Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/37322e34342e31382e302f32332d3233203d3e20323636313635.roa
File:                     37322e34342e31382e302f32332d3233203d3e20323636313635.roa (raw, json)
Hash identifier:          LbtWdMMc+8A4lGB96SO51TQ0SVF+cxYWL3jRmW74HnQ=
Subject key identifier:   AC:6D:9D:D9:50:E0:CF:07:AA:6C:15:82:2F:FD:D0:7E:93:21:B6:CF
Certificate issuer:       /CN=103266039FE0E42654222D6D1D326D5613C32C2E
Certificate serial:       1ED1A11D58B2C323D216650293F8FED4D5437279
Authority key identifier: 10:32:66:03:9F:E0:E4:26:54:22:2D:6D:1D:32:6D:56:13:C3:2C:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/103266039FE0E42654222D6D1D326D5613C32C2E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/37322e34342e31382e302f32332d3233203d3e20323636313635.roa
Signing time:             Wed 31 Jul 2024 02:03:03 +0000
ROA not before:           Wed 31 Jul 2024 01:58:03 +0000
ROA not after:            Wed 30 Jul 2025 02:03:03 +0000
asID:                     266165
IP address blocks:        72.44.18.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/103266039FE0E42654222D6D1D326D5613C32C2E.crl
                          rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/103266039FE0E42654222D6D1D326D5613C32C2E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/103266039FE0E42654222D6D1D326D5613C32C2E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:d1:a1:1d:58:b2:c3:23:d2:16:65:02:93:f8:fe:d4:d5:43:72:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=103266039FE0E42654222D6D1D326D5613C32C2E
        Validity
            Not Before: Jul 31 01:58:03 2024 GMT
            Not After : Jul 30 02:03:03 2025 GMT
        Subject: CN=AC6D9DD950E0CF07AA6C15822FFDD07E9321B6CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7b:f6:14:e1:7e:fb:bc:fa:85:f2:c0:78:69:
                    36:2c:7f:4e:4f:e3:d8:1a:3b:82:34:60:86:d5:dc:
                    f1:d2:07:b5:3e:0f:72:6f:80:30:9d:b2:69:9f:82:
                    f4:51:2b:a3:02:5a:47:a8:70:d0:c6:1b:53:ce:b0:
                    64:07:19:f5:4f:71:95:03:5f:6a:6c:fe:99:ca:ed:
                    b0:e1:f3:65:30:27:23:2d:ee:d9:d6:45:95:36:6a:
                    f7:5f:ae:13:01:1e:21:1d:98:51:77:3f:3e:07:38:
                    8a:b5:bc:0f:3d:99:11:66:47:ed:65:55:0b:c2:30:
                    93:74:5a:37:b9:2a:a4:35:73:fb:97:df:94:ad:1f:
                    4b:52:47:49:d3:22:77:d8:33:5e:fa:99:58:55:0f:
                    c8:01:c5:38:eb:72:ae:62:52:b2:3d:37:35:22:99:
                    64:bf:e6:bd:fa:6b:6d:a6:1a:7e:7b:b1:d8:11:69:
                    8d:f7:57:67:49:8b:10:58:f4:bf:65:86:a6:35:f9:
                    be:8d:c5:92:65:2e:17:84:1d:cb:ba:fa:82:d6:00:
                    2d:be:ff:9c:e6:20:60:17:91:09:72:0a:06:68:c5:
                    60:1b:77:87:ac:59:5c:f9:b6:05:e5:a3:6a:5f:6c:
                    ed:6a:dc:cf:b0:0c:2f:48:6d:57:73:22:ac:70:3b:
                    e8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:6D:9D:D9:50:E0:CF:07:AA:6C:15:82:2F:FD:D0:7E:93:21:B6:CF
            X509v3 Authority Key Identifier:
                keyid:10:32:66:03:9F:E0:E4:26:54:22:2D:6D:1D:32:6D:56:13:C3:2C:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/103266039FE0E42654222D6D1D326D5613C32C2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/103266039FE0E42654222D6D1D326D5613C32C2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/37322e34342e31382e302f32332d3233203d3e20323636313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.44.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b2:3b:bc:10:a8:4e:c0:78:db:ee:ef:d6:48:f1:53:d0:81:81:
         ed:4a:e4:bc:13:15:6e:51:9f:d9:f0:87:0a:01:24:c4:16:86:
         d7:4b:f8:5d:d2:48:ed:77:3b:46:92:35:8d:62:61:1f:06:ff:
         a3:80:0c:dc:4d:95:1d:99:8a:91:83:10:07:af:10:27:a0:54:
         9c:65:e0:94:6d:16:f1:15:49:42:c4:db:df:aa:fc:6e:7e:0e:
         e6:31:05:67:bf:c0:21:7b:7b:54:20:20:b5:02:b8:98:35:d2:
         2f:4d:69:92:4e:4e:71:ed:8d:12:93:4e:b2:a7:aa:97:f5:1b:
         69:f0:f7:06:12:2e:b5:a1:43:48:b6:38:a0:60:e4:f0:7e:01:
         f2:9d:ef:3e:1a:37:bd:dd:18:d6:8f:33:74:b8:c1:c2:67:9a:
         d3:44:c4:9e:9f:02:71:82:ab:39:f1:18:83:96:3f:1e:18:87:
         43:69:6c:83:8e:4c:23:7e:c6:d0:d4:71:45:ea:9d:53:3e:74:
         75:77:47:41:98:7d:a1:c5:33:a0:20:d8:b8:44:06:fb:6e:f5:
         c5:a2:60:ef:ea:cb:a6:a5:9f:ac:ff:2c:c1:29:cd:aa:1b:2e:
         87:bf:e3:be:db:04:84:cc:cf:fe:b0:45:35:03:15:69:35:8f:
         f8:6c:7f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:45:02 2024 by rpki-client on console-ams.rpki-client.org