Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/3137302e38302e3131322e302f32322d3332203d3e20323636333736.roa
File:                     3137302e38302e3131322e302f32322d3332203d3e20323636333736.roa (raw, json)
Hash identifier:          0+LCXk7CnxHPqo/sKL5mAYwUdLlTCGQkamOfdYb3boE=
Subject key identifier:   DF:49:B5:0E:5E:50:53:23:6A:0F:A4:A4:DC:03:71:82:49:BB:65:F7
Certificate issuer:       /CN=165916CF70A1EBA2C40C0621FAC830CAF9E2ACEA
Certificate serial:       059223040C938C003E3EDDDB0763B78D92B8FFBC
Authority key identifier: 16:59:16:CF:70:A1:EB:A2:C4:0C:06:21:FA:C8:30:CA:F9:E2:AC:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/165916CF70A1EBA2C40C0621FAC830CAF9E2ACEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/3137302e38302e3131322e302f32322d3332203d3e20323636333736.roa
Signing time:             Wed 29 May 2024 12:06:13 +0000
ROA not before:           Wed 29 May 2024 12:01:13 +0000
ROA not after:            Wed 28 May 2025 12:06:13 +0000
asID:                     266376
IP address blocks:        170.80.112.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/165916CF70A1EBA2C40C0621FAC830CAF9E2ACEA.crl
                          rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/165916CF70A1EBA2C40C0621FAC830CAF9E2ACEA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/165916CF70A1EBA2C40C0621FAC830CAF9E2ACEA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 16 Jun 2024 19:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:92:23:04:0c:93:8c:00:3e:3e:dd:db:07:63:b7:8d:92:b8:ff:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=165916CF70A1EBA2C40C0621FAC830CAF9E2ACEA
        Validity
            Not Before: May 29 12:01:13 2024 GMT
            Not After : May 28 12:06:13 2025 GMT
        Subject: CN=DF49B50E5E5053236A0FA4A4DC03718249BB65F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:67:3c:8c:0a:25:e3:e0:4a:2e:ec:f0:39:d9:
                    87:a0:fb:3b:0e:14:c1:6f:9b:3d:bb:b0:34:97:af:
                    ed:c0:c2:23:0a:64:65:b2:bb:65:d4:76:8f:bd:76:
                    b6:5e:bb:eb:de:2e:b2:53:4f:1e:50:5f:53:d9:30:
                    6c:41:cf:22:1a:d3:5f:5b:12:19:b7:eb:75:c3:fc:
                    0f:3e:53:f6:b2:42:cf:2d:c3:73:72:4c:04:8e:ec:
                    3d:b5:11:29:96:88:0d:8d:ea:f7:fa:d9:e7:91:cc:
                    e9:0e:ca:3d:e4:fc:46:73:bf:d4:b0:72:49:dd:22:
                    74:19:ad:a4:5e:f2:3d:41:d1:0e:61:b8:1d:30:af:
                    fe:2f:3e:24:fb:9f:0f:b8:26:ba:0d:ce:e6:de:eb:
                    11:98:df:1e:37:e7:c6:63:6a:b2:d9:56:91:e7:48:
                    03:9a:ba:b6:7c:51:54:43:1f:12:01:df:9f:08:79:
                    33:e8:6d:b7:d3:ab:77:fd:1b:dc:8c:ae:f2:cf:ec:
                    85:8e:ed:c8:db:a4:78:e9:d4:bd:22:a6:2a:07:40:
                    ba:7f:70:62:0b:a3:aa:42:42:3b:cd:d4:3b:fa:30:
                    6e:1a:d8:44:28:31:a6:b3:58:b0:ed:41:a3:0e:41:
                    7f:3b:4c:2a:1c:ba:d1:89:a3:2b:5a:9b:e9:d5:7e:
                    92:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:49:B5:0E:5E:50:53:23:6A:0F:A4:A4:DC:03:71:82:49:BB:65:F7
            X509v3 Authority Key Identifier:
                keyid:16:59:16:CF:70:A1:EB:A2:C4:0C:06:21:FA:C8:30:CA:F9:E2:AC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/165916CF70A1EBA2C40C0621FAC830CAF9E2ACEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/165916CF70A1EBA2C40C0621FAC830CAF9E2ACEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/3137302e38302e3131322e302f32322d3332203d3e20323636333736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:01:d7:da:8c:12:0b:8f:ce:c5:82:2e:c6:04:12:7e:f2:45:
         ca:cf:db:3b:ce:9b:9c:40:0d:d2:53:85:ce:0a:96:fb:23:00:
         2a:17:6e:12:f6:00:29:c0:3f:aa:db:f5:93:d4:81:d5:9f:23:
         13:72:e0:09:35:e4:1e:23:4a:a0:79:df:da:72:63:29:7a:af:
         e8:8d:40:c8:6b:09:b6:68:12:2d:f1:cb:a4:b2:05:60:1e:2e:
         42:22:c6:f5:55:68:c9:01:91:92:d7:1a:48:dd:f8:e7:a0:38:
         55:bf:f6:69:4e:e7:e8:e2:17:9e:fc:13:0e:6e:2b:a0:02:ab:
         18:6f:01:da:3d:fb:75:90:60:a0:15:fa:aa:98:99:f5:12:47:
         cc:2b:f8:8e:73:d6:db:9a:42:5b:3c:53:b4:aa:66:d9:40:33:
         06:f6:9b:e1:99:a2:b1:91:bc:95:0a:61:77:73:e6:77:2e:2d:
         49:11:7f:5d:34:f9:20:63:c1:b5:46:31:11:ea:01:ed:c1:58:
         d5:11:51:53:a6:4a:05:18:51:44:19:61:99:a9:fe:e7:31:07:
         6d:88:8d:7b:69:73:78:0c:d8:98:f7:16:0a:b7:31:34:9b:f6:
         ac:63:c0:1e:0f:2d:7c:db:3a:70:4a:d6:8a:b7:90:f0:1a:29:
         f6:64:8d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:26:10 2024 by rpki-client on console-ams.rpki-client.org