Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/1/3137302e3233332e36302e302f32322d3234203d3e203238313533.roa
File:                     3137302e3233332e36302e302f32322d3234203d3e203238313533.roa (raw, json)
Hash identifier:          fOgNSApUG+2fl0iMnhjCjbsKCVbromVEVoNW2rCZoKk=
Subject key identifier:   47:68:F1:ED:C7:DF:C4:8D:DC:B7:68:A5:17:14:3D:3C:59:F4:C6:4D
Certificate issuer:       /CN=73BA17300B8B336E7162A6CD35AB67ECBE2D0DC4
Certificate serial:       13E78E47E6E3AC5B6FE39F2B9F979ED1443AFE9B
Authority key identifier: 73:BA:17:30:0B:8B:33:6E:71:62:A6:CD:35:AB:67:EC:BE:2D:0D:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73BA17300B8B336E7162A6CD35AB67ECBE2D0DC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/1/3137302e3233332e36302e302f32322d3234203d3e203238313533.roa
Signing time:             Thu 04 Apr 2024 13:28:35 +0000
ROA not before:           Thu 04 Apr 2024 13:23:35 +0000
ROA not after:            Thu 03 Apr 2025 13:28:35 +0000
asID:                     28153
IP address blocks:        170.233.60.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/1/73BA17300B8B336E7162A6CD35AB67ECBE2D0DC4.crl
                          rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/1/73BA17300B8B336E7162A6CD35AB67ECBE2D0DC4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73BA17300B8B336E7162A6CD35AB67ECBE2D0DC4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:33:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:e7:8e:47:e6:e3:ac:5b:6f:e3:9f:2b:9f:97:9e:d1:44:3a:fe:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73BA17300B8B336E7162A6CD35AB67ECBE2D0DC4
        Validity
            Not Before: Apr  4 13:23:35 2024 GMT
            Not After : Apr  3 13:28:35 2025 GMT
        Subject: CN=4768F1EDC7DFC48DDCB768A517143D3C59F4C64D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b6:06:2c:d6:dc:29:34:00:69:b0:18:08:7c:
                    44:c6:49:3b:0a:26:3e:e4:c5:6a:ff:5a:8d:d6:13:
                    d0:60:55:0c:5b:ad:3f:d1:ac:72:c2:1e:15:54:b9:
                    c8:7d:43:b9:88:31:86:a2:66:4b:1f:9b:ff:48:8b:
                    63:63:5b:f3:03:69:fb:95:1d:c4:03:5b:e6:1a:9b:
                    6a:68:0a:14:6d:da:9d:08:32:05:26:da:9a:67:46:
                    f1:6f:d9:29:2c:dc:c3:0f:69:92:97:e1:9f:2c:4e:
                    c8:64:c1:74:81:2a:1a:3d:ca:43:3b:d1:a8:29:20:
                    fb:e9:28:88:d4:10:ca:9e:bf:f2:b2:be:02:6c:f8:
                    41:4a:e7:ff:90:fd:46:8b:a2:9d:69:52:86:55:24:
                    95:ef:42:76:96:ac:49:33:3e:da:e8:9c:2a:11:35:
                    7e:5d:d6:69:ab:91:f1:58:9d:88:15:ec:5a:bb:5a:
                    c1:0f:4e:01:6a:84:c0:50:db:3c:84:88:da:f7:90:
                    03:6b:94:c4:ed:2b:6b:c0:70:f0:2e:64:3c:08:19:
                    86:ec:2b:d5:b4:00:6d:ac:c6:2e:23:5a:c0:5c:a5:
                    e7:bf:b7:d5:bb:3f:fd:b3:1f:8d:99:00:14:05:9c:
                    e5:0e:78:1a:0b:2b:9c:68:9a:53:5a:4d:73:16:c6:
                    88:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:68:F1:ED:C7:DF:C4:8D:DC:B7:68:A5:17:14:3D:3C:59:F4:C6:4D
            X509v3 Authority Key Identifier:
                keyid:73:BA:17:30:0B:8B:33:6E:71:62:A6:CD:35:AB:67:EC:BE:2D:0D:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/1/73BA17300B8B336E7162A6CD35AB67ECBE2D0DC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73BA17300B8B336E7162A6CD35AB67ECBE2D0DC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/1/3137302e3233332e36302e302f32322d3234203d3e203238313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:2c:5b:e1:b7:d8:0a:af:8d:fd:af:56:92:de:45:27:0e:22:
         d5:8a:37:e4:bf:7a:c0:2a:e9:e4:27:9c:e9:9d:7c:14:95:b1:
         96:a4:82:fb:63:e4:1c:82:ad:c4:39:43:0f:e8:9c:de:2f:41:
         78:4e:2a:ee:c5:93:01:93:e2:e8:bc:e1:ad:70:1d:2f:05:36:
         93:30:a5:fe:a0:e4:e5:21:97:dd:cf:1f:5d:ae:30:4c:62:71:
         2b:2e:21:64:e7:7b:30:ed:ce:7d:64:dc:28:77:83:16:42:1a:
         a4:3a:e5:7c:38:da:34:0d:80:8b:2f:7a:da:23:10:04:6b:49:
         4c:01:cc:e9:e0:58:20:a6:7d:a8:b3:8d:ae:8e:f6:e2:24:cd:
         a0:be:d9:fc:2d:8c:fd:54:68:e4:56:ba:fe:81:ee:c3:f1:e0:
         4f:50:da:9a:eb:9a:c5:5a:d0:66:1f:1e:24:65:5f:44:e3:f1:
         8f:56:50:b0:91:c7:8d:7e:d3:65:e8:8f:ae:db:9a:ab:b3:2b:
         39:1b:c1:f9:b8:e2:b0:19:2a:2d:47:9b:20:4e:3d:2a:7e:97:
         91:1f:04:b6:e4:23:56:cf:8a:b0:a0:3c:0c:4d:6a:56:6e:05:
         63:12:6d:4f:c0:45:9f:b5:05:ea:09:4f:b6:cf:15:f6:db:49:
         ca:1d:6b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:02 2024 by rpki-client on console-ams.rpki-client.org