Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/3136382e3230352e36302e302f32342d3234203d3e20323633363431.roa
File:                     3136382e3230352e36302e302f32342d3234203d3e20323633363431.roa (raw, json)
Hash identifier:          024dPtDZYb5Id2y30/XpPVEpdP32L1NhEm1VS3pglug=
Subject key identifier:   A4:C2:8C:92:59:98:D7:D5:88:81:26:13:09:DB:E3:50:3B:EA:E6:65
Certificate issuer:       /CN=79124DD01AF5FB142695944778636C75D227628B
Certificate serial:       7DE38395FF559C466BE2721A080DE744EF983297
Authority key identifier: 79:12:4D:D0:1A:F5:FB:14:26:95:94:47:78:63:6C:75:D2:27:62:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79124DD01AF5FB142695944778636C75D227628B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/3136382e3230352e36302e302f32342d3234203d3e20323633363431.roa
Signing time:             Thu 08 Aug 2024 00:41:39 +0000
ROA not before:           Thu 08 Aug 2024 00:36:39 +0000
ROA not after:            Thu 07 Aug 2025 00:41:39 +0000
asID:                     263641
IP address blocks:        168.205.60.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/79124DD01AF5FB142695944778636C75D227628B.crl
                          rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/79124DD01AF5FB142695944778636C75D227628B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79124DD01AF5FB142695944778636C75D227628B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:56:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:e3:83:95:ff:55:9c:46:6b:e2:72:1a:08:0d:e7:44:ef:98:32:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79124DD01AF5FB142695944778636C75D227628B
        Validity
            Not Before: Aug  8 00:36:39 2024 GMT
            Not After : Aug  7 00:41:39 2025 GMT
        Subject: CN=A4C28C925998D7D58881261309DBE3503BEAE665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ab:52:a1:a4:bd:c6:52:61:21:0e:c7:82:53:
                    d5:8d:cc:e8:f2:cc:b1:24:2e:49:0a:4a:95:ce:5d:
                    e7:2d:32:5b:8a:95:3c:20:c0:ac:03:70:c6:97:55:
                    a2:1d:72:c6:92:42:4a:6c:3e:49:5b:6e:1e:a2:63:
                    ae:48:77:c7:a3:2c:67:41:2a:b1:fd:e1:f6:42:45:
                    15:5d:8f:cd:6a:19:fa:15:ce:c6:81:64:86:53:9c:
                    94:41:10:80:9a:60:25:72:e7:a4:f2:2b:58:99:f9:
                    c2:e0:55:20:53:dd:2f:f6:1f:42:71:b7:54:c1:34:
                    8b:4e:82:b0:e2:4b:f5:6d:a4:53:2f:d3:30:7e:a7:
                    a2:be:99:99:1e:70:45:37:fc:75:37:69:0e:5a:51:
                    a1:68:c1:d4:d8:7e:46:ae:16:a6:e6:e5:97:c4:0b:
                    f7:e6:49:df:b6:58:0b:b8:59:98:3b:0b:ef:f4:cc:
                    d3:08:17:24:82:08:41:09:b5:2b:29:55:83:3f:bd:
                    b4:07:84:1e:3e:f7:04:51:cd:19:71:c2:e4:49:8b:
                    5f:1b:7d:7d:fa:35:ad:af:6b:14:83:ec:32:4b:d6:
                    47:79:23:34:f2:6b:90:59:ae:41:95:91:ab:ed:43:
                    c5:e0:70:60:b1:2e:17:4d:e6:c2:aa:6b:a2:6f:98:
                    ad:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:C2:8C:92:59:98:D7:D5:88:81:26:13:09:DB:E3:50:3B:EA:E6:65
            X509v3 Authority Key Identifier:
                keyid:79:12:4D:D0:1A:F5:FB:14:26:95:94:47:78:63:6C:75:D2:27:62:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/79124DD01AF5FB142695944778636C75D227628B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79124DD01AF5FB142695944778636C75D227628B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/3136382e3230352e36302e302f32342d3234203d3e20323633363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:38:7b:79:2a:d9:ae:41:81:3f:24:19:2c:e1:f2:28:93:74:
         3b:82:5f:01:4e:3a:0d:59:12:95:c3:6c:a1:e2:49:3f:fa:bc:
         38:1b:04:25:e8:cd:d6:bd:e9:4c:9b:61:59:6c:d8:19:0c:07:
         08:85:d6:18:2d:a0:68:0f:7f:79:ab:ee:e3:54:5d:80:6d:3b:
         a5:83:5c:3c:82:f7:4c:21:14:8b:3d:47:84:f5:f3:6a:50:79:
         d5:d8:b8:db:17:3e:41:6c:0d:ff:6d:b4:3f:01:15:29:f3:82:
         40:80:0a:03:42:fd:3a:39:88:2d:10:08:48:b5:0d:55:cf:3e:
         93:ef:cd:5c:1b:a6:de:a4:6c:30:98:22:60:31:84:0c:25:42:
         d4:96:51:85:1f:98:f4:a6:0a:2d:96:09:fd:dd:30:e5:3f:12:
         10:8d:29:e9:dd:dc:35:f1:93:9a:80:d9:a6:c6:29:1d:72:48:
         01:d1:da:ae:ff:7f:6b:f9:a3:b9:58:a0:28:20:6d:fa:c6:47:
         c1:77:1e:74:d9:2d:31:40:bd:93:22:49:5b:e2:b8:7f:c8:cb:
         6f:2f:aa:40:c5:2a:83:3e:5e:75:eb:dd:4b:61:44:df:fc:da:
         22:26:ec:0c:a1:55:52:0d:22:4c:1d:71:ed:e4:9e:89:3e:c7:
         ce:c8:9b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:58 2024 by rpki-client on console-fra.rpki-client.org