Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/1/3230312e3135392e3138302e302f32332d3233203d3e203631373936.roa
File:                     3230312e3135392e3138302e302f32332d3233203d3e203631373936.roa (raw, json)
Hash identifier:          6VvwNGGeW5eRnpMifPhg9DvZstb/QyDVky2OeUdldh4=
Subject key identifier:   4B:1B:9E:A3:C6:F7:67:31:2D:27:11:DD:F4:19:11:97:90:4A:41:C2
Certificate issuer:       /CN=70FD5F601D7D462846F26FF3F049419410FECDD4
Certificate serial:       7D271150D8749B9BAAC181258B9130B83AD8C29A
Authority key identifier: 70:FD:5F:60:1D:7D:46:28:46:F2:6F:F3:F0:49:41:94:10:FE:CD:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70FD5F601D7D462846F26FF3F049419410FECDD4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/1/3230312e3135392e3138302e302f32332d3233203d3e203631373936.roa
Signing time:             Thu 04 Apr 2024 04:22:50 +0000
ROA not before:           Thu 04 Apr 2024 04:17:50 +0000
ROA not after:            Thu 03 Apr 2025 04:22:50 +0000
asID:                     61796
IP address blocks:        201.159.180.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/1/70FD5F601D7D462846F26FF3F049419410FECDD4.crl
                          rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/1/70FD5F601D7D462846F26FF3F049419410FECDD4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70FD5F601D7D462846F26FF3F049419410FECDD4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:18:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:27:11:50:d8:74:9b:9b:aa:c1:81:25:8b:91:30:b8:3a:d8:c2:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70FD5F601D7D462846F26FF3F049419410FECDD4
        Validity
            Not Before: Apr  4 04:17:50 2024 GMT
            Not After : Apr  3 04:22:50 2025 GMT
        Subject: CN=4B1B9EA3C6F767312D2711DDF4191197904A41C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d8:f4:9c:65:96:9d:6a:4f:03:9c:e0:e7:72:
                    d6:65:ae:9b:5a:b9:61:59:aa:52:d4:bc:ca:52:74:
                    f0:6d:22:27:8b:82:92:1d:ae:eb:25:8a:1a:8d:ad:
                    ea:a2:4c:d9:05:05:b0:c1:6b:ef:7f:e1:71:34:bf:
                    0c:aa:6d:05:8c:21:9b:c7:b2:61:eb:63:aa:e2:c2:
                    c7:2d:c7:19:c2:db:a5:a0:78:f9:b8:38:77:f8:7c:
                    b7:1b:1a:b3:c1:40:34:df:82:f5:33:73:c2:60:a4:
                    16:34:24:ca:12:09:fa:63:6e:d6:d4:86:90:d1:7c:
                    19:f2:4b:b1:b3:34:a9:e6:3e:5d:14:09:6b:44:b5:
                    c9:39:95:ac:6c:c6:e7:80:6e:25:4e:ce:3e:b4:d3:
                    48:4b:12:89:92:c3:3d:28:45:c1:48:14:8d:4f:1b:
                    d5:a6:a7:fd:a0:e2:18:39:00:a8:9f:2b:4f:6f:0a:
                    49:9f:89:38:7a:26:4c:87:9b:ba:7d:e8:d7:b6:a5:
                    c0:52:c2:23:da:ca:ca:cf:2e:3e:fb:6a:ce:ec:fa:
                    f2:ef:7b:32:3d:56:0c:06:f4:7e:8c:09:c3:8b:3c:
                    91:30:e3:e9:96:0f:e5:c3:ef:e8:ec:16:67:3f:d4:
                    ac:5e:95:b3:09:28:87:d4:51:34:22:b5:36:b9:ef:
                    06:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:1B:9E:A3:C6:F7:67:31:2D:27:11:DD:F4:19:11:97:90:4A:41:C2
            X509v3 Authority Key Identifier:
                keyid:70:FD:5F:60:1D:7D:46:28:46:F2:6F:F3:F0:49:41:94:10:FE:CD:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/1/70FD5F601D7D462846F26FF3F049419410FECDD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70FD5F601D7D462846F26FF3F049419410FECDD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/1/3230312e3135392e3138302e302f32332d3233203d3e203631373936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:c5:58:47:ca:34:2f:60:c0:0d:82:4d:f8:69:c1:75:f1:4e:
         f2:f6:bd:25:6a:41:31:0b:f2:67:15:88:92:41:b4:c3:b9:e6:
         48:68:cd:eb:6f:99:10:3d:e1:d4:84:f9:bd:42:2c:73:24:47:
         8b:d7:e0:94:a0:4c:2b:1a:e9:73:fd:78:b3:d7:8c:a8:ea:52:
         09:0b:5e:94:c1:59:37:d0:80:74:00:ab:55:98:1d:8c:b4:d5:
         31:95:f9:d2:1c:d9:e5:ca:23:38:c1:c2:41:5f:58:5e:bf:05:
         20:b2:d9:ed:4e:57:40:7f:26:3c:09:7c:ec:df:5c:22:e7:80:
         d7:3a:3e:8e:dd:08:12:9e:f2:1f:b1:82:db:d9:63:91:df:80:
         45:5c:59:a6:b2:78:3b:a3:8b:64:8d:99:07:f5:0e:45:dc:48:
         b8:10:d8:8a:f7:21:81:1f:ae:b5:ee:4c:64:15:d1:d8:fa:6f:
         b4:00:e3:6a:e6:d2:65:0d:42:c4:02:d8:c7:d7:b3:a6:5e:0e:
         07:b1:a3:6d:e8:dd:22:ef:3f:5e:7a:0b:b9:0b:45:82:5c:58:
         61:37:88:79:55:e3:db:62:5e:04:ba:3b:4f:e5:67:90:65:27:
         a1:a3:0b:8a:2d:e8:9e:2b:0a:9f:e2:78:e4:04:49:ba:27:36:
         29:d5:9b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:15 2024 by rpki-client on console-fra.rpki-client.org