Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/3137372e3132392e32382e302f32322d3234203d3e20323633323636.roa
File:                     3137372e3132392e32382e302f32322d3234203d3e20323633323636.roa (raw, json)
Hash identifier:          q59nYU2N6cYlI7UxR2A/ZJBy55kM8BhWtnJR5fjoP48=
Subject key identifier:   E8:07:3D:E6:14:AC:AE:6C:D6:42:44:C3:94:F0:AF:2C:CA:C7:9E:4A
Certificate issuer:       /CN=60A27F042B57F4E872855F5353E0A6432DAC4AF2
Certificate serial:       2523DF510089F70AB8DC9147B13B08E915DEF129
Authority key identifier: 60:A2:7F:04:2B:57:F4:E8:72:85:5F:53:53:E0:A6:43:2D:AC:4A:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60A27F042B57F4E872855F5353E0A6432DAC4AF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/3137372e3132392e32382e302f32322d3234203d3e20323633323636.roa
Signing time:             Tue 18 Jun 2024 12:24:39 +0000
ROA not before:           Tue 18 Jun 2024 12:19:39 +0000
ROA not after:            Tue 17 Jun 2025 12:24:39 +0000
asID:                     263266
IP address blocks:        177.129.28.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/60A27F042B57F4E872855F5353E0A6432DAC4AF2.crl
                          rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/60A27F042B57F4E872855F5353E0A6432DAC4AF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60A27F042B57F4E872855F5353E0A6432DAC4AF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 05:12:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:23:df:51:00:89:f7:0a:b8:dc:91:47:b1:3b:08:e9:15:de:f1:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60A27F042B57F4E872855F5353E0A6432DAC4AF2
        Validity
            Not Before: Jun 18 12:19:39 2024 GMT
            Not After : Jun 17 12:24:39 2025 GMT
        Subject: CN=E8073DE614ACAE6CD64244C394F0AF2CCAC79E4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:32:ba:0a:6d:30:01:94:47:a0:35:a7:97:9b:
                    3e:49:66:98:09:39:d1:4c:36:7f:41:79:8c:75:ca:
                    6c:c1:cd:fe:8a:c3:4a:3e:12:e8:b6:52:e1:83:42:
                    ef:99:14:b4:c3:60:7e:35:46:93:8c:d0:8e:44:77:
                    f4:ce:a0:52:c1:15:60:a4:73:76:b3:cb:c2:40:9a:
                    80:80:73:6d:be:a3:6a:2a:40:93:e6:ae:ad:da:42:
                    45:99:c9:c9:a5:b6:dc:24:9a:88:7b:22:af:06:73:
                    f1:93:5d:83:ad:5b:3d:26:13:95:8d:71:46:09:e7:
                    59:41:47:90:53:c0:c5:eb:17:88:d8:60:90:61:b2:
                    34:78:39:f8:1f:b9:5b:0c:d4:42:c7:b5:eb:41:ab:
                    51:7d:5e:2d:a5:dd:68:1c:4e:66:c8:ff:05:06:fa:
                    d8:10:ad:77:9e:50:dd:8b:c8:f5:c8:62:66:bc:16:
                    84:5f:77:91:26:67:87:c6:aa:52:9c:64:52:a1:5e:
                    da:e8:6d:79:b0:7e:fb:ef:f2:fe:64:b6:f5:53:22:
                    4d:ac:8d:1a:57:94:4e:20:a9:40:d2:e7:4c:65:97:
                    8b:c0:53:55:f0:b4:50:59:d8:27:e4:50:6b:de:b3:
                    25:85:b4:ae:07:05:93:d0:bc:5b:c7:a1:de:54:a9:
                    68:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:07:3D:E6:14:AC:AE:6C:D6:42:44:C3:94:F0:AF:2C:CA:C7:9E:4A
            X509v3 Authority Key Identifier:
                keyid:60:A2:7F:04:2B:57:F4:E8:72:85:5F:53:53:E0:A6:43:2D:AC:4A:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/60A27F042B57F4E872855F5353E0A6432DAC4AF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60A27F042B57F4E872855F5353E0A6432DAC4AF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/3137372e3132392e32382e302f32322d3234203d3e20323633323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:65:59:fa:0b:e4:dc:76:f2:89:9b:99:2a:22:7d:0d:04:8e:
         ee:26:57:9b:b4:f7:93:97:7c:f1:e1:99:14:b7:5a:a2:17:fd:
         06:7d:e1:72:19:2a:07:22:67:b6:12:8a:c1:8a:22:e0:46:b1:
         bf:a0:ed:37:bd:31:8d:c7:fd:3f:d2:a1:9f:b3:89:e8:02:26:
         dc:97:38:0b:85:bc:1c:47:f8:1f:ba:05:33:e3:d2:8a:f1:05:
         87:d0:70:23:64:1f:97:ba:f1:c8:df:f7:22:b6:e1:8a:b5:b8:
         2b:dc:b5:75:25:ca:33:ff:2a:d9:48:1b:8d:20:ba:01:da:b1:
         3c:61:ff:92:98:e8:32:ee:68:20:65:2d:f7:70:e8:61:a0:d1:
         33:ad:0e:b3:70:bf:b2:f3:a8:24:c8:e5:89:d9:f5:bd:9f:e7:
         71:53:cb:49:b3:a8:47:bd:91:22:ad:5a:c1:c6:c6:89:c2:d1:
         e7:e3:bb:d6:79:18:40:00:c5:2f:d0:c7:d8:06:eb:2c:b4:a1:
         5c:4e:a4:a9:4b:fb:cd:79:0d:b3:b3:7c:b2:63:56:59:a2:c2:
         a0:57:ca:08:17:82:8e:96:ca:5f:9f:5c:f5:a4:19:bc:7c:ab:
         a6:2c:4f:60:59:4d:5c:c2:e7:72:b1:ba:95:b2:b5:e2:99:2e:
         5b:5a:ac:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:52:37 2024 by rpki-client on console-ams.rpki-client.org