Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/1/3230312e3135392e3138332e302f32342d3234203d3e203631373936.roa
File:                     3230312e3135392e3138332e302f32342d3234203d3e203631373936.roa (raw, json)
Hash identifier:          WyS34b3bXDBNJVHs3zctwAA+2Zz8vLg4sDi/AH2oAuw=
Subject key identifier:   1E:9F:28:34:5C:BF:BF:5E:80:29:2C:A8:E4:62:E3:8A:7C:B9:8F:90
Certificate issuer:       /CN=70FD5F601D7D462846F26FF3F049419410FECDD4
Certificate serial:       58E768E762C3C74228DCFB42C4D3C9661D70D327
Authority key identifier: 70:FD:5F:60:1D:7D:46:28:46:F2:6F:F3:F0:49:41:94:10:FE:CD:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70FD5F601D7D462846F26FF3F049419410FECDD4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/1/3230312e3135392e3138332e302f32342d3234203d3e203631373936.roa
Signing time:             Thu 04 Apr 2024 04:22:49 +0000
ROA not before:           Thu 04 Apr 2024 04:17:49 +0000
ROA not after:            Thu 03 Apr 2025 04:22:49 +0000
asID:                     61796
IP address blocks:        201.159.183.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/1/70FD5F601D7D462846F26FF3F049419410FECDD4.crl
                          rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/1/70FD5F601D7D462846F26FF3F049419410FECDD4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70FD5F601D7D462846F26FF3F049419410FECDD4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:18:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:e7:68:e7:62:c3:c7:42:28:dc:fb:42:c4:d3:c9:66:1d:70:d3:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70FD5F601D7D462846F26FF3F049419410FECDD4
        Validity
            Not Before: Apr  4 04:17:49 2024 GMT
            Not After : Apr  3 04:22:49 2025 GMT
        Subject: CN=1E9F28345CBFBF5E80292CA8E462E38A7CB98F90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f4:fb:99:07:67:3b:5c:5a:99:51:76:66:60:
                    ef:fe:f4:65:27:e9:1a:db:87:23:af:5f:89:62:2a:
                    24:2f:9e:ac:6f:ee:52:00:40:7b:85:ce:33:7a:34:
                    82:c3:48:5d:9e:56:ee:20:5e:56:09:91:61:bf:02:
                    35:d6:ef:4a:cd:6b:8f:1e:05:43:96:f4:1d:7d:3e:
                    30:dc:54:b3:1a:b9:6f:01:a0:b3:67:fd:08:42:ef:
                    c8:7e:3f:dd:f9:73:5d:fc:8c:95:fe:a2:49:f1:94:
                    15:77:8c:65:85:74:86:ff:63:98:bf:99:00:7c:c6:
                    e2:bc:e0:ce:4b:0f:3b:9d:9a:b8:ea:8c:5e:99:eb:
                    1d:d0:2d:46:19:30:73:ee:b7:b0:37:21:48:9d:08:
                    a6:f8:96:1c:4e:65:b4:5d:e3:32:92:91:d6:ee:df:
                    31:39:7b:99:e8:e0:bc:65:0b:f1:23:7e:24:27:2a:
                    5a:fa:0a:6b:43:34:a3:ba:95:f2:02:74:a0:e4:d2:
                    90:7e:2b:79:31:e5:16:80:a1:2d:4f:18:2d:67:2b:
                    f4:25:9c:b7:1a:53:f4:c5:ec:6e:69:a7:e5:c1:75:
                    76:ef:2b:98:df:46:b0:43:a7:0f:8d:66:51:2d:31:
                    1b:80:75:59:95:3f:c9:16:24:f5:94:0b:80:69:8a:
                    d8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:9F:28:34:5C:BF:BF:5E:80:29:2C:A8:E4:62:E3:8A:7C:B9:8F:90
            X509v3 Authority Key Identifier:
                keyid:70:FD:5F:60:1D:7D:46:28:46:F2:6F:F3:F0:49:41:94:10:FE:CD:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/1/70FD5F601D7D462846F26FF3F049419410FECDD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70FD5F601D7D462846F26FF3F049419410FECDD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/1/3230312e3135392e3138332e302f32342d3234203d3e203631373936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:9d:13:11:01:26:f1:16:c7:ca:03:b8:c8:24:98:60:a3:b5:
         66:d8:37:e0:b7:f2:77:f8:3e:ac:88:cf:49:f8:a3:ae:bc:57:
         ed:93:d4:da:24:aa:6a:dc:92:b6:26:98:b9:36:cb:b2:a9:44:
         df:05:74:08:3b:f2:2b:87:60:db:94:c4:f7:e0:b2:c4:dc:97:
         ed:9e:36:2b:2d:88:05:ea:27:8c:6f:06:df:82:95:26:12:97:
         02:33:c2:92:24:64:0d:85:2d:60:44:b7:d8:ea:c4:2c:12:00:
         bb:b7:a4:1c:e9:ab:77:b8:4b:0a:7c:ba:5c:b4:d7:33:0c:05:
         57:dc:48:a7:a7:35:bb:16:a9:ec:7b:fd:a0:aa:46:56:6f:88:
         b2:9c:dd:d5:9b:8b:f4:38:8e:9c:f9:65:e8:bb:14:97:8b:fa:
         8e:18:0d:6b:2c:9f:dd:83:1f:f4:c6:cf:9c:cb:f2:9c:57:87:
         bb:36:24:c1:1f:b4:25:18:0f:34:49:36:99:73:a3:da:fb:31:
         f3:a0:50:a2:1b:d3:9c:ad:99:6c:40:04:10:73:40:b0:aa:8e:
         e8:9d:a5:17:32:cc:d7:aa:8a:a8:b3:36:37:c3:62:25:99:0f:
         f0:50:71:74:5e:45:35:cf:21:64:49:54:2d:06:ba:7c:ec:3e:
         25:95:2f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:15 2024 by rpki-client on console-fra.rpki-client.org