Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/1/3137302e3233382e36302e302f32322d3234203d3e203631363439.roa
File:                     3137302e3233382e36302e302f32322d3234203d3e203631363439.roa (raw, json)
Hash identifier:          GxNc7ZNy7eByjqWFatnsL/3m4CVHren40P7mgbj3iBk=
Subject key identifier:   76:04:45:D3:5A:25:9F:9F:5C:86:0D:E8:EA:4E:0C:1F:98:BE:6F:D9
Certificate issuer:       /CN=39E00671823C7AB3E8086F0B9E90A44A52E8699C
Certificate serial:       429E947FA19571B7D2465988236C8AD5ECC2F83D
Authority key identifier: 39:E0:06:71:82:3C:7A:B3:E8:08:6F:0B:9E:90:A4:4A:52:E8:69:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39E00671823C7AB3E8086F0B9E90A44A52E8699C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/1/3137302e3233382e36302e302f32322d3234203d3e203631363439.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     61649
IP address blocks:        170.238.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/1/39E00671823C7AB3E8086F0B9E90A44A52E8699C.crl
                          rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/1/39E00671823C7AB3E8086F0B9E90A44A52E8699C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39E00671823C7AB3E8086F0B9E90A44A52E8699C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 19:12:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:9e:94:7f:a1:95:71:b7:d2:46:59:88:23:6c:8a:d5:ec:c2:f8:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39E00671823C7AB3E8086F0B9E90A44A52E8699C
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=760445D35A259F9F5C860DE8EA4E0C1F98BE6FD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e8:1c:4f:2c:5a:bc:a9:6f:49:d2:47:f4:ac:
                    c4:23:92:ad:b7:96:cf:45:d2:cc:8a:36:d6:b6:f1:
                    30:37:c5:19:33:40:1e:d4:d4:ed:76:e5:f5:bc:06:
                    69:71:d1:17:e3:ba:2f:9a:c9:68:fa:1c:d3:22:85:
                    29:21:b2:76:b2:4d:b5:4f:b9:a6:47:2e:3a:1e:e2:
                    63:3a:d6:ea:41:c6:c1:28:2e:db:3a:02:e2:62:d8:
                    a2:85:6e:e8:fe:18:74:89:24:1d:2c:37:11:56:40:
                    e3:31:97:f9:f9:a7:c4:6e:09:6f:e6:77:82:f3:bf:
                    7d:17:99:56:26:8f:15:e0:a6:f9:73:92:02:16:26:
                    84:32:17:85:b3:7d:d2:0b:9f:84:f5:3a:e8:40:72:
                    af:e0:dc:67:46:28:ae:50:e6:8d:0b:55:b4:a9:b3:
                    73:1e:5f:47:f8:7a:5f:7e:a6:47:0d:e7:d5:9c:c0:
                    c1:eb:b2:8c:36:7e:2f:1b:de:b1:9b:f2:e9:94:20:
                    fb:ce:94:83:0b:8f:ac:60:8a:56:20:96:22:08:3d:
                    f9:62:2d:4d:c9:b8:15:f4:60:8e:9e:58:94:7c:74:
                    a9:92:0b:4e:5c:5d:18:3c:83:7e:b5:d7:76:16:5e:
                    4f:87:6c:40:c0:f0:be:d8:f9:4b:75:e6:70:26:ee:
                    ed:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:04:45:D3:5A:25:9F:9F:5C:86:0D:E8:EA:4E:0C:1F:98:BE:6F:D9
            X509v3 Authority Key Identifier:
                keyid:39:E0:06:71:82:3C:7A:B3:E8:08:6F:0B:9E:90:A4:4A:52:E8:69:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/1/39E00671823C7AB3E8086F0B9E90A44A52E8699C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39E00671823C7AB3E8086F0B9E90A44A52E8699C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/1/3137302e3233382e36302e302f32322d3234203d3e203631363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:2c:2e:86:48:77:99:6e:3b:64:15:b3:57:dc:df:8d:f0:74:
         48:0b:b7:d1:fc:9f:18:5a:5b:01:f2:38:5e:37:42:23:51:6d:
         40:f0:2d:47:07:11:10:4c:28:69:71:93:52:e4:1b:47:9a:85:
         9f:f9:5c:6e:6a:07:8f:5f:2c:15:a9:f3:d6:2c:3b:55:7d:c6:
         ed:48:33:18:42:47:ed:4d:2f:3b:41:77:86:02:c9:0f:f3:fe:
         df:39:55:29:5b:a2:a8:66:77:23:f9:78:3c:b4:10:c3:82:f8:
         52:38:83:c8:0e:c3:1c:af:47:be:85:bf:6a:78:87:a0:33:86:
         c4:5d:fc:a4:59:80:31:16:d6:43:b4:97:98:92:74:71:60:18:
         da:e2:0e:f9:06:f7:67:cc:d6:93:3a:16:65:bd:20:a5:09:9d:
         95:4c:11:5f:bb:a4:7a:fb:43:94:27:12:8f:4a:55:c1:72:e3:
         fd:7e:b7:fa:11:75:3f:03:dc:85:f2:de:1f:35:3a:ec:a9:aa:
         de:63:b5:b4:ff:9e:7b:cd:39:af:a8:cf:d8:f7:88:07:78:2c:
         c1:b6:f0:f2:66:1d:e6:61:77:7c:63:8b:5b:93:30:4c:3c:36:
         80:e9:0d:3b:c3:5b:e1:bb:78:ea:50:4f:12:6d:47:f1:41:93:
         8d:ca:5c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:02:24 2025 by rpki-client