Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/1/3230312e3135392e3138302e302f32342d3234203d3e203631373936.roa
File:                     3230312e3135392e3138302e302f32342d3234203d3e203631373936.roa (raw, json)
Hash identifier:          KE/FfloBg9j7LVlCQFyNpr9zJUC3iccSJ6obQdYaYjc=
Subject key identifier:   A9:FB:A4:1B:4C:95:54:2D:E4:AB:1E:7D:6A:FB:52:DC:7B:29:F3:CF
Certificate issuer:       /CN=70FD5F601D7D462846F26FF3F049419410FECDD4
Certificate serial:       4857D278E7F10C6D1BEC085A88038729BFFCFB55
Authority key identifier: 70:FD:5F:60:1D:7D:46:28:46:F2:6F:F3:F0:49:41:94:10:FE:CD:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70FD5F601D7D462846F26FF3F049419410FECDD4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/1/3230312e3135392e3138302e302f32342d3234203d3e203631373936.roa
Signing time:             Thu 04 Apr 2024 04:22:50 +0000
ROA not before:           Thu 04 Apr 2024 04:17:50 +0000
ROA not after:            Thu 03 Apr 2025 04:22:50 +0000
asID:                     61796
IP address blocks:        201.159.180.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/1/70FD5F601D7D462846F26FF3F049419410FECDD4.crl
                          rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/1/70FD5F601D7D462846F26FF3F049419410FECDD4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70FD5F601D7D462846F26FF3F049419410FECDD4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:18:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:57:d2:78:e7:f1:0c:6d:1b:ec:08:5a:88:03:87:29:bf:fc:fb:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70FD5F601D7D462846F26FF3F049419410FECDD4
        Validity
            Not Before: Apr  4 04:17:50 2024 GMT
            Not After : Apr  3 04:22:50 2025 GMT
        Subject: CN=A9FBA41B4C95542DE4AB1E7D6AFB52DC7B29F3CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0e:54:27:77:fa:93:6a:e1:7f:d5:93:0b:02:
                    9b:bd:56:d3:f3:9e:cb:02:c6:01:14:62:48:9b:c1:
                    85:00:1f:a4:bc:06:b3:03:e1:78:57:4c:01:c3:fd:
                    39:bd:7f:fe:7a:8f:2f:96:45:aa:7a:eb:86:08:20:
                    c5:eb:af:d1:8d:60:48:82:16:54:36:c1:9d:42:fc:
                    6d:7c:c9:c2:28:2f:62:49:ef:a1:04:47:1b:41:1c:
                    c8:27:36:ce:d9:11:f6:07:41:a9:37:5f:a7:0c:8e:
                    21:e9:f6:f6:c7:82:37:ed:1e:b5:5e:f1:d0:0d:ac:
                    b1:f7:21:a7:95:f9:65:05:12:15:5b:9d:38:8d:57:
                    a4:1d:fc:b8:3a:52:df:c0:fd:dd:97:2e:11:24:ea:
                    47:c2:86:47:50:19:0e:6d:17:6e:f4:7c:33:83:8e:
                    ca:3d:c0:d8:a2:c8:65:63:33:26:9b:b6:57:3a:4e:
                    33:bb:ab:6f:a4:c2:d2:73:15:be:81:46:9f:44:73:
                    7d:6d:74:2b:c6:50:2a:aa:1a:2a:18:2c:e7:12:d4:
                    ba:0c:a9:24:d7:28:2f:9c:54:f6:96:52:48:43:28:
                    27:eb:61:6d:28:69:cf:21:53:bd:e2:05:55:a3:17:
                    fb:f7:e4:49:22:8d:a4:3b:29:07:5c:77:8d:9b:0f:
                    c9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:FB:A4:1B:4C:95:54:2D:E4:AB:1E:7D:6A:FB:52:DC:7B:29:F3:CF
            X509v3 Authority Key Identifier:
                keyid:70:FD:5F:60:1D:7D:46:28:46:F2:6F:F3:F0:49:41:94:10:FE:CD:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/1/70FD5F601D7D462846F26FF3F049419410FECDD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70FD5F601D7D462846F26FF3F049419410FECDD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/1/3230312e3135392e3138302e302f32342d3234203d3e203631373936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:58:08:80:1d:14:b6:a5:5c:fa:40:7e:cd:0b:f9:de:0c:f7:
         a9:22:0f:00:1a:63:7b:e2:4b:00:1f:73:51:8b:f2:5e:a6:ba:
         5e:fc:f9:45:b7:47:0c:ff:bb:a4:9d:6d:85:ba:0c:e7:dd:fc:
         19:44:ac:2e:96:88:2f:4e:6e:57:c0:1d:76:52:b8:90:3a:cc:
         4a:28:12:46:2b:0f:9b:c2:c2:d6:94:8f:40:d7:ac:d6:d7:5c:
         2a:29:97:60:4a:55:0a:17:d9:2b:45:b6:34:09:0d:69:14:62:
         bd:0b:ba:d3:69:fc:c7:5c:5c:03:93:3d:39:11:7d:f0:80:04:
         aa:0f:ed:7c:2f:ad:ea:ba:d4:29:09:59:3f:85:71:be:c4:72:
         4a:cb:a1:3e:d5:8a:0f:45:ba:19:aa:e5:11:ca:03:32:ac:f8:
         03:ef:d3:b6:fc:ba:52:ea:55:2d:d1:61:33:98:4f:d0:65:52:
         84:02:61:f7:aa:d7:0d:80:73:e2:27:52:e5:45:95:e2:e1:24:
         10:c0:24:61:87:9a:f9:8b:e4:0d:8b:0d:c3:89:91:02:9e:f9:
         bb:e7:1e:67:b5:01:d3:a6:1f:12:0d:83:ba:d8:07:d6:a5:f9:
         5f:79:d8:0c:15:7f:d8:58:ff:4d:e1:77:72:73:ab:32:d8:c1:
         18:c0:c6:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:15 2024 by rpki-client on console-fra.rpki-client.org