Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DV9LSaaW6h116m925RuEXAqko9mUrLs4gP5p79JaVhE8/1/3137302e302e36302e302f32332d3233203d3e20323635303038.roa
File:                     3137302e302e36302e302f32332d3233203d3e20323635303038.roa (raw, json)
Hash identifier:          DXxE3EoDYNrpfZjEA9F52NT/fpEAE4uQKr6gaPiBQgw=
Subject key identifier:   A8:7C:04:2A:B1:6B:CA:F6:FC:D8:FC:A5:98:D8:44:B8:72:40:C0:F5
Certificate issuer:       /CN=0911F3F0D22D3DF877B191C4EAD82C266C7FABED
Certificate serial:       7E8E4342F7F5BB4B6294074691DBE8A6A45B6E4E
Authority key identifier: 09:11:F3:F0:D2:2D:3D:F8:77:B1:91:C4:EA:D8:2C:26:6C:7F:AB:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0911F3F0D22D3DF877B191C4EAD82C266C7FABED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DV9LSaaW6h116m925RuEXAqko9mUrLs4gP5p79JaVhE8/1/3137302e302e36302e302f32332d3233203d3e20323635303038.roa
Signing time:             Thu 04 Apr 2024 10:02:23 +0000
ROA not before:           Thu 04 Apr 2024 09:57:23 +0000
ROA not after:            Thu 03 Apr 2025 10:02:23 +0000
asID:                     265008
IP address blocks:        170.0.60.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DV9LSaaW6h116m925RuEXAqko9mUrLs4gP5p79JaVhE8/1/0911F3F0D22D3DF877B191C4EAD82C266C7FABED.crl
                          rsync://rpki-repo.registro.br/repo/DV9LSaaW6h116m925RuEXAqko9mUrLs4gP5p79JaVhE8/1/0911F3F0D22D3DF877B191C4EAD82C266C7FABED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0911F3F0D22D3DF877B191C4EAD82C266C7FABED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:42:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:8e:43:42:f7:f5:bb:4b:62:94:07:46:91:db:e8:a6:a4:5b:6e:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0911F3F0D22D3DF877B191C4EAD82C266C7FABED
        Validity
            Not Before: Apr  4 09:57:23 2024 GMT
            Not After : Apr  3 10:02:23 2025 GMT
        Subject: CN=A87C042AB16BCAF6FCD8FCA598D844B87240C0F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ec:70:76:0f:3b:7a:fd:3b:88:e8:06:8f:a4:
                    f1:45:5b:ed:60:c1:71:73:d7:e9:9e:80:e0:a7:4b:
                    d2:b0:cd:0e:a7:ef:c9:f9:f8:0b:b6:64:80:1d:93:
                    ad:ce:38:f7:5b:77:d6:18:a9:12:34:72:2d:51:d8:
                    75:e6:6b:97:18:da:9e:71:1f:43:21:b0:f9:ee:94:
                    33:22:4e:ab:b8:34:17:3d:d6:e6:23:b9:4a:2e:30:
                    16:48:87:f8:63:f6:7f:de:66:73:b6:20:38:45:2c:
                    0f:02:f7:79:14:80:14:a6:24:8e:53:53:9f:29:c3:
                    34:15:9c:c7:eb:21:67:be:67:35:e6:14:f9:b7:3f:
                    a8:8e:de:18:4f:bf:2e:f9:6e:cc:b7:e0:c9:98:b5:
                    ba:1b:60:3c:e8:0f:31:b5:14:54:1a:d6:38:42:6e:
                    f3:17:5d:bf:d9:93:2b:d5:71:73:9b:d9:34:e0:db:
                    1a:50:55:a6:68:7a:f7:c5:65:73:c0:90:32:8e:48:
                    26:04:3c:07:91:1e:aa:f9:49:c7:34:f9:41:a9:e6:
                    85:37:14:b0:1c:f7:65:f5:95:72:77:c3:76:09:d3:
                    02:22:14:16:19:14:60:13:1a:9a:8d:d7:11:5b:a7:
                    7b:c9:09:77:79:b5:0d:af:0f:5b:2b:ab:b6:e0:27:
                    4d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:7C:04:2A:B1:6B:CA:F6:FC:D8:FC:A5:98:D8:44:B8:72:40:C0:F5
            X509v3 Authority Key Identifier:
                keyid:09:11:F3:F0:D2:2D:3D:F8:77:B1:91:C4:EA:D8:2C:26:6C:7F:AB:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DV9LSaaW6h116m925RuEXAqko9mUrLs4gP5p79JaVhE8/1/0911F3F0D22D3DF877B191C4EAD82C266C7FABED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0911F3F0D22D3DF877B191C4EAD82C266C7FABED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DV9LSaaW6h116m925RuEXAqko9mUrLs4gP5p79JaVhE8/1/3137302e302e36302e302f32332d3233203d3e20323635303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:88:f0:c4:48:0d:b7:57:b4:2d:12:ba:f0:a5:c3:7d:bd:91:
         96:7c:10:61:88:be:ff:96:a3:37:2d:48:09:71:87:f4:f2:9a:
         d6:8c:e8:a5:52:43:88:49:e1:34:f5:ca:93:35:a6:fb:ad:d7:
         b5:ed:d9:91:10:3f:33:86:ec:1f:3f:78:13:dc:29:fe:87:c0:
         b2:bd:cb:3f:19:ff:78:10:c1:cf:c4:48:83:c1:e3:8a:08:c1:
         d4:2e:7c:4e:c4:34:1f:de:be:6c:7e:30:78:92:57:d3:f4:f1:
         ba:1b:f0:94:92:1d:8a:08:1b:fd:3e:06:10:8c:53:b3:65:cd:
         14:f7:33:1b:38:fa:27:83:b4:c0:95:24:8b:1e:6c:0b:22:4d:
         b5:6c:7d:45:f4:d1:95:d4:32:36:37:31:2b:cb:93:88:a2:63:
         96:e5:54:19:e3:31:3e:ed:f8:70:d7:10:67:e6:3e:d2:2d:e7:
         ff:bd:3e:b9:a1:c9:25:45:29:ff:f4:7c:3d:f6:df:f8:92:6b:
         c7:2c:2a:f7:e7:6e:ac:cd:93:c1:62:a2:ee:07:3a:2b:24:d8:
         1f:ca:0d:51:89:67:20:99:67:3b:15:9e:89:03:66:a3:22:08:
         5f:47:ff:09:42:fe:1d:20:ba:7e:c9:e6:5f:f4:4c:70:ec:a9:
         14:9a:e4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:06 2024 by rpki-client on console-ams.rpki-client.org