Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/1/3230312e3135392e3138312e302f32342d3234203d3e203631373936.roa
File:                     3230312e3135392e3138312e302f32342d3234203d3e203631373936.roa (raw, json)
Hash identifier:          0ls6TYgl30K0A9eJc7ClEiXlP7rKOSas9c6cQ9y/XDc=
Subject key identifier:   8F:28:98:BF:13:EB:04:A9:D1:D4:11:0E:9E:F7:15:A2:6B:D6:2A:6C
Certificate issuer:       /CN=70FD5F601D7D462846F26FF3F049419410FECDD4
Certificate serial:       0E16DA1ED1392945DBA315ADEA94FC86D6605A5E
Authority key identifier: 70:FD:5F:60:1D:7D:46:28:46:F2:6F:F3:F0:49:41:94:10:FE:CD:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70FD5F601D7D462846F26FF3F049419410FECDD4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/1/3230312e3135392e3138312e302f32342d3234203d3e203631373936.roa
Signing time:             Thu 04 Apr 2024 04:22:50 +0000
ROA not before:           Thu 04 Apr 2024 04:17:50 +0000
ROA not after:            Thu 03 Apr 2025 04:22:50 +0000
asID:                     61796
IP address blocks:        201.159.181.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/1/70FD5F601D7D462846F26FF3F049419410FECDD4.crl
                          rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/1/70FD5F601D7D462846F26FF3F049419410FECDD4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70FD5F601D7D462846F26FF3F049419410FECDD4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:18:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:16:da:1e:d1:39:29:45:db:a3:15:ad:ea:94:fc:86:d6:60:5a:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70FD5F601D7D462846F26FF3F049419410FECDD4
        Validity
            Not Before: Apr  4 04:17:50 2024 GMT
            Not After : Apr  3 04:22:50 2025 GMT
        Subject: CN=8F2898BF13EB04A9D1D4110E9EF715A26BD62A6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b0:43:06:0a:11:1e:b5:56:7d:ea:d9:2c:17:
                    fb:26:19:1f:d3:c2:cf:b0:8b:69:44:58:f8:99:0c:
                    80:41:6d:3a:d9:cc:d9:83:f3:87:ff:d6:eb:d8:27:
                    b6:dd:a0:86:36:6a:a1:16:88:29:a0:a8:99:ed:fe:
                    56:e6:11:c7:89:2b:24:41:f0:42:e4:1b:df:f9:aa:
                    d0:5e:6b:63:aa:b4:f0:58:a9:6d:94:f1:ca:f9:15:
                    65:84:b6:7c:ab:2e:93:b7:d7:7a:cb:9e:70:9a:6f:
                    ca:db:af:90:3c:63:e5:f1:82:35:be:21:aa:43:a9:
                    ce:95:53:47:6c:9a:77:49:21:25:11:30:b0:62:54:
                    c0:da:4c:86:bf:61:63:60:d3:0d:eb:70:96:b7:9e:
                    c2:9e:4f:d1:9f:6a:b8:59:0a:ac:13:d2:f9:e1:11:
                    41:24:50:77:9a:17:d1:c8:1f:67:7d:07:9a:e7:69:
                    13:51:a0:44:ea:4d:fc:78:e7:16:9f:a0:63:b1:08:
                    9e:00:b3:4b:59:fe:cb:a0:1f:27:c0:f5:7a:25:ad:
                    a7:72:70:07:f7:7d:0c:b9:c4:e9:43:59:2e:18:30:
                    cc:6b:a9:75:95:c3:2b:47:89:dc:81:7b:ca:0f:0d:
                    0c:23:15:97:50:8d:f9:1e:59:48:d6:e0:43:81:9b:
                    d1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:28:98:BF:13:EB:04:A9:D1:D4:11:0E:9E:F7:15:A2:6B:D6:2A:6C
            X509v3 Authority Key Identifier:
                keyid:70:FD:5F:60:1D:7D:46:28:46:F2:6F:F3:F0:49:41:94:10:FE:CD:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/1/70FD5F601D7D462846F26FF3F049419410FECDD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70FD5F601D7D462846F26FF3F049419410FECDD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/1/3230312e3135392e3138312e302f32342d3234203d3e203631373936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:51:6d:1a:53:71:3a:48:f4:be:d8:9f:19:75:59:06:ed:52:
         68:29:6f:5c:97:e8:78:d0:23:44:cd:96:a7:81:9c:2f:33:c8:
         ea:6a:d7:2c:87:f6:0c:4b:10:18:24:a7:3c:b6:a2:76:78:b7:
         96:18:ff:32:08:5a:b7:52:3c:e4:6a:76:88:3e:a9:5f:2a:3c:
         3b:8f:1b:7c:02:a5:68:d7:91:c2:c8:eb:83:d2:6e:1c:ad:01:
         e4:f2:01:9e:d5:03:4e:44:6c:51:13:82:b9:53:5b:39:93:cc:
         8c:e4:c2:de:62:77:39:a5:83:4a:43:3a:c4:0e:60:8c:ef:de:
         f0:bd:ee:91:06:a7:c0:58:7f:fa:97:58:ed:d4:c5:2e:25:0c:
         36:9c:74:3e:78:12:df:0f:5f:98:08:2a:8b:c4:35:93:a3:33:
         22:89:1f:1d:a2:18:52:d4:b4:55:a1:45:1a:e7:56:46:f6:bf:
         25:48:d3:cf:96:a2:70:70:c8:f0:f4:11:cc:43:63:e3:37:db:
         d9:dc:fb:fb:7d:b1:9d:8a:b4:5e:9f:a4:d0:4d:d5:c7:62:67:
         a1:96:ce:bf:77:6f:26:01:2d:be:94:0c:1e:41:43:cf:1d:31:
         db:53:45:4b:79:3d:d9:49:81:db:f7:80:07:d2:0c:27:af:68:
         ae:53:8e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:15 2024 by rpki-client on console-ams.rpki-client.org