Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/3230312e37312e31362e302f32322d3234203d3e20323730323835.roa
File:                     3230312e37312e31362e302f32322d3234203d3e20323730323835.roa (raw, json)
Hash identifier:          H/w3K25Z56H0zTNLHEP+BJtqcmWYKnHxAy8kIHE3LuA=
Subject key identifier:   58:EC:31:D0:D9:1E:01:AE:EB:10:A3:DB:77:85:C0:F6:22:21:49:C1
Certificate issuer:       /CN=60A335EED879631A800D276D0387DF0484B5105E
Certificate serial:       7045A155E6180DA004B7F959FAEC2C4B7BB44B0E
Authority key identifier: 60:A3:35:EE:D8:79:63:1A:80:0D:27:6D:03:87:DF:04:84:B5:10:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60A335EED879631A800D276D0387DF0484B5105E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/3230312e37312e31362e302f32322d3234203d3e20323730323835.roa
Signing time:             Wed 05 Jun 2024 19:06:05 +0000
ROA not before:           Wed 05 Jun 2024 19:01:05 +0000
ROA not after:            Wed 04 Jun 2025 19:06:05 +0000
asID:                     270285
IP address blocks:        201.71.16.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/60A335EED879631A800D276D0387DF0484B5105E.crl
                          rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/60A335EED879631A800D276D0387DF0484B5105E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60A335EED879631A800D276D0387DF0484B5105E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:45:a1:55:e6:18:0d:a0:04:b7:f9:59:fa:ec:2c:4b:7b:b4:4b:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60A335EED879631A800D276D0387DF0484B5105E
        Validity
            Not Before: Jun  5 19:01:05 2024 GMT
            Not After : Jun  4 19:06:05 2025 GMT
        Subject: CN=58EC31D0D91E01AEEB10A3DB7785C0F6222149C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e0:ba:ba:e3:09:c8:ad:c6:1d:f2:5d:42:b5:
                    86:8d:2b:ff:7d:81:d2:01:99:05:b1:1b:0c:38:4c:
                    06:ed:97:f0:ad:e2:66:c2:93:a9:cc:24:9f:94:f3:
                    a8:6f:ce:41:67:72:44:26:85:3f:3b:c5:8d:98:10:
                    40:2b:0a:8f:7d:b9:58:51:fe:57:32:13:43:bd:a8:
                    f1:53:8b:03:7e:f2:b7:e0:d0:50:dd:a3:54:4e:f5:
                    d1:54:4e:10:b8:6e:0f:38:2a:81:4c:8a:66:ff:3d:
                    01:bb:bd:9d:f0:83:03:df:9d:3a:3d:40:8c:2b:61:
                    4b:89:48:39:d0:d0:62:d5:25:b5:5a:bd:2c:7c:b9:
                    4d:8b:ab:03:1f:7a:84:33:9f:df:ae:75:44:d4:3c:
                    64:75:8b:21:74:c0:f4:e1:29:01:6a:b8:3e:46:df:
                    cc:d3:05:23:9d:40:fc:cf:68:cc:42:d1:b2:06:c9:
                    7d:c9:3d:0d:f3:78:35:98:fe:a2:32:e2:03:e7:d3:
                    09:bc:bd:a6:a4:53:03:6e:b2:ab:fd:ce:93:b7:f8:
                    39:ba:eb:3c:a6:0d:d6:c4:f2:bc:98:a7:c0:d9:8f:
                    ac:55:d0:c0:05:70:1f:31:dc:e7:3b:41:8c:4f:fb:
                    40:3d:5b:c0:0a:df:0a:9b:44:88:79:e4:39:fe:30:
                    fb:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:EC:31:D0:D9:1E:01:AE:EB:10:A3:DB:77:85:C0:F6:22:21:49:C1
            X509v3 Authority Key Identifier:
                keyid:60:A3:35:EE:D8:79:63:1A:80:0D:27:6D:03:87:DF:04:84:B5:10:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/60A335EED879631A800D276D0387DF0484B5105E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60A335EED879631A800D276D0387DF0484B5105E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/3230312e37312e31362e302f32322d3234203d3e20323730323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.71.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:6d:36:92:61:71:e2:8b:5f:f8:7d:d2:29:5f:52:f4:7c:95:
         97:4a:66:3b:ab:b2:8e:4e:94:25:0d:63:f8:a4:d3:9d:4c:d0:
         eb:d4:99:81:77:e3:81:d9:e1:ea:d0:41:1f:62:63:54:1f:92:
         c5:fc:8a:56:04:b3:9b:ac:09:f3:7e:d7:e4:dd:21:2b:1a:4b:
         15:45:8c:d6:a4:b0:60:08:eb:e9:df:ea:4c:04:a7:ab:74:f6:
         62:37:3a:24:50:69:e6:38:65:68:f8:1b:b7:30:08:d3:eb:2e:
         69:70:3c:de:8a:e9:4e:8f:d2:42:2d:c9:76:41:b5:37:b8:95:
         a2:00:6a:31:f6:78:8f:5d:0a:44:74:ee:2a:e4:a8:21:8c:44:
         fb:40:00:52:08:4a:30:43:59:c6:b4:5d:85:c4:7c:8b:6b:7d:
         8b:17:60:a3:0e:4f:0b:32:ab:17:91:6a:97:87:9d:96:cc:4d:
         16:10:51:ab:af:47:65:c3:12:7e:cf:cb:ba:e8:4e:b8:b9:a7:
         aa:2c:0b:c5:8b:f3:5e:40:e7:d9:b9:88:ba:82:e9:a4:44:7b:
         23:ae:bb:e9:25:ac:81:d6:18:bc:e5:57:19:b0:16:1a:63:55:
         7e:71:5d:57:30:10:cb:cd:d4:4b:34:68:85:fc:5f:70:cc:14:
         1b:67:8c:77
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUcEWhVeYYDaAEt/lZ+uwsS3u0Sw4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjBBMzM1RUVEODc5NjMxQTgwMEQyNzZEMDM4N0RGMDQ4
NEI1MTA1RTAeFw0yNDA2MDUxOTAxMDVaFw0yNTA2MDQxOTA2MDVaMDMxMTAvBgNV
BAMTKDU4RUMzMUQwRDkxRTAxQUVFQjEwQTNEQjc3ODVDMEY2MjIyMTQ5QzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm4Lq64wnIrcYd8l1CtYaNK/99
gdIBmQWxGww4TAbtl/Ct4mbCk6nMJJ+U86hvzkFnckQmhT87xY2YEEArCo99uVhR
/lcyE0O9qPFTiwN+8rfg0FDdo1RO9dFUThC4bg84KoFMimb/PQG7vZ3wgwPfnTo9
QIwrYUuJSDnQ0GLVJbVavSx8uU2LqwMfeoQzn9+udUTUPGR1iyF0wPThKQFquD5G
38zTBSOdQPzPaMxC0bIGyX3JPQ3zeDWY/qIy4gPn0wm8vaakUwNusqv9zpO3+Dm6
6zymDdbE8ryYp8DZj6xV0MAFcB8x3Oc7QYxP+0A9W8AK3wqbRIh55Dn+MPvvAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUWOwx0NkeAa7rEKPbd4XA9iIhScEwHwYDVR0j
BBgwFoAUYKM17th5YxqADSdtA4ffBIS1EF4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGlGRTNrZ0ZNNTc3OUd2N1ZramY4NEpUeHZRVlBrcU5Za0xvQm5MQjh3
V1UvMC82MEEzMzVFRUQ4Nzk2MzFBODAwRDI3NkQwMzg3REYwNDg0QjUxMDVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYwQTMzNUVFRDg3OTYzMUE4
MDBEMjc2RDAzODdERjA0ODRCNTEwNUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhpRkUza2dGTTU3NzlHdjdWa2pmODRKVHh2UVZQa3FOWWtMb0JuTEI4d1dVLzAv
MzIzMDMxMmUzNzMxMmUzMTM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzMw
MzIzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCyUcQMA0GCSqGSIb3DQEBCwUAA4IBAQBDbTaSYXHi
i1/4fdIpX1L0fJWXSmY7q7KOTpQlDWP4pNOdTNDr1JmBd+OB2eHq0EEfYmNUH5LF
/IpWBLObrAnzftfk3SErGksVRYzWpLBgCOvp3+pMBKerdPZiNzokUGnmOGVo+Bu3
MAjT6y5pcDzeiulOj9JCLcl2QbU3uJWiAGox9niPXQpEdO4q5KghjET7QABSCEow
Q1nGtF2FxHyLa32LF2CjDk8LMqsXkWqXh52WzE0WEFGrr0dlwxJ+z8u66E64uaeq
LAvFi/NeQOfZuYi6gumkRHsjrrvpJayB1hi85VcZsBYaY1V+cV1XMBDLzdRLNGiF
/F9wzBQbZ4x3
-----END CERTIFICATE-----
Generated at Tue Nov 26 02:25:32 2024 by rpki-client on console-ams.rpki-client.org