Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3137302e3234372e3230302e302f32332d3233203d3e20323633323536.roa
File:                     3137302e3234372e3230302e302f32332d3233203d3e20323633323536.roa (raw, json)
Hash identifier:          zLjl60+lXq2npHXyyBT5UNGjUZU24ottDoexyuH2hHM=
Subject key identifier:   C9:93:68:B1:44:22:EA:45:FB:69:5B:4B:82:60:94:76:B5:A3:7D:1C
Certificate issuer:       /CN=60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011
Certificate serial:       35B83F8441870381AD03239E53CD6E0DB572A383
Authority key identifier: 60:F5:CE:DC:60:B1:C9:2A:5A:74:DC:B3:CF:E6:F0:44:F9:46:20:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3137302e3234372e3230302e302f32332d3233203d3e20323633323536.roa
Signing time:             Fri 10 Jan 2025 16:41:54 +0000
ROA not before:           Fri 10 Jan 2025 16:36:54 +0000
ROA not after:            Fri 09 Jan 2026 16:41:54 +0000
asID:                     263256
IP address blocks:        170.247.200.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.crl
                          rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 13:49:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:b8:3f:84:41:87:03:81:ad:03:23:9e:53:cd:6e:0d:b5:72:a3:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011
        Validity
            Not Before: Jan 10 16:36:54 2025 GMT
            Not After : Jan  9 16:41:54 2026 GMT
        Subject: CN=C99368B14422EA45FB695B4B82609476B5A37D1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:28:e7:34:1a:11:7a:86:a2:ea:3b:c2:ab:00:
                    d1:d4:b3:a5:cf:18:3b:f5:ea:cc:da:9d:d8:87:b0:
                    87:b9:f5:20:70:be:de:32:52:a0:30:1c:0c:eb:34:
                    8c:e2:36:a0:50:71:35:1c:08:49:06:7c:0c:c9:bd:
                    ae:e8:88:a9:69:7c:41:32:83:2b:d5:2b:23:84:3c:
                    47:45:e4:81:0b:57:75:ae:6a:c0:30:e9:a7:be:75:
                    94:58:2a:fc:f7:f7:95:c7:f5:2d:89:fc:15:81:fd:
                    34:be:4a:c5:37:03:94:37:a1:03:bb:a4:44:22:ee:
                    79:4a:1c:29:29:b5:26:96:2d:5f:ea:72:33:be:72:
                    8c:73:16:ca:02:1d:09:d3:dc:7b:c1:1f:54:c5:c4:
                    f3:67:ec:dc:e5:23:3c:c2:be:41:b5:d5:a0:de:07:
                    3f:00:96:da:26:7a:fa:b0:1e:53:0d:8d:e8:cb:99:
                    d8:73:a0:8b:5a:40:e5:eb:6e:0e:bd:0d:9d:34:3c:
                    35:d1:2a:f8:5f:14:48:e2:bd:54:f1:25:23:c5:08:
                    89:4c:1f:2e:dd:6a:ab:74:34:0c:81:ee:53:67:c2:
                    d0:3d:a5:3e:de:5f:cc:86:af:ce:d0:dc:db:b2:19:
                    8d:2f:5f:52:4a:c5:11:7a:94:cd:64:4a:f8:78:ba:
                    2e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:93:68:B1:44:22:EA:45:FB:69:5B:4B:82:60:94:76:B5:A3:7D:1C
            X509v3 Authority Key Identifier:
                keyid:60:F5:CE:DC:60:B1:C9:2A:5A:74:DC:B3:CF:E6:F0:44:F9:46:20:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3137302e3234372e3230302e302f32332d3233203d3e20323633323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:a2:4e:55:7c:5d:da:79:b4:dc:1e:06:a2:ad:de:8f:0a:02:
         15:0a:63:99:51:b7:ff:58:9e:4b:73:e6:d5:6f:fe:dd:b8:63:
         20:36:a1:57:66:0f:07:29:5b:77:f6:57:8a:22:97:f7:97:9b:
         6c:44:24:3b:3a:05:25:0b:a7:ff:3d:4f:4e:84:b0:4b:f6:80:
         88:6a:55:61:7a:83:b1:01:ae:e4:70:7c:de:52:db:bb:b8:b1:
         ac:ec:7c:4f:c0:ef:bd:dc:72:bf:9d:86:8f:f6:31:85:03:a8:
         51:46:78:7b:7f:7a:a4:ac:5a:91:3b:e6:35:f5:e5:d3:ce:21:
         e1:ba:d9:ce:b1:18:aa:80:c1:e6:87:0f:5d:e1:4b:b9:29:a8:
         43:0c:07:69:e4:52:b8:cc:8a:1b:11:ca:a0:25:a8:2d:47:8f:
         b0:12:81:e4:cc:85:d5:dc:fd:b2:5a:e8:15:7b:77:6b:b1:e6:
         64:89:0c:39:ad:b1:cd:5a:00:1c:8c:3c:b2:32:d3:92:83:08:
         c7:01:25:e7:8b:6a:37:ff:f2:93:c3:52:05:8f:54:8e:d0:00:
         66:ff:87:61:40:56:72:d6:8c:73:04:82:07:b6:19:e2:b1:23:
         4c:ce:0d:37:30:6e:82:05:2e:a4:97:df:69:f3:75:47:d7:e8:
         4c:88:3e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:45:42 2025 by rpki-client