Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7GU7zbypWHSNRvxwqbvG3Bm5CFR4qudfLceogDXaqA3M/1/3138362e3235302e36302e302f32322d3234203d3e20323731303331.roa
File:                     3138362e3235302e36302e302f32322d3234203d3e20323731303331.roa (raw, json)
Hash identifier:          76LvOIeyjpKW6Y7tE76Qn2gYYR+z+nXQ2jFhvAywK64=
Subject key identifier:   B0:5D:8F:41:63:17:EA:FC:7C:8F:66:73:44:13:55:19:55:C4:B3:59
Certificate issuer:       /CN=E116A9492035CFBB15FA99D51C520F4FAD579530
Certificate serial:       55FB2A75122454BEFC4CB4E9C595B5F05798A6DF
Authority key identifier: E1:16:A9:49:20:35:CF:BB:15:FA:99:D5:1C:52:0F:4F:AD:57:95:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E116A9492035CFBB15FA99D51C520F4FAD579530.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7GU7zbypWHSNRvxwqbvG3Bm5CFR4qudfLceogDXaqA3M/1/3138362e3235302e36302e302f32322d3234203d3e20323731303331.roa
Signing time:             Wed 03 Apr 2024 20:04:32 +0000
ROA not before:           Wed 03 Apr 2024 19:59:32 +0000
ROA not after:            Wed 02 Apr 2025 20:04:32 +0000
asID:                     271031
IP address blocks:        186.250.60.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7GU7zbypWHSNRvxwqbvG3Bm5CFR4qudfLceogDXaqA3M/1/E116A9492035CFBB15FA99D51C520F4FAD579530.crl
                          rsync://rpki-repo.registro.br/repo/7GU7zbypWHSNRvxwqbvG3Bm5CFR4qudfLceogDXaqA3M/1/E116A9492035CFBB15FA99D51C520F4FAD579530.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E116A9492035CFBB15FA99D51C520F4FAD579530.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:48:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:fb:2a:75:12:24:54:be:fc:4c:b4:e9:c5:95:b5:f0:57:98:a6:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E116A9492035CFBB15FA99D51C520F4FAD579530
        Validity
            Not Before: Apr  3 19:59:32 2024 GMT
            Not After : Apr  2 20:04:32 2025 GMT
        Subject: CN=B05D8F416317EAFC7C8F66734413551955C4B359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cd:3c:d2:c1:9b:9a:5f:09:95:77:95:ac:59:
                    6c:64:da:72:28:f4:0f:10:9d:b1:df:cc:f8:89:93:
                    6c:4a:2f:39:ac:d4:70:1b:2f:68:d4:2c:52:f0:4b:
                    32:dc:dd:9b:18:46:f0:d7:22:44:4e:a2:20:37:60:
                    17:bd:50:ae:ea:cc:37:9d:95:94:bb:58:57:af:00:
                    5a:61:f0:db:8b:d9:ea:35:63:60:84:f3:ca:4a:d1:
                    e0:f8:23:11:2f:b6:e5:58:bd:0e:95:27:f7:6b:c7:
                    86:c6:18:20:aa:0a:d0:3b:88:25:97:34:02:39:2e:
                    89:cc:b7:e2:6a:91:2d:d4:65:42:c5:3f:2c:78:93:
                    d7:35:85:2a:6b:e0:f2:06:6f:70:d8:ee:a0:41:c1:
                    11:c0:f6:f7:1d:53:39:33:d8:40:36:63:1f:71:8a:
                    6a:15:1e:35:66:89:34:29:39:bf:c0:f7:8d:f9:7d:
                    3d:4e:f1:b5:d5:ea:1a:43:c3:b3:1d:39:94:07:2b:
                    fe:40:9d:d1:a5:00:86:85:ee:49:09:cb:60:9d:6e:
                    f7:49:cb:12:ed:dc:a4:a9:1e:3b:1a:f0:d6:9c:43:
                    94:93:a2:7c:a4:86:f6:82:6a:43:75:4c:53:52:da:
                    3c:66:13:4a:f5:50:cd:40:b7:78:0b:b9:cf:b7:71:
                    19:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:5D:8F:41:63:17:EA:FC:7C:8F:66:73:44:13:55:19:55:C4:B3:59
            X509v3 Authority Key Identifier:
                keyid:E1:16:A9:49:20:35:CF:BB:15:FA:99:D5:1C:52:0F:4F:AD:57:95:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7GU7zbypWHSNRvxwqbvG3Bm5CFR4qudfLceogDXaqA3M/1/E116A9492035CFBB15FA99D51C520F4FAD579530.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E116A9492035CFBB15FA99D51C520F4FAD579530.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7GU7zbypWHSNRvxwqbvG3Bm5CFR4qudfLceogDXaqA3M/1/3138362e3235302e36302e302f32322d3234203d3e20323731303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:b4:69:b0:79:56:a4:43:b7:46:6b:fa:5f:ad:f9:ad:94:36:
         ac:74:bc:da:37:08:e1:89:0a:53:2d:33:fe:32:bd:41:b5:82:
         55:f9:52:35:cc:a6:e0:ae:b3:10:ce:68:09:5f:26:e2:e8:bf:
         d2:3c:4c:6f:77:15:cc:61:fc:8a:d6:98:2f:3e:ec:09:86:f2:
         36:26:14:bb:81:a0:7d:c7:b2:f9:42:7b:bc:64:01:2a:0d:01:
         3e:52:2e:f4:9b:59:ac:fd:1d:7d:e5:5e:90:8d:40:59:b9:b8:
         72:28:0e:8c:50:23:85:37:04:d3:02:43:b2:39:83:db:0a:69:
         b6:d3:f0:26:84:7f:94:b6:cf:7b:47:92:e8:e8:89:a4:cd:1e:
         be:ba:55:6c:37:31:60:fa:b0:73:f4:38:f9:05:42:f6:e3:57:
         e1:83:91:49:7d:9b:a3:4e:09:e4:93:6b:cf:d9:75:40:a2:f9:
         f3:7b:6c:3b:e0:fa:f1:aa:83:6c:a1:2f:56:c9:fe:6d:13:50:
         8a:0a:56:d7:ee:0a:95:32:60:03:96:8c:3e:9d:d2:fa:b7:b3:
         e3:90:0a:a2:23:57:f0:97:19:19:8d:fe:3e:2a:9e:1b:f7:d8:
         ad:04:3e:a6:62:a8:1c:f8:89:fb:7f:38:ae:de:66:0a:4f:a3:
         1b:45:88:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:07 2024 by rpki-client on console-fra.rpki-client.org