Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/3138372e38352e36302e302f32322d3234203d3e20323632343033.roa
File:                     3138372e38352e36302e302f32322d3234203d3e20323632343033.roa (raw, json)
Hash identifier:          +YXN06jvCERnhw0E5TkfXTeeqX0boLy3zn7hoN37Zfo=
Subject key identifier:   B4:59:83:EE:D8:9F:EC:AE:0A:30:FA:A7:59:53:1C:25:60:4D:8A:47
Certificate issuer:       /CN=BFAA18EA5036844FFCF9BBAE36148EEBC2C75F51
Certificate serial:       27261ADA22BD86A0B7CF289B368A89E93F46FCE0
Authority key identifier: BF:AA:18:EA:50:36:84:4F:FC:F9:BB:AE:36:14:8E:EB:C2:C7:5F:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFAA18EA5036844FFCF9BBAE36148EEBC2C75F51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/3138372e38352e36302e302f32322d3234203d3e20323632343033.roa
Signing time:             Mon 29 Jul 2024 16:55:13 +0000
ROA not before:           Mon 29 Jul 2024 16:50:13 +0000
ROA not after:            Mon 28 Jul 2025 16:55:13 +0000
asID:                     262403
IP address blocks:        187.85.60.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/BFAA18EA5036844FFCF9BBAE36148EEBC2C75F51.crl
                          rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/BFAA18EA5036844FFCF9BBAE36148EEBC2C75F51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFAA18EA5036844FFCF9BBAE36148EEBC2C75F51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 22:49:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:26:1a:da:22:bd:86:a0:b7:cf:28:9b:36:8a:89:e9:3f:46:fc:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFAA18EA5036844FFCF9BBAE36148EEBC2C75F51
        Validity
            Not Before: Jul 29 16:50:13 2024 GMT
            Not After : Jul 28 16:55:13 2025 GMT
        Subject: CN=B45983EED89FECAE0A30FAA759531C25604D8A47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:60:82:9c:69:e1:f8:39:b7:58:b3:5a:74:6f:
                    3a:03:42:25:eb:0a:43:ba:c0:ed:85:fb:d6:47:48:
                    49:db:00:dd:e7:e1:50:a5:96:3e:3d:c5:93:6f:3b:
                    63:b6:35:56:6d:53:40:1d:b6:a7:5d:b5:84:23:fd:
                    2c:7d:98:02:e3:3d:52:04:e3:76:9a:e3:97:91:e1:
                    75:c8:c8:32:25:11:7f:b2:57:b4:94:a0:ea:0e:11:
                    cc:ea:c7:d1:4e:ee:4d:cf:88:80:b2:20:11:2e:d0:
                    35:55:13:23:4a:8d:ea:98:20:68:8c:8a:79:c7:f0:
                    e9:75:70:92:ea:1c:74:c5:19:d5:4b:37:ac:13:08:
                    bd:13:5e:57:fc:74:37:cb:35:b6:76:83:d8:76:dd:
                    be:1a:01:03:78:7a:0b:89:48:f2:4a:37:30:f2:a2:
                    fa:94:f8:c3:4b:8e:e4:58:42:b2:ac:66:4e:0e:c9:
                    6e:2b:31:69:4f:f4:d4:e1:6d:10:05:d3:8b:60:d8:
                    8c:7c:0e:4b:49:86:85:38:7a:96:aa:9c:f1:2d:01:
                    f4:12:d9:44:8a:56:44:0a:db:59:24:a6:90:de:1d:
                    79:99:ff:43:ce:10:86:35:32:42:ef:ce:ac:df:19:
                    63:7c:bb:1a:41:16:f7:bc:6a:8c:ae:ac:e5:67:26:
                    81:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:59:83:EE:D8:9F:EC:AE:0A:30:FA:A7:59:53:1C:25:60:4D:8A:47
            X509v3 Authority Key Identifier:
                keyid:BF:AA:18:EA:50:36:84:4F:FC:F9:BB:AE:36:14:8E:EB:C2:C7:5F:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/BFAA18EA5036844FFCF9BBAE36148EEBC2C75F51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFAA18EA5036844FFCF9BBAE36148EEBC2C75F51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/3138372e38352e36302e302f32322d3234203d3e20323632343033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.85.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:61:7d:31:ec:16:bc:d0:d3:18:82:3e:8c:b2:10:03:12:93:
         71:9e:99:94:09:50:8d:57:40:ef:ae:fb:88:df:62:41:94:dd:
         ae:6e:e2:cc:55:54:b5:58:b4:95:20:28:f0:0b:ae:ea:b2:2e:
         e1:ca:5f:de:05:8a:b4:60:7b:13:2f:7c:9d:51:27:0b:ef:5d:
         13:d5:1c:10:a4:24:f6:27:a1:03:40:94:4d:d7:b5:9a:f7:35:
         db:1e:20:5b:57:11:da:11:d2:a1:c2:0b:6b:8d:7e:d6:69:79:
         66:e4:a5:fd:a8:b7:7d:ea:8e:a2:98:a9:ec:92:ac:39:4a:28:
         81:89:92:a2:1b:42:68:89:56:fa:79:49:5c:b7:e3:01:2d:78:
         10:61:3a:05:e0:83:43:ff:8c:b1:f4:5f:35:ba:dd:ff:66:c1:
         88:fd:80:e3:b7:07:a0:13:b7:b5:b2:29:81:3c:17:b7:1e:83:
         43:fb:90:90:d8:0d:48:5c:3f:7f:97:4c:2c:6e:23:98:b5:49:
         e0:17:cc:ae:eb:af:0c:c1:40:9e:8c:cf:7e:63:dc:31:dd:f4:
         e5:ef:66:bb:6d:e1:70:41:e8:96:ff:a3:45:3b:79:53:df:10:
         28:48:dd:29:b8:96:51:a5:0a:0c:52:c8:62:43:6e:ef:f9:e5:
         41:b5:b9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:55 2024 by rpki-client on console-fra.rpki-client.org