Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7T7tW6PQwJk1UF4EVc8ZvsHGqiHfJydzxFviQiarMFo/0/3136382e39302e35322e302f32322d3232203d3e20323635333134.roa
File:                     3136382e39302e35322e302f32322d3232203d3e20323635333134.roa (raw, json)
Hash identifier:          7pMYgz5WJerzAtpznBosaL5fjYVsOQI4DU2FIgEwHZU=
Subject key identifier:   30:20:DD:59:E5:66:81:D3:8B:B5:A5:B4:F5:2D:4C:59:2C:34:55:5C
Certificate issuer:       /CN=6C7F9672098FA97F6AFC6506273D5BC75FAABA2C
Certificate serial:       184D4B2B55A52ECE05E54AC1E15F84ED1CDD648D
Authority key identifier: 6C:7F:96:72:09:8F:A9:7F:6A:FC:65:06:27:3D:5B:C7:5F:AA:BA:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C7F9672098FA97F6AFC6506273D5BC75FAABA2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7T7tW6PQwJk1UF4EVc8ZvsHGqiHfJydzxFviQiarMFo/0/3136382e39302e35322e302f32322d3232203d3e20323635333134.roa
Signing time:             Wed 22 May 2024 11:39:25 +0000
ROA not before:           Wed 22 May 2024 11:34:25 +0000
ROA not after:            Wed 21 May 2025 11:39:25 +0000
asID:                     265314
IP address blocks:        168.90.52.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7T7tW6PQwJk1UF4EVc8ZvsHGqiHfJydzxFviQiarMFo/0/6C7F9672098FA97F6AFC6506273D5BC75FAABA2C.crl
                          rsync://rpki-repo.registro.br/repo/7T7tW6PQwJk1UF4EVc8ZvsHGqiHfJydzxFviQiarMFo/0/6C7F9672098FA97F6AFC6506273D5BC75FAABA2C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C7F9672098FA97F6AFC6506273D5BC75FAABA2C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 17:51:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:4d:4b:2b:55:a5:2e:ce:05:e5:4a:c1:e1:5f:84:ed:1c:dd:64:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C7F9672098FA97F6AFC6506273D5BC75FAABA2C
        Validity
            Not Before: May 22 11:34:25 2024 GMT
            Not After : May 21 11:39:25 2025 GMT
        Subject: CN=3020DD59E56681D38BB5A5B4F52D4C592C34555C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d6:7b:30:5d:06:63:11:f8:9c:c3:1c:b5:70:
                    14:33:df:db:13:cf:20:b4:f3:59:46:a8:66:9e:6b:
                    74:20:9e:d8:06:b7:ce:45:92:50:b0:74:de:19:ce:
                    a1:ac:01:63:c0:97:01:93:df:e5:f9:8f:6c:43:c7:
                    ec:be:66:e6:77:ae:6e:c1:7c:69:26:5d:c5:13:72:
                    46:78:f4:c1:c7:44:1d:92:bd:fd:cf:1c:32:84:6c:
                    67:fa:ba:c0:ca:8a:42:5b:4c:ae:63:33:81:38:ae:
                    02:f7:8b:44:98:17:0c:43:3b:2e:86:f3:e8:0e:21:
                    30:cb:97:d8:11:6d:4c:ad:b3:1b:83:37:61:0f:0f:
                    89:24:8e:55:ba:90:1a:1e:2c:ad:13:55:85:4a:6a:
                    72:b0:04:71:d0:90:83:ea:59:d4:5f:22:56:b2:7b:
                    44:82:27:09:a0:a6:c4:45:64:3b:1a:40:65:8d:8c:
                    34:09:d2:8f:25:69:62:6b:d9:6c:ca:95:cc:92:bf:
                    95:59:70:37:10:9a:0e:0c:6f:ae:ac:72:1d:83:d9:
                    27:8a:19:c2:9a:38:ef:3d:0c:15:08:23:f5:62:26:
                    87:e2:a7:61:51:2f:c2:4d:ed:03:3d:25:96:94:58:
                    fd:1e:b2:05:71:f2:da:e5:f7:be:33:c7:33:c2:e0:
                    0e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:20:DD:59:E5:66:81:D3:8B:B5:A5:B4:F5:2D:4C:59:2C:34:55:5C
            X509v3 Authority Key Identifier:
                keyid:6C:7F:96:72:09:8F:A9:7F:6A:FC:65:06:27:3D:5B:C7:5F:AA:BA:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7T7tW6PQwJk1UF4EVc8ZvsHGqiHfJydzxFviQiarMFo/0/6C7F9672098FA97F6AFC6506273D5BC75FAABA2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C7F9672098FA97F6AFC6506273D5BC75FAABA2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7T7tW6PQwJk1UF4EVc8ZvsHGqiHfJydzxFviQiarMFo/0/3136382e39302e35322e302f32322d3232203d3e20323635333134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:1e:ce:74:7e:14:27:68:eb:1b:5c:6b:55:70:cf:a6:e2:52:
         74:3b:ef:56:49:b9:db:53:21:64:60:dd:67:02:03:00:ed:31:
         4f:f4:bc:49:87:55:78:aa:ed:54:69:bc:d5:bd:02:cd:a5:7d:
         ee:6b:fc:fb:70:70:50:50:4e:72:3c:63:eb:75:40:79:ee:80:
         ac:a4:8b:f9:f8:d1:e1:77:59:a5:8e:d2:fd:9c:d1:1d:8f:7e:
         43:3c:11:f8:e0:78:ff:ac:a8:c5:e5:39:26:07:5c:c3:dd:db:
         c5:64:cd:1a:67:5b:df:33:2f:f4:6d:28:a2:25:08:7d:a6:b5:
         d4:3e:32:ee:6c:4c:ac:4b:09:76:30:27:a6:84:84:47:c7:6a:
         45:7f:df:7c:c3:19:48:80:91:34:79:56:1c:42:e4:ec:1d:7e:
         a9:36:48:94:bc:ce:9e:d4:6d:98:ef:ea:9f:62:19:52:64:03:
         6b:39:2a:79:40:71:b8:da:e2:39:65:06:44:46:16:47:9e:76:
         80:e0:c0:f6:6c:f1:b6:60:0c:15:54:da:de:ea:31:d8:78:e2:
         e7:25:f0:ff:0f:65:05:4d:3c:5a:07:99:c0:7b:6e:86:8e:59:
         63:bb:ef:6a:90:f6:78:ca:da:54:7a:6f:3e:6d:11:b4:09:2b:
         7f:27:fc:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 19:19:50 2024 by rpki-client on console-fra.rpki-client.org