Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3136382e3139342e36302e302f32322d3234203d3e203238323837.roa
File:                     3136382e3139342e36302e302f32322d3234203d3e203238323837.roa (raw, json)
Hash identifier:          /2Yz3CBHNqlq7ukEM8ZOKAf4YaUzcbdJd417LDNk4eM=
Subject key identifier:   A9:76:FF:95:10:86:93:38:39:D4:CF:54:14:55:90:B6:EE:B4:A3:C6
Certificate issuer:       /CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Certificate serial:       19F589186C4E72BED633F7B1D58E4AC437A30526
Authority key identifier: BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3136382e3139342e36302e302f32322d3234203d3e203238323837.roa
Signing time:             Mon 25 Nov 2024 17:04:00 +0000
ROA not before:           Mon 25 Nov 2024 16:59:00 +0000
ROA not after:            Mon 24 Nov 2025 17:04:00 +0000
asID:                     28287
IP address blocks:        168.194.60.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl
                          rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 13:35:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:f5:89:18:6c:4e:72:be:d6:33:f7:b1:d5:8e:4a:c4:37:a3:05:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
        Validity
            Not Before: Nov 25 16:59:00 2024 GMT
            Not After : Nov 24 17:04:00 2025 GMT
        Subject: CN=A976FF951086933839D4CF54145590B6EEB4A3C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:48:e6:7b:6f:72:85:27:f5:1b:8b:63:de:51:
                    51:0d:2c:27:a0:99:8e:40:6e:9e:5d:b9:04:94:a9:
                    9b:6b:f6:82:aa:a1:77:58:d1:3b:07:6f:20:ac:af:
                    2a:b5:a2:25:60:9b:1c:92:ed:95:bf:41:95:f2:de:
                    49:30:b3:c4:fd:a5:c8:c2:53:c7:ae:00:a4:ff:cc:
                    57:11:85:e7:07:d4:0d:c6:c4:ff:8e:8d:98:c5:92:
                    c1:8a:81:98:6d:bb:0a:3a:ca:41:5e:f2:05:79:77:
                    c5:30:6d:bd:31:0d:8c:39:12:7f:bd:6a:3e:74:8d:
                    8d:c8:71:bb:7f:08:95:7e:ec:b1:03:2d:47:3a:9c:
                    5c:72:cf:7b:b3:ae:d5:8f:2c:51:db:9e:d4:da:81:
                    f8:49:b1:dc:55:ab:e1:a4:e0:1a:0b:2c:00:bc:f7:
                    fb:42:6a:91:49:fa:c3:97:ad:98:10:ca:bb:86:8d:
                    c3:2c:0c:5d:2e:87:cd:34:bb:38:d5:b1:ff:a2:0d:
                    fe:85:21:51:71:f6:65:c0:cf:8a:4b:5b:c9:d8:25:
                    00:44:f2:be:3e:1c:f1:ba:17:5a:92:3b:1f:27:ec:
                    fe:73:82:5b:93:91:fb:f7:2f:12:d2:1d:d3:18:35:
                    ab:24:67:55:38:1c:17:16:8f:18:20:b8:5a:37:36:
                    46:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:76:FF:95:10:86:93:38:39:D4:CF:54:14:55:90:B6:EE:B4:A3:C6
            X509v3 Authority Key Identifier:
                keyid:BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3136382e3139342e36302e302f32322d3234203d3e203238323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:d7:29:bd:c9:af:37:b9:bb:99:7e:d4:7b:7c:be:75:48:8a:
         4a:ec:17:4d:f1:dd:87:21:d0:c4:a1:74:70:85:56:1d:b7:2f:
         45:0c:f3:47:0b:d2:91:cb:47:64:1b:5c:7e:e4:17:72:f0:08:
         73:a9:b9:30:19:86:dd:75:55:27:93:27:5b:ea:1c:73:3d:d7:
         79:bb:3e:a2:ed:62:46:be:5a:89:60:27:31:fd:bb:c5:6b:7e:
         65:5e:c4:1a:d4:39:c3:45:ec:79:17:ea:e6:00:e3:cb:05:d6:
         0d:16:8a:0f:23:cb:0f:b0:7c:09:3f:a1:a6:79:09:3b:61:48:
         87:e2:27:c6:c6:a5:ff:44:71:7d:d3:36:33:10:a3:55:56:ea:
         e8:a7:50:85:1a:31:0d:81:de:2d:c4:cb:52:82:27:e4:72:43:
         a4:6c:0c:bd:db:a7:53:72:ea:26:6c:b6:16:9a:5c:43:8b:f6:
         12:88:8f:04:e1:e3:71:4e:7a:b6:cd:1a:68:bb:57:4f:52:68:
         78:0a:ab:90:91:f4:c7:9c:1f:29:18:1a:29:29:35:6a:ae:e2:
         89:65:6c:c4:b3:24:98:b9:d9:c1:48:45:8f:e7:b5:53:7a:1b:
         b8:60:b9:e7:a2:d9:d2:46:f4:25:33:0b:e5:37:87:9c:fe:33:
         f4:d6:b3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 11:47:34 2024 by rpki-client on console-ams.rpki-client.org