Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/3136382e39302e3230342e302f32332d3234203d3e20323635323930.roa
File:                     3136382e39302e3230342e302f32332d3234203d3e20323635323930.roa (raw, json)
Hash identifier:          7f+1pD9LwwoC+qMLNFBEZz2hsvQhGUGXW74l1LrpdfQ=
Subject key identifier:   62:50:A6:F4:F7:8C:74:B6:CB:AA:C4:97:89:20:E2:CE:F6:FC:37:09
Certificate issuer:       /CN=D73B6EB9B972D5F3B7353A32BBF11CADB6207D38
Certificate serial:       7D12FD0FFD438E74C30882B4FC18C4482EF97AD9
Authority key identifier: D7:3B:6E:B9:B9:72:D5:F3:B7:35:3A:32:BB:F1:1C:AD:B6:20:7D:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/3136382e39302e3230342e302f32332d3234203d3e20323635323930.roa
Signing time:             Fri 17 May 2024 14:49:31 +0000
ROA not before:           Fri 17 May 2024 14:44:31 +0000
ROA not after:            Fri 16 May 2025 14:49:31 +0000
asID:                     265290
IP address blocks:        168.90.204.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.crl
                          rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 12:33:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:12:fd:0f:fd:43:8e:74:c3:08:82:b4:fc:18:c4:48:2e:f9:7a:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D73B6EB9B972D5F3B7353A32BBF11CADB6207D38
        Validity
            Not Before: May 17 14:44:31 2024 GMT
            Not After : May 16 14:49:31 2025 GMT
        Subject: CN=6250A6F4F78C74B6CBAAC4978920E2CEF6FC3709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:66:9c:a1:cd:7d:d5:05:b0:c4:f8:c2:a5:90:
                    83:26:34:e9:7d:a8:06:f9:77:98:32:7d:eb:04:22:
                    8c:7b:49:1e:65:1d:ea:97:2b:4d:fd:fa:98:0e:ab:
                    e4:72:29:ed:82:bc:3a:d6:1f:fb:15:8f:75:f2:3d:
                    5f:13:49:22:71:3e:ca:3e:bc:f3:cc:86:81:c0:4b:
                    52:ed:03:84:15:2e:95:86:6c:a6:14:44:46:60:87:
                    52:0b:12:91:7b:fd:cb:93:a4:72:71:6f:ba:9f:af:
                    fe:b5:b3:fc:ef:d6:46:75:4c:71:0e:24:61:aa:03:
                    6f:b0:9b:f2:9c:f5:bc:5c:45:9c:bd:d5:fc:9c:8c:
                    0b:37:3f:53:38:c0:15:df:f0:fc:b8:9a:0f:4a:61:
                    ca:1a:17:83:17:69:cd:7f:62:c8:ad:d3:14:94:b5:
                    ec:3b:fa:11:bc:3c:a0:2f:04:d3:d2:a6:a7:66:31:
                    2f:29:64:90:91:10:fd:d4:c4:6a:8d:57:74:48:72:
                    b9:b7:7b:0f:e9:71:5f:53:87:f8:b3:1b:fc:14:89:
                    be:0a:f1:06:da:96:c1:16:f4:70:24:86:b1:b0:35:
                    75:dd:89:5a:d1:3b:f8:d1:d8:a3:af:52:80:b8:be:
                    c7:19:96:c9:dc:d2:33:52:db:fc:67:8a:31:00:7a:
                    a9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:50:A6:F4:F7:8C:74:B6:CB:AA:C4:97:89:20:E2:CE:F6:FC:37:09
            X509v3 Authority Key Identifier:
                keyid:D7:3B:6E:B9:B9:72:D5:F3:B7:35:3A:32:BB:F1:1C:AD:B6:20:7D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/3136382e39302e3230342e302f32332d3234203d3e20323635323930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:bc:ed:92:4e:a4:ab:0f:ef:38:f9:1d:93:de:54:a3:9f:cd:
         1b:8f:9b:af:6a:eb:ad:d5:33:80:99:2e:99:eb:07:0a:4f:80:
         dc:1c:54:9c:a5:15:64:65:e2:6f:14:10:e2:ab:1c:84:f6:98:
         63:15:ea:d5:6b:f7:f4:80:76:de:e0:58:d1:cf:f3:7a:78:7a:
         bd:65:39:33:67:8e:12:3e:af:3f:2b:ac:ef:0d:47:41:90:d3:
         4a:56:0c:d4:65:da:ad:66:b7:5f:0b:21:ad:7e:57:d0:f6:59:
         e1:05:52:73:fd:79:0a:e1:a8:fc:97:6e:dc:f7:46:a4:12:28:
         03:ce:b3:d0:e5:1d:02:68:52:28:c8:7f:0a:94:66:75:75:9a:
         43:14:0a:33:3b:cf:83:21:92:11:89:f2:83:17:ae:f3:47:a5:
         7b:42:de:0f:d2:12:ad:ba:b7:d4:47:29:e5:52:ad:7a:5c:f6:
         9f:e8:01:95:8c:ba:6a:a8:ba:52:70:80:a7:74:44:9c:0f:31:
         0a:29:fe:8a:25:04:82:30:43:ec:6b:eb:68:54:e6:8d:5f:c7:
         7f:41:97:ad:fa:02:5c:48:1f:4c:9c:ab:be:f4:5f:66:b6:04:
         87:df:6c:ee:bb:31:18:ed:a1:67:a5:11:9b:46:d0:b1:88:a7:
         1a:86:b8:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 15:50:44 2024 by rpki-client on console-ams.rpki-client.org