Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/37322e34342e31362e302f32322d3232203d3e20323636313635.roa
File:                     37322e34342e31362e302f32322d3232203d3e20323636313635.roa (raw, json)
Hash identifier:          3xcTYoTUe/ZIVsmxomBb0K2R4Lyuq4gB6Y2mPKG8rgw=
Subject key identifier:   DE:A8:E4:5E:06:08:73:E4:3B:5C:4D:51:6D:7F:E0:BD:7F:0D:3C:61
Certificate issuer:       /CN=103266039FE0E42654222D6D1D326D5613C32C2E
Certificate serial:       67659B252B33576EA7619EA3C3335370938CCEEB
Authority key identifier: 10:32:66:03:9F:E0:E4:26:54:22:2D:6D:1D:32:6D:56:13:C3:2C:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/103266039FE0E42654222D6D1D326D5613C32C2E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/37322e34342e31362e302f32322d3232203d3e20323636313635.roa
Signing time:             Wed 31 Jul 2024 01:39:19 +0000
ROA not before:           Wed 31 Jul 2024 01:34:19 +0000
ROA not after:            Wed 30 Jul 2025 01:39:19 +0000
asID:                     266165
IP address blocks:        72.44.16.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/103266039FE0E42654222D6D1D326D5613C32C2E.crl
                          rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/103266039FE0E42654222D6D1D326D5613C32C2E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/103266039FE0E42654222D6D1D326D5613C32C2E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:65:9b:25:2b:33:57:6e:a7:61:9e:a3:c3:33:53:70:93:8c:ce:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=103266039FE0E42654222D6D1D326D5613C32C2E
        Validity
            Not Before: Jul 31 01:34:19 2024 GMT
            Not After : Jul 30 01:39:19 2025 GMT
        Subject: CN=DEA8E45E060873E43B5C4D516D7FE0BD7F0D3C61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a2:05:92:f9:5d:e5:76:0f:27:0a:e1:43:79:
                    74:fb:0f:41:45:87:a2:9d:ad:a0:46:ec:07:bc:dd:
                    47:dd:b5:71:9d:2f:67:a2:52:c5:17:ab:60:d4:96:
                    b3:9e:26:a5:44:42:82:4a:86:a3:13:09:0a:d5:4b:
                    f2:c2:90:40:1a:c1:44:9b:ee:74:ee:68:52:ad:76:
                    4f:31:2e:01:57:30:12:36:e9:0a:b0:c5:57:10:e6:
                    4a:f0:12:a5:d0:ea:43:6e:69:48:36:99:f5:16:cc:
                    3e:0b:01:9f:6a:bb:5c:4e:f3:4c:d6:8f:ee:f1:13:
                    5a:b6:2a:53:14:da:e7:25:11:03:1f:f5:8d:8c:66:
                    7c:75:1b:61:e6:e2:d3:0b:55:11:2f:20:5a:c6:39:
                    60:98:c1:cc:ed:a7:2f:fd:95:fb:a6:48:3f:58:4e:
                    d5:66:5a:a9:3c:11:3e:08:04:51:21:49:33:e0:aa:
                    bb:68:4f:3f:0f:f6:62:f8:a0:f2:ea:fd:e5:68:30:
                    63:55:4d:57:e2:9c:75:ce:e2:6d:5f:8f:07:ca:78:
                    50:2f:0c:07:ce:88:5a:b7:62:0f:fd:58:ac:b5:b7:
                    62:21:6e:b1:75:4d:d1:0d:fe:21:bc:5b:45:ec:06:
                    54:f4:9c:96:fc:a1:a4:a8:dc:e8:84:f7:11:21:6d:
                    d2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A8:E4:5E:06:08:73:E4:3B:5C:4D:51:6D:7F:E0:BD:7F:0D:3C:61
            X509v3 Authority Key Identifier:
                keyid:10:32:66:03:9F:E0:E4:26:54:22:2D:6D:1D:32:6D:56:13:C3:2C:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/103266039FE0E42654222D6D1D326D5613C32C2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/103266039FE0E42654222D6D1D326D5613C32C2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/37322e34342e31362e302f32322d3232203d3e20323636313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.44.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:81:34:7e:2f:2f:aa:ec:20:4e:9d:f2:22:45:21:ab:24:40:
         08:9d:60:99:86:3b:66:03:7b:71:f5:14:b3:6a:15:72:1b:4e:
         c3:9f:f0:45:3f:c4:63:c8:13:27:23:63:88:95:ed:f9:7f:a6:
         0e:87:1a:bf:24:5d:c4:3a:2e:57:1f:71:82:61:a7:f2:86:c2:
         58:e6:ce:b9:fd:b3:7d:6e:a0:bb:fa:e7:34:c4:84:2e:4b:15:
         7f:47:c6:10:f1:c4:db:2d:97:22:8f:a3:57:63:37:b3:9c:f9:
         4a:56:cc:3f:ae:24:37:e3:8f:22:a0:b6:79:a5:78:4f:8f:60:
         c1:f1:b0:0e:0b:cf:5f:b2:f0:a2:5c:20:a8:8b:2f:fe:27:ba:
         5b:0f:0e:26:3d:3a:62:d5:7f:d9:bf:4b:41:af:f5:48:1c:a9:
         b9:29:53:44:f4:17:05:43:98:eb:e0:be:1c:c8:6a:58:ff:d0:
         7a:4a:c3:b9:d2:71:27:f2:cc:50:14:7b:eb:2a:4f:47:9e:35:
         ae:d3:22:46:dc:f4:13:07:1f:2f:e9:57:1a:bb:60:68:a6:ea:
         87:1b:02:e6:a2:33:27:5a:35:ed:a3:f7:56:4b:d7:44:c5:dc:
         5c:47:22:c2:2c:f1:ec:ea:46:b0:0c:1e:d2:b4:14:10:77:ad:
         c6:90:de:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:45:02 2024 by rpki-client on console-ams.rpki-client.org