Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G81J6aRi8gaguucAFXhd3nr6UG9V5434jLWQLtx9wPc6/1/3137302e3233392e36382e302f32322d3332203d3e203533313639.roa
File:                     3137302e3233392e36382e302f32322d3332203d3e203533313639.roa (raw, json)
Hash identifier:          EFM0WBoZIo4b//KZOJn6uTCDq0ma67mUyscYqic2yro=
Subject key identifier:   01:21:CF:BD:87:C5:BC:0C:54:8B:D2:C4:7C:C4:96:11:A2:25:B1:52
Certificate issuer:       /CN=14DABC9061A328905E8120751E9528DFE978C501
Certificate serial:       634A89977670DE257C458B5BD6E0C2B4ED24D37D
Authority key identifier: 14:DA:BC:90:61:A3:28:90:5E:81:20:75:1E:95:28:DF:E9:78:C5:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14DABC9061A328905E8120751E9528DFE978C501.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G81J6aRi8gaguucAFXhd3nr6UG9V5434jLWQLtx9wPc6/1/3137302e3233392e36382e302f32322d3332203d3e203533313639.roa
Signing time:             Wed 03 Apr 2024 21:08:10 +0000
ROA not before:           Wed 03 Apr 2024 21:03:10 +0000
ROA not after:            Wed 02 Apr 2025 21:08:10 +0000
asID:                     53169
IP address blocks:        170.239.68.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G81J6aRi8gaguucAFXhd3nr6UG9V5434jLWQLtx9wPc6/1/14DABC9061A328905E8120751E9528DFE978C501.crl
                          rsync://rpki-repo.registro.br/repo/G81J6aRi8gaguucAFXhd3nr6UG9V5434jLWQLtx9wPc6/1/14DABC9061A328905E8120751E9528DFE978C501.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14DABC9061A328905E8120751E9528DFE978C501.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 10:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:4a:89:97:76:70:de:25:7c:45:8b:5b:d6:e0:c2:b4:ed:24:d3:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14DABC9061A328905E8120751E9528DFE978C501
        Validity
            Not Before: Apr  3 21:03:10 2024 GMT
            Not After : Apr  2 21:08:10 2025 GMT
        Subject: CN=0121CFBD87C5BC0C548BD2C47CC49611A225B152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:01:6d:d5:3e:90:60:5e:15:fa:96:7d:25:e2:
                    6e:14:b7:1f:27:8a:1e:80:68:50:c8:3d:78:27:46:
                    cf:cc:c1:5c:15:83:71:64:96:98:b0:2d:51:87:14:
                    83:ff:67:de:66:78:9f:6b:36:e4:76:1c:a0:40:39:
                    42:fe:bd:56:38:ce:20:ed:df:54:1a:b7:27:5e:fb:
                    14:90:fa:3e:fb:84:ec:52:1a:f8:bb:11:81:fa:e5:
                    73:be:c4:3c:95:11:7f:06:23:6c:45:0f:c2:93:a6:
                    36:71:f2:ba:94:b6:86:3b:95:3c:5d:06:4d:9a:8e:
                    75:b0:46:f4:1a:c8:77:e4:1b:95:8d:86:d1:f4:0d:
                    cb:34:bd:b2:fd:a3:74:e9:19:61:f9:7d:fa:16:38:
                    9b:3e:6e:99:25:78:a7:3f:67:88:78:ec:40:6b:0f:
                    f7:58:44:cb:0c:39:f0:83:3c:32:99:cf:2b:86:e3:
                    e5:64:18:c0:e5:59:08:07:20:2c:75:8a:e5:fe:c7:
                    2e:3b:1c:03:43:08:a9:ab:2c:65:fa:c8:a9:a4:a9:
                    05:91:36:e2:e9:c1:d1:cf:ba:8d:13:1e:d6:e8:68:
                    e6:53:f1:29:dd:15:1a:9e:17:8c:a9:37:e7:88:ae:
                    7c:f3:3d:6b:13:78:46:7f:d5:c9:d2:e7:13:d9:57:
                    fa:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:21:CF:BD:87:C5:BC:0C:54:8B:D2:C4:7C:C4:96:11:A2:25:B1:52
            X509v3 Authority Key Identifier:
                keyid:14:DA:BC:90:61:A3:28:90:5E:81:20:75:1E:95:28:DF:E9:78:C5:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G81J6aRi8gaguucAFXhd3nr6UG9V5434jLWQLtx9wPc6/1/14DABC9061A328905E8120751E9528DFE978C501.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14DABC9061A328905E8120751E9528DFE978C501.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G81J6aRi8gaguucAFXhd3nr6UG9V5434jLWQLtx9wPc6/1/3137302e3233392e36382e302f32322d3332203d3e203533313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:14:d6:32:1d:71:49:65:ed:1a:ca:a5:57:dd:07:08:c9:df:
         b2:2b:fa:b1:d7:2b:00:d8:f2:32:c9:4a:16:a8:cb:7c:6a:3e:
         91:ec:69:b4:cf:39:88:ad:de:da:0d:86:72:8e:70:8d:60:a6:
         0f:e8:a0:40:ad:c6:98:6f:60:a7:96:a1:ce:54:3d:12:98:08:
         0c:4b:54:04:b8:92:99:49:04:f8:9f:95:b0:9b:62:50:99:cb:
         38:72:eb:ff:08:fd:82:18:28:87:fa:6f:66:00:a2:2f:b4:99:
         9f:4a:78:e5:7b:d4:53:d3:3d:72:ee:11:f3:80:95:bf:61:ca:
         82:de:b8:b2:33:c7:8b:1c:15:be:f3:4a:5d:4c:78:c1:4c:5a:
         f8:77:6f:27:1d:4c:5f:87:62:ec:05:4a:7e:69:c7:3a:29:a8:
         6f:f1:5f:24:70:30:38:d0:72:ad:9e:ee:d4:7d:a1:e9:53:be:
         b2:92:de:dd:d8:ee:86:bf:3a:10:23:cb:66:6c:2a:73:6b:ce:
         69:38:d2:15:f1:61:71:a9:07:06:ff:29:87:b2:d3:22:71:83:
         f9:49:d1:e0:e7:7a:64:d9:6c:49:bb:b8:d9:e9:6f:69:51:5c:
         13:d0:05:bd:5e:de:61:45:69:71:b1:2a:f7:d3:ad:b8:48:9c:
         6b:d2:0c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 10:27:44 2024 by rpki-client on console-ams.rpki-client.org