Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/2/3230302e33392e33362e302f32322d3234203d3e20323731333433.roa
File:                     3230302e33392e33362e302f32322d3234203d3e20323731333433.roa (raw, json)
Hash identifier:          Pqbqpw9soOH+SYmYL6Z7cBcJnaH2aj06XpbYGkFpNYw=
Subject key identifier:   89:13:B5:77:59:50:B0:5B:E7:1E:D7:0A:7F:1D:7C:B8:46:1C:87:68
Certificate issuer:       /CN=60351DF380C4B3B45FA6563D20C3C596A13B0C50
Certificate serial:       70C5F57D92D94863A96293F824FAD4AD5475EE79
Authority key identifier: 60:35:1D:F3:80:C4:B3:B4:5F:A6:56:3D:20:C3:C5:96:A1:3B:0C:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60351DF380C4B3B45FA6563D20C3C596A13B0C50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/2/3230302e33392e33362e302f32322d3234203d3e20323731333433.roa
Signing time:             Thu 04 Apr 2024 16:56:33 +0000
ROA not before:           Thu 04 Apr 2024 16:51:33 +0000
ROA not after:            Thu 03 Apr 2025 16:56:33 +0000
asID:                     271343
IP address blocks:        200.39.36.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/2/60351DF380C4B3B45FA6563D20C3C596A13B0C50.crl
                          rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/2/60351DF380C4B3B45FA6563D20C3C596A13B0C50.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60351DF380C4B3B45FA6563D20C3C596A13B0C50.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 05:14:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:c5:f5:7d:92:d9:48:63:a9:62:93:f8:24:fa:d4:ad:54:75:ee:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60351DF380C4B3B45FA6563D20C3C596A13B0C50
        Validity
            Not Before: Apr  4 16:51:33 2024 GMT
            Not After : Apr  3 16:56:33 2025 GMT
        Subject: CN=8913B5775950B05BE71ED70A7F1D7CB8461C8768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:00:01:49:74:bf:3c:21:50:58:02:f0:87:3e:
                    04:bb:95:cb:12:34:7c:fe:32:20:bd:b4:30:4a:1a:
                    9f:c7:40:a6:80:81:4d:d6:db:ae:dc:ff:f2:d9:b1:
                    13:c0:83:f8:62:43:1e:8d:96:50:4c:e9:fd:29:c4:
                    e8:15:c1:4d:60:ac:f0:99:2a:5c:d4:2e:f6:c7:a7:
                    12:fa:b9:db:de:63:9c:c1:83:9e:c3:9d:67:bc:61:
                    40:85:3b:ff:42:bc:39:42:61:05:22:d2:ef:38:6c:
                    1d:e3:53:83:f8:66:08:b2:66:4b:b0:86:b3:23:3d:
                    89:c3:cc:55:e3:78:ac:86:56:5e:cf:c5:6e:c8:15:
                    0a:09:fe:1e:a1:00:40:5e:b3:68:18:24:b7:eb:c9:
                    7f:d5:9d:7f:8b:5c:08:d4:38:1b:38:b9:84:5c:01:
                    d0:79:5d:aa:50:f9:88:ce:9e:4b:d4:ab:84:7e:3a:
                    73:52:bb:b2:1f:27:5b:83:5b:97:ac:59:f7:19:8c:
                    85:f0:95:ef:ad:25:6c:d5:10:a9:b0:46:6c:ca:cc:
                    b8:57:1d:8b:3c:93:a9:de:73:dc:ec:4e:2b:b6:e6:
                    6b:26:12:0d:cc:b8:31:00:b8:61:30:7c:fe:e2:a2:
                    63:ef:84:09:1e:fc:32:6e:32:f0:ed:1b:5a:74:7c:
                    6e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:13:B5:77:59:50:B0:5B:E7:1E:D7:0A:7F:1D:7C:B8:46:1C:87:68
            X509v3 Authority Key Identifier:
                keyid:60:35:1D:F3:80:C4:B3:B4:5F:A6:56:3D:20:C3:C5:96:A1:3B:0C:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/2/60351DF380C4B3B45FA6563D20C3C596A13B0C50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60351DF380C4B3B45FA6563D20C3C596A13B0C50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/2/3230302e33392e33362e302f32322d3234203d3e20323731333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:5d:40:ca:ca:22:ed:82:99:83:52:a4:98:b5:da:40:bc:33:
         57:d2:50:34:e1:87:47:49:15:f0:a4:1d:80:de:ec:79:13:de:
         6d:ce:1b:a7:48:40:80:08:df:26:36:1c:b9:5d:07:6a:3c:92:
         16:e0:92:8b:4a:83:38:11:b0:99:19:d8:4b:62:53:02:45:27:
         85:06:40:aa:fb:0a:9f:39:d6:17:5e:3e:4c:57:ac:61:fc:13:
         d4:0e:d5:0d:8d:63:0c:16:a4:72:a6:d7:27:49:21:4b:17:af:
         2c:28:48:f9:5f:57:b0:6b:d7:11:e7:f6:4f:ca:8b:b8:7b:02:
         61:78:0c:15:0a:6c:0e:d6:50:65:be:c8:1e:72:93:64:c1:7b:
         c1:55:14:c8:79:86:f3:d3:f8:02:92:35:9e:65:06:44:e9:80:
         3b:76:84:1f:0a:07:b2:00:4e:1c:7e:0b:80:9d:6a:05:08:e1:
         55:bd:34:9d:92:19:cf:72:bd:09:0b:b2:87:4a:f4:d4:04:bc:
         4e:f6:03:8a:be:79:18:d8:96:c4:e6:b9:28:8a:a1:5c:a6:19:
         83:d3:2b:f4:e3:80:0e:37:c4:dc:f8:82:f5:88:bd:2b:67:89:
         36:18:41:8b:7f:01:26:af:eb:82:1b:73:de:af:c6:a5:4f:b5:
         87:f2:88:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:53:01 2024 by rpki-client on console-ams.rpki-client.org