Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BS21UxSGv7KLBmmXWi9pdJkroZVQzaLrzYXtBJzJMrAg/1/3136372e3235302e36382e302f32322d3232203d3e20323635323035.roa
File:                     3136372e3235302e36382e302f32322d3232203d3e20323635323035.roa (raw, json)
Hash identifier:          p6aXBHa4I3s4+XLHGjrRRLe6axpyFeXx5lwBr533vVY=
Subject key identifier:   0B:ED:4D:CA:1F:D0:E3:3F:23:C4:1F:97:35:07:59:5E:16:E0:97:4E
Certificate issuer:       /CN=766B3041B29318AB99A3A0468D318CA1E0E24276
Certificate serial:       4F44E387714B1199CDA41721DE431A073929511C
Authority key identifier: 76:6B:30:41:B2:93:18:AB:99:A3:A0:46:8D:31:8C:A1:E0:E2:42:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/766B3041B29318AB99A3A0468D318CA1E0E24276.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BS21UxSGv7KLBmmXWi9pdJkroZVQzaLrzYXtBJzJMrAg/1/3136372e3235302e36382e302f32322d3232203d3e20323635323035.roa
Signing time:             Mon 03 Apr 2023 14:42:16 +0000
ROA not before:           Mon 03 Apr 2023 14:37:16 +0000
ROA not after:            Mon 01 Apr 2024 14:42:16 +0000
asID:                     265205
IP address blocks:        167.250.68.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BS21UxSGv7KLBmmXWi9pdJkroZVQzaLrzYXtBJzJMrAg/1/766B3041B29318AB99A3A0468D318CA1E0E24276.crl
                          rsync://rpki-repo.registro.br/repo/BS21UxSGv7KLBmmXWi9pdJkroZVQzaLrzYXtBJzJMrAg/1/766B3041B29318AB99A3A0468D318CA1E0E24276.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/766B3041B29318AB99A3A0468D318CA1E0E24276.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 05:35:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:44:e3:87:71:4b:11:99:cd:a4:17:21:de:43:1a:07:39:29:51:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=766B3041B29318AB99A3A0468D318CA1E0E24276
        Validity
            Not Before: Apr  3 14:37:16 2023 GMT
            Not After : Apr  1 14:42:16 2024 GMT
        Subject: CN=0BED4DCA1FD0E33F23C41F973507595E16E0974E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f6:47:06:50:b8:c1:31:47:47:c2:bd:b9:e1:
                    7b:be:34:08:d4:71:1f:be:d9:4d:23:a1:84:e7:fb:
                    9e:05:ad:bb:e8:f3:ec:ce:7b:2c:0c:12:cb:a4:45:
                    4f:f7:da:4c:53:49:89:6a:4a:db:50:fe:66:0a:e5:
                    76:91:87:23:e6:b2:18:ce:ec:c7:d1:0d:ef:c2:03:
                    98:e2:a4:9c:1d:ff:d9:ee:86:39:91:1f:20:d5:2e:
                    fe:71:ff:3d:3f:77:80:a2:c1:7e:50:7b:cd:c2:9a:
                    ad:9c:a0:83:a9:b5:2c:71:e9:c6:5c:63:13:3b:ba:
                    0f:b5:f1:ff:a5:e8:82:23:00:f0:52:69:c2:7a:1a:
                    cd:ae:95:cf:03:1f:48:82:f6:42:a4:29:88:c0:9d:
                    18:2f:5f:1e:13:01:40:17:cd:22:d0:81:73:b3:c1:
                    f2:e4:a4:34:28:b7:24:d0:bc:3e:cb:44:5b:24:c1:
                    eb:ed:0c:fc:c4:50:3c:e8:25:34:8b:83:93:30:a8:
                    4e:9f:ee:84:31:ee:7c:b8:0d:30:9c:ee:49:10:3e:
                    e5:d9:02:2c:55:04:a3:0e:d5:71:5d:8f:6a:17:fd:
                    96:07:98:c7:62:08:f1:6b:df:0b:f2:38:29:7b:f2:
                    cf:d1:5b:eb:bf:c6:e6:93:70:1c:a8:8c:26:06:11:
                    68:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:ED:4D:CA:1F:D0:E3:3F:23:C4:1F:97:35:07:59:5E:16:E0:97:4E
            X509v3 Authority Key Identifier:
                keyid:76:6B:30:41:B2:93:18:AB:99:A3:A0:46:8D:31:8C:A1:E0:E2:42:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BS21UxSGv7KLBmmXWi9pdJkroZVQzaLrzYXtBJzJMrAg/1/766B3041B29318AB99A3A0468D318CA1E0E24276.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/766B3041B29318AB99A3A0468D318CA1E0E24276.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BS21UxSGv7KLBmmXWi9pdJkroZVQzaLrzYXtBJzJMrAg/1/3136372e3235302e36382e302f32322d3232203d3e20323635323035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:ed:82:36:ed:e8:32:72:a9:cc:e7:e8:44:ad:6e:eb:e6:8f:
         23:df:a1:89:43:62:ff:4c:ed:12:34:53:be:db:15:32:56:7e:
         5d:7b:b7:8a:da:46:80:aa:47:aa:56:7f:c8:f9:17:04:d3:1a:
         38:39:8f:81:5e:ce:2a:5f:1e:08:4f:1e:7f:25:a3:57:2a:d0:
         3c:1b:9f:07:c9:96:90:09:e3:87:55:c2:fd:eb:ae:97:6c:eb:
         d0:d4:6a:69:66:b6:37:05:56:63:98:14:d9:50:dc:f5:66:1c:
         7b:de:c2:90:fb:22:42:cd:dd:c0:28:52:a6:a1:f9:c5:62:78:
         2c:f6:73:f8:c7:bf:a8:1f:ea:48:33:ba:40:58:4d:ad:4c:4b:
         d8:c3:f6:9e:fc:c6:b2:b6:41:87:b6:a5:ea:67:d0:26:94:99:
         42:b8:d4:58:ce:cd:a6:3d:9a:a4:92:53:c7:51:aa:ab:98:bb:
         26:d2:a4:f1:20:87:4f:fd:88:b1:ca:b3:2e:fa:c4:93:d2:d3:
         0a:40:49:47:3f:82:b7:36:e2:1c:41:ef:6f:6f:be:6d:66:e0:
         3f:03:c7:b7:71:4d:80:8c:8f:0e:83:fa:52:d3:54:8f:bc:fb:
         e7:ce:39:15:d1:c6:dc:1f:7d:18:31:e0:d3:f7:dd:0e:70:ec:
         d2:a3:97:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 05:55:38 2024 by rpki-client on console.sobornost.net