Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ENYjti5NuoU2GLbdnPoJHdX77NpPHp5ZSdxvNMx6y4QQ/0/3136302e3233382e3234302e302f32322d3234203d3e20323636353732.roa
File:                     3136302e3233382e3234302e302f32322d3234203d3e20323636353732.roa (raw, json)
Hash identifier:          Mgk+sD0mvIk2sN7juM0HBlpUdge9hkYmPXw1Z1BiIGo=
Subject key identifier:   5B:FF:49:D8:72:A8:DE:A0:71:6E:5F:4D:24:8B:E2:67:A3:0C:2E:20
Certificate issuer:       /CN=BC6C83912B1650F317FC1734FF95EA34DD2528E6
Certificate serial:       6615A0CCBEBC8A518D6BC2A74F0235EFF9921BBA
Authority key identifier: BC:6C:83:91:2B:16:50:F3:17:FC:17:34:FF:95:EA:34:DD:25:28:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BC6C83912B1650F317FC1734FF95EA34DD2528E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ENYjti5NuoU2GLbdnPoJHdX77NpPHp5ZSdxvNMx6y4QQ/0/3136302e3233382e3234302e302f32322d3234203d3e20323636353732.roa
Signing time:             Wed 07 Jun 2023 19:14:44 +0000
ROA not before:           Wed 07 Jun 2023 19:09:44 +0000
ROA not after:            Wed 05 Jun 2024 19:14:44 +0000
asID:                     266572
IP address blocks:        160.238.240.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ENYjti5NuoU2GLbdnPoJHdX77NpPHp5ZSdxvNMx6y4QQ/0/BC6C83912B1650F317FC1734FF95EA34DD2528E6.crl
                          rsync://rpki-repo.registro.br/repo/ENYjti5NuoU2GLbdnPoJHdX77NpPHp5ZSdxvNMx6y4QQ/0/BC6C83912B1650F317FC1734FF95EA34DD2528E6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BC6C83912B1650F317FC1734FF95EA34DD2528E6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 05:28:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:15:a0:cc:be:bc:8a:51:8d:6b:c2:a7:4f:02:35:ef:f9:92:1b:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC6C83912B1650F317FC1734FF95EA34DD2528E6
        Validity
            Not Before: Jun  7 19:09:44 2023 GMT
            Not After : Jun  5 19:14:44 2024 GMT
        Subject: CN=5BFF49D872A8DEA0716E5F4D248BE267A30C2E20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9b:17:24:6c:4f:c2:0b:8a:d9:28:94:8b:a4:
                    d6:21:d3:4c:0c:98:b2:71:5a:a4:69:e6:af:9d:d6:
                    a8:03:c3:7b:c1:ca:cb:fc:4d:58:e3:e4:74:e5:31:
                    29:40:e9:0a:8d:45:99:f8:08:f6:62:ea:ed:cf:af:
                    1e:6c:8e:df:27:62:02:3a:78:cf:25:ca:27:6f:2e:
                    8c:c3:8b:0f:7a:41:66:55:56:61:3c:0f:35:17:29:
                    89:eb:42:41:c8:1c:9e:60:fe:d9:ec:8b:6a:b0:e8:
                    47:27:02:0f:bf:46:a6:a3:be:26:f1:af:dc:37:c3:
                    d9:a7:58:8d:cd:0b:6a:e5:2f:28:71:29:27:2c:1b:
                    d8:7b:0b:fe:db:a2:1a:c9:ab:4e:56:17:f7:11:42:
                    d3:e6:58:81:8d:30:a6:69:58:c1:55:32:7b:3d:95:
                    5d:df:78:07:77:52:9f:30:31:f5:c8:76:b5:79:c7:
                    64:35:81:60:5e:53:db:87:47:82:ca:eb:80:27:e4:
                    e2:fd:6e:f9:27:eb:76:53:b2:7b:e1:5e:69:e4:4a:
                    8a:b7:30:ce:9e:9c:99:91:ca:cb:f5:ca:71:04:83:
                    2a:d3:21:08:51:d4:a8:48:ae:bd:3a:7f:38:49:b5:
                    9a:e7:3e:c7:0a:ce:86:cb:cd:2e:72:82:68:05:30:
                    bb:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:FF:49:D8:72:A8:DE:A0:71:6E:5F:4D:24:8B:E2:67:A3:0C:2E:20
            X509v3 Authority Key Identifier:
                keyid:BC:6C:83:91:2B:16:50:F3:17:FC:17:34:FF:95:EA:34:DD:25:28:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ENYjti5NuoU2GLbdnPoJHdX77NpPHp5ZSdxvNMx6y4QQ/0/BC6C83912B1650F317FC1734FF95EA34DD2528E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BC6C83912B1650F317FC1734FF95EA34DD2528E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ENYjti5NuoU2GLbdnPoJHdX77NpPHp5ZSdxvNMx6y4QQ/0/3136302e3233382e3234302e302f32322d3234203d3e20323636353732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:75:b2:5d:34:27:2c:dc:72:1b:28:19:88:ff:ac:48:ea:67:
         66:e5:da:28:d4:2e:56:40:03:d1:4f:66:8a:50:d4:b2:19:e0:
         99:d5:84:ce:65:e5:d0:3d:88:b3:d8:55:b8:55:d5:b3:4a:32:
         3d:cd:31:c3:f1:74:8e:1a:7a:6d:47:dd:38:47:f0:5f:01:a4:
         b4:6e:16:69:75:4d:92:10:0c:0b:ae:08:1a:99:30:34:2d:f5:
         5e:32:58:72:83:87:b5:ac:0e:13:68:50:ef:e3:df:95:11:b6:
         20:69:39:29:69:c8:02:d1:d6:3a:20:06:c4:9a:5e:0c:ea:33:
         4c:16:21:fb:53:57:bc:25:09:79:92:7a:31:e5:21:37:e7:10:
         0d:bf:48:6b:cb:86:95:c2:7c:4e:94:58:9a:43:e9:48:3e:f5:
         31:d4:7a:08:0f:ed:b2:fd:85:72:50:ec:f1:87:6f:5e:28:c8:
         0f:65:01:a2:ce:d4:4d:dd:be:42:ac:a0:95:9d:6e:df:e9:bd:
         33:dc:a9:63:b6:82:3f:d0:84:4c:38:47:4f:fa:fa:19:ea:11:
         2d:71:b3:ce:55:de:1c:77:cf:22:7e:bd:5a:9f:0f:76:9f:05:
         42:cc:e6:cf:93:98:79:b6:1d:a9:cc:57:9a:ce:b4:d6:1e:8c:
         0f:32:ec:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 05:55:43 2024 by rpki-client on console.sobornost.net