Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AjCjbJzdxxiT632Ho8g7eVZ3ZxtQRPD4iqfXokqMrooh/1/3137302e3233392e36302e302f32322d3234203d3e20323636333431.roa
File:                     3137302e3233392e36302e302f32322d3234203d3e20323636333431.roa (raw, json)
Hash identifier:          t6fQgXFu3jpi6uMsQWBPCX3yrJYkwrqNecgQciHiilE=
Subject key identifier:   61:1D:44:AF:DC:30:54:8B:70:91:1E:5D:49:6A:D9:83:77:BD:86:54
Certificate issuer:       /CN=A5E6C409853C4DBC508D4E124F03B1EA2710A0A6
Certificate serial:       0F651E853EE42921E0F1C721853C78265CD43A8F
Authority key identifier: A5:E6:C4:09:85:3C:4D:BC:50:8D:4E:12:4F:03:B1:EA:27:10:A0:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5E6C409853C4DBC508D4E124F03B1EA2710A0A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AjCjbJzdxxiT632Ho8g7eVZ3ZxtQRPD4iqfXokqMrooh/1/3137302e3233392e36302e302f32322d3234203d3e20323636333431.roa
Signing time:             Thu 04 Apr 2024 03:01:17 +0000
ROA not before:           Thu 04 Apr 2024 02:56:17 +0000
ROA not after:            Thu 03 Apr 2025 03:01:17 +0000
asID:                     266341
IP address blocks:        170.239.60.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AjCjbJzdxxiT632Ho8g7eVZ3ZxtQRPD4iqfXokqMrooh/1/A5E6C409853C4DBC508D4E124F03B1EA2710A0A6.crl
                          rsync://rpki-repo.registro.br/repo/AjCjbJzdxxiT632Ho8g7eVZ3ZxtQRPD4iqfXokqMrooh/1/A5E6C409853C4DBC508D4E124F03B1EA2710A0A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5E6C409853C4DBC508D4E124F03B1EA2710A0A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 16:28:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:65:1e:85:3e:e4:29:21:e0:f1:c7:21:85:3c:78:26:5c:d4:3a:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5E6C409853C4DBC508D4E124F03B1EA2710A0A6
        Validity
            Not Before: Apr  4 02:56:17 2024 GMT
            Not After : Apr  3 03:01:17 2025 GMT
        Subject: CN=611D44AFDC30548B70911E5D496AD98377BD8654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:42:30:bc:1a:ec:14:64:0d:4d:75:46:cd:8c:
                    d7:08:b9:71:41:1d:e3:cf:1c:d2:a5:9d:69:e1:8a:
                    a6:72:64:28:75:38:2e:b0:a4:26:b4:1b:48:0c:a4:
                    ef:70:db:b7:5e:e7:66:d8:a3:b6:ae:7d:80:2d:de:
                    1d:58:17:9b:fe:b2:8b:71:43:e3:98:5d:a4:a1:a2:
                    06:e2:8f:67:69:3e:52:8d:39:39:1d:2c:95:d1:48:
                    c4:56:8d:fc:c2:08:53:02:a4:d9:43:c4:73:76:a9:
                    89:33:08:e4:0a:a8:ee:1c:98:53:91:00:3c:10:6f:
                    5e:d8:12:34:e3:7b:3c:50:ea:5c:8e:9a:a7:9d:97:
                    45:4f:6b:30:5f:7d:ab:71:09:c3:e8:36:a8:f8:aa:
                    c4:be:d0:78:1a:0c:09:a3:0a:6c:f2:71:58:f6:27:
                    71:aa:39:20:dc:99:86:84:aa:33:95:21:9f:d7:75:
                    c4:6e:1c:48:97:34:0d:cb:d1:78:0f:6a:d2:c0:6b:
                    5c:9c:fa:c5:33:4b:54:e0:1f:0d:d3:e1:18:63:f0:
                    ea:05:1e:36:b6:64:ec:34:c5:90:cc:03:42:0c:4a:
                    5e:b7:b6:5b:7e:ee:84:b0:be:7c:88:0e:5f:30:f8:
                    b5:71:33:69:ce:d9:e5:5b:6b:86:f4:3b:8c:e6:5e:
                    b4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:1D:44:AF:DC:30:54:8B:70:91:1E:5D:49:6A:D9:83:77:BD:86:54
            X509v3 Authority Key Identifier:
                keyid:A5:E6:C4:09:85:3C:4D:BC:50:8D:4E:12:4F:03:B1:EA:27:10:A0:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AjCjbJzdxxiT632Ho8g7eVZ3ZxtQRPD4iqfXokqMrooh/1/A5E6C409853C4DBC508D4E124F03B1EA2710A0A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5E6C409853C4DBC508D4E124F03B1EA2710A0A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AjCjbJzdxxiT632Ho8g7eVZ3ZxtQRPD4iqfXokqMrooh/1/3137302e3233392e36302e302f32322d3234203d3e20323636333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:21:76:8e:91:f6:65:43:ea:fd:6d:53:f2:1b:49:91:03:79:
         fc:c5:f3:3d:8d:34:50:90:01:19:0f:ad:84:ec:12:86:c7:58:
         b9:48:c8:53:ba:2d:f0:57:0f:a1:bf:35:ba:36:ea:5c:f1:f6:
         1e:0d:06:bb:a7:37:f7:6d:4a:b7:58:3e:e1:39:ca:d8:21:e6:
         e5:74:36:36:89:13:11:d1:44:2d:fc:a9:ed:8e:94:f7:fc:e9:
         63:fc:ec:89:64:b7:81:1d:ae:2e:12:3e:8b:5f:0f:f3:1f:cf:
         f8:99:7a:b5:ef:ea:5e:2a:5e:73:79:03:39:24:fd:88:23:4d:
         3b:a1:66:a5:fa:fa:c5:34:08:4f:51:89:74:02:21:ad:6b:18:
         1f:3f:63:82:a8:36:38:80:bc:f2:97:2b:2f:9b:8f:8b:2c:ed:
         06:46:20:76:02:c4:7e:2e:a1:d1:60:eb:f3:28:9d:5c:35:a9:
         3b:92:62:c2:b3:f6:d3:29:58:6c:e8:7e:56:23:2c:92:05:a8:
         1d:e8:ca:d2:2a:b7:f1:ef:cc:09:9e:8e:a5:40:cd:db:a2:63:
         2f:4c:62:5f:60:3e:eb:24:ca:1e:94:18:cf:cb:ce:d3:41:f6:
         2c:7b:a9:e4:4f:a1:41:70:54:8c:c8:10:26:1a:d7:3b:af:85:
         7f:6d:e9:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:27:07 2024 by rpki-client on console-fra.rpki-client.org