Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5seJupBmt7DNaqkjFuoxGw4yKiZTyiZaETXsuDZrskHn/0/3137302e3233392e34342e302f32322d3332203d3e20323636333339.roa
File:                     3137302e3233392e34342e302f32322d3332203d3e20323636333339.roa (raw, json)
Hash identifier:          0mHO7qlgUhryU1JGgtgjnBEdkqT3PVkdUHagRW5W52g=
Subject key identifier:   70:FD:5C:64:0A:CA:37:7F:AA:0B:99:76:DC:FC:A4:AF:42:BF:7F:89
Certificate issuer:       /CN=2060EDA3B3A799358824BDE72CD21670F9F23032
Certificate serial:       6C2482E0FDE83C83D55542AE3366D064CCD59D83
Authority key identifier: 20:60:ED:A3:B3:A7:99:35:88:24:BD:E7:2C:D2:16:70:F9:F2:30:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2060EDA3B3A799358824BDE72CD21670F9F23032.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5seJupBmt7DNaqkjFuoxGw4yKiZTyiZaETXsuDZrskHn/0/3137302e3233392e34342e302f32322d3332203d3e20323636333339.roa
Signing time:             Tue 26 Nov 2024 23:46:51 +0000
ROA not before:           Tue 26 Nov 2024 23:41:51 +0000
ROA not after:            Tue 25 Nov 2025 23:46:51 +0000
asID:                     266339
IP address blocks:        170.239.44.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5seJupBmt7DNaqkjFuoxGw4yKiZTyiZaETXsuDZrskHn/0/2060EDA3B3A799358824BDE72CD21670F9F23032.crl
                          rsync://rpki-repo.registro.br/repo/5seJupBmt7DNaqkjFuoxGw4yKiZTyiZaETXsuDZrskHn/0/2060EDA3B3A799358824BDE72CD21670F9F23032.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2060EDA3B3A799358824BDE72CD21670F9F23032.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 28 Nov 2024 00:32:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:24:82:e0:fd:e8:3c:83:d5:55:42:ae:33:66:d0:64:cc:d5:9d:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2060EDA3B3A799358824BDE72CD21670F9F23032
        Validity
            Not Before: Nov 26 23:41:51 2024 GMT
            Not After : Nov 25 23:46:51 2025 GMT
        Subject: CN=70FD5C640ACA377FAA0B9976DCFCA4AF42BF7F89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8d:a4:f5:db:9d:90:6e:e3:7b:67:ed:2f:46:
                    77:dd:12:7f:55:f3:da:a5:ea:ff:f6:45:b4:23:08:
                    16:53:4a:ad:e5:7d:fc:84:5d:1d:f4:10:b7:81:1f:
                    93:13:db:cd:7a:df:51:4a:72:f7:fc:d5:ef:30:4f:
                    24:f7:ca:10:9a:0e:4a:a6:4c:fe:07:8c:a4:18:bd:
                    a6:ba:93:81:22:f7:10:4e:f8:c5:01:10:f5:a8:63:
                    cd:10:3b:01:d9:12:12:8a:21:6f:0d:95:fa:87:2e:
                    fd:a2:ce:6b:13:8b:52:a9:b2:3a:d1:08:fc:4e:16:
                    8a:9a:99:fa:bf:5c:67:94:c8:74:b5:43:a8:1c:ba:
                    76:bb:11:e9:15:67:da:64:35:97:c0:8f:c3:7b:17:
                    c4:ab:07:51:d5:46:bb:a6:30:18:5a:29:b0:5e:5d:
                    dd:69:09:50:12:23:8a:93:81:52:36:a9:1d:29:e4:
                    a4:65:ec:55:86:f1:69:e5:9f:76:40:c1:4a:e8:8f:
                    e6:d3:a2:99:30:d7:47:ba:dd:19:b9:73:4f:d6:81:
                    e2:71:e7:33:39:da:30:cb:57:a0:3f:c8:2a:01:49:
                    38:3d:15:3d:38:36:80:6f:14:f4:fe:12:ae:32:f8:
                    49:fc:71:e9:2c:b4:1e:c9:77:99:06:e4:3f:bb:4c:
                    0a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:FD:5C:64:0A:CA:37:7F:AA:0B:99:76:DC:FC:A4:AF:42:BF:7F:89
            X509v3 Authority Key Identifier:
                keyid:20:60:ED:A3:B3:A7:99:35:88:24:BD:E7:2C:D2:16:70:F9:F2:30:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5seJupBmt7DNaqkjFuoxGw4yKiZTyiZaETXsuDZrskHn/0/2060EDA3B3A799358824BDE72CD21670F9F23032.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2060EDA3B3A799358824BDE72CD21670F9F23032.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5seJupBmt7DNaqkjFuoxGw4yKiZTyiZaETXsuDZrskHn/0/3137302e3233392e34342e302f32322d3332203d3e20323636333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:b3:9f:42:c8:0c:84:71:3c:1b:12:3d:ee:f3:be:c9:a5:4a:
         25:7c:3a:42:97:32:8d:73:1b:72:92:c5:95:92:d0:f0:7f:62:
         1e:40:41:ba:dd:51:68:44:77:99:40:f1:9b:ef:1a:c9:85:dd:
         55:41:13:32:7c:6f:88:a2:8b:a4:7f:7e:62:0c:c2:2b:4d:be:
         fc:c1:40:1c:2a:10:9d:5f:75:33:16:5a:c2:af:3c:50:6c:60:
         ff:a4:0e:47:2b:92:91:cf:13:bf:48:3d:2d:41:f9:1a:8c:bd:
         0d:9b:7a:35:ba:e7:df:b7:a6:3d:94:b0:a0:cf:7a:81:87:04:
         2e:d6:f2:35:8b:79:ce:04:cb:25:04:e5:80:db:f9:34:57:c1:
         52:6b:53:4b:1f:36:3d:b9:85:9d:0f:79:6c:4b:ea:0e:66:ac:
         0e:35:24:bb:1f:56:d8:69:67:b7:ea:85:54:0b:76:05:28:39:
         ad:91:30:6d:9a:45:27:47:dd:28:b7:5d:a7:46:ee:54:3c:22:
         fb:88:3d:90:1b:cd:af:f0:a1:0f:17:92:e7:1b:8a:d7:8f:95:
         35:bc:26:83:bd:78:95:72:ac:e1:eb:14:0e:bc:75:ee:f4:ee:
         b6:ee:3e:21:09:34:04:82:20:11:c8:6e:15:39:8e:fe:e4:68:
         f1:24:a3:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:29:42 2024 by rpki-client on console-fra.rpki-client.org