:D3:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ei1x7C4PLT4TrfZYbMKFU8kMK2CvB3pjcxKz1K8HHtE3/0/9ED61BBB952B0175F930148E2D9C222C7409D32C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ED61BBB952B0175F930148E2D9C222C7409D32C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ei1x7C4PLT4TrfZYbMKFU8kMK2CvB3pjcxKz1K8HHtE3/0/3136372e3235302e3234332e302f32342d3234203d3e20323635323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:ce:59:dd:e6:0d:15:41:29:e6:41:af:94:43:06:f7:28:68:
         e7:f8:65:a0:df:ff:b9:1c:ce:d6:d7:4a:89:5e:3c:b3:f9:91:
         bb:bc:a3:7f:44:5f:ae:3c:96:87:d8:5a:e0:f5:1f:e0:01:47:
         38:0c:44:c6:a8:c9:bf:b8:e1:22:40:84:26:23:aa:eb:a5:33:
         1a:9b:15:93:f2:96:53:6e:68:62:64:2e:fd:41:6b:d4:21:52:
         f5:1c:81:42:9a:2b:c3:e8:07:c5:de:af:3c:d0:5d:22:ba:b6:
         96:92:65:bf:65:4a:dc:27:5c:66:29:a5:71:78:70:4e:29:47:
         25:ce:1f:d3:10:14:22:89:ff:76:56:2a:74:5f:3a:35:b7:32:
         1f:e1:55:03:1e:fa:73:cc:bb:49:e5:31:a3:94:a0:eb:98:e9:
         3e:a8:12:5b:26:0f:e1:b0:70:8e:21:61:de:65:41:e6:76:9e:
         ec:80:0e:68:64:39:9e:86:1a:42:6c:f5:42:c9:01:08:6e:17:
         ea:20:98:e7:18:55:f4:bc:86:c2:35:69:15:06:34:cb:fe:b7:
         ac:38:4e:61:ac:5a:30:f4:79:ba:7d:63:08:c8:2c:cf:66:38:
         9e:3f:d0:6c:2f:12:46:89:a5:5c:d4:fc:74:16:a9:75:a5:e5:
         b8:41:1e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:38 2024 by rpki-client on console-ams.rpki-client.org