Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/3136382e3132312e3234382e302f32322d3235203d3e20323632393636.roa
File:                     3136382e3132312e3234382e302f32322d3235203d3e20323632393636.roa (raw, json)
Hash identifier:          GwV6OHx/eSx0uuK+VGqYD2k0KhLdHnzmcRPFl1MWvaI=
Subject key identifier:   F3:37:39:A2:9B:4F:76:61:5D:E1:E3:21:DB:84:A2:10:9B:09:93:29
Certificate issuer:       /CN=DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229
Certificate serial:       6759169EADA1F030F9B34DC6E22921696E87EEF7
Authority key identifier: DB:60:11:3D:B8:47:EE:4F:DF:EC:F8:E7:B3:2D:8C:B0:A2:8A:42:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/3136382e3132312e3234382e302f32322d3235203d3e20323632393636.roa
Signing time:             Thu 04 Apr 2024 20:35:06 +0000
ROA not before:           Thu 04 Apr 2024 20:30:06 +0000
ROA not after:            Thu 03 Apr 2025 20:35:06 +0000
asID:                     262966
IP address blocks:        168.121.248.0/22 maxlen: 25

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.crl
                          rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:59:16:9e:ad:a1:f0:30:f9:b3:4d:c6:e2:29:21:69:6e:87:ee:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229
        Validity
            Not Before: Apr  4 20:30:06 2024 GMT
            Not After : Apr  3 20:35:06 2025 GMT
        Subject: CN=F33739A29B4F76615DE1E321DB84A2109B099329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:53:51:1f:bd:b5:03:ec:65:d3:e4:de:f7:d9:
                    d6:7b:09:26:73:6d:fd:06:3f:ce:69:5d:66:eb:b0:
                    68:ac:ff:b4:b6:2a:b8:96:d3:74:51:da:bc:08:2f:
                    45:e2:72:81:60:08:a6:87:08:d4:f2:14:58:69:92:
                    24:e8:68:06:e1:4e:8a:1f:93:d0:7d:5e:91:7b:ab:
                    88:b5:a3:b4:0c:be:a9:b7:1a:8e:2d:40:ad:03:23:
                    80:05:e9:b5:8e:db:05:f3:b2:9a:c7:a4:c8:33:89:
                    ca:c2:a0:8e:50:37:90:1f:c5:e7:f6:75:99:1d:a3:
                    8d:31:ce:74:b0:04:55:63:2e:eb:ea:b7:92:4a:74:
                    5e:f7:a0:71:71:4a:c6:ce:0e:16:e0:99:85:fb:32:
                    11:9e:ff:cf:12:dd:85:b9:9b:7e:9b:c7:a7:ea:4f:
                    f4:0a:e9:3e:af:25:f4:0f:53:6b:b2:fe:a0:5b:b7:
                    26:f3:2d:69:62:2b:94:f1:5e:65:fb:7e:15:06:6f:
                    44:43:51:06:a2:6e:d1:c7:7f:34:1d:07:1d:cc:cb:
                    d5:ef:5b:b3:03:06:b7:9d:bc:f9:c2:c6:7c:a9:63:
                    b2:83:f6:16:6b:5f:ae:6f:ad:49:b6:f5:cd:87:db:
                    96:72:0e:6c:ce:66:66:f7:9a:46:20:16:f0:71:bf:
                    db:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:37:39:A2:9B:4F:76:61:5D:E1:E3:21:DB:84:A2:10:9B:09:93:29
            X509v3 Authority Key Identifier:
                keyid:DB:60:11:3D:B8:47:EE:4F:DF:EC:F8:E7:B3:2D:8C:B0:A2:8A:42:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/3136382e3132312e3234382e302f32322d3235203d3e20323632393636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:f4:34:69:22:1e:cb:90:a2:50:3e:84:29:14:b4:5b:50:6e:
         7e:f7:f7:be:36:a5:52:52:90:6d:b6:12:f5:7e:b2:18:18:99:
         86:4f:24:b0:ca:16:df:a3:a9:07:d7:e0:39:0e:0f:f9:15:72:
         07:05:6d:bc:17:88:bb:38:95:e4:71:40:4f:b0:93:eb:3a:87:
         82:3c:ec:eb:d6:88:53:7b:6b:59:9c:b8:1c:ed:80:47:4e:a7:
         3b:d9:7e:1e:1d:59:10:98:a4:4a:ed:43:36:3b:a1:e3:6b:c0:
         82:42:17:5a:7e:fe:e1:87:2b:fa:44:71:86:c3:0e:65:79:10:
         6d:8c:eb:e1:6b:ca:6d:ed:14:ed:f8:66:87:55:37:0b:88:14:
         89:86:e0:66:a8:cf:37:d5:bb:48:e8:6a:24:eb:6a:b8:f0:47:
         62:df:f6:58:02:a2:f8:37:05:2c:b8:ea:05:3d:1d:65:78:18:
         19:db:58:e7:a1:02:17:13:ad:96:9b:d3:f4:3e:19:77:50:08:
         54:86:13:c3:63:dc:dd:a3:93:59:87:af:ba:bd:7a:76:b2:09:
         c7:98:7b:28:50:73:8a:34:94:70:29:9a:9b:3f:b4:fa:56:be:
         7a:56:49:bb:aa:9d:b5:cb:68:fb:1e:d8:77:5c:f0:64:e5:8f:
         02:d0:99:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 06:35:52 2024 by rpki-client on console-ams.rpki-client.org