Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/3136382e39302e3139322e302f32322d3232203d3e20323635323831.roa
File:                     3136382e39302e3139322e302f32322d3232203d3e20323635323831.roa (raw, json)
Hash identifier:          lq5E4GF+AFqMf0sZjZVVx5e19zDAdbfCm5+fgdQ0VdA=
Subject key identifier:   D6:98:F2:B5:DB:CB:FD:D4:BA:32:92:71:C6:82:9A:D5:02:77:BD:FA
Certificate issuer:       /CN=27703D671AE6A9B45D2221CB442F8C340216A354
Certificate serial:       08662784EE7C0D09E9F5DD489E7FF7338E305356
Authority key identifier: 27:70:3D:67:1A:E6:A9:B4:5D:22:21:CB:44:2F:8C:34:02:16:A3:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27703D671AE6A9B45D2221CB442F8C340216A354.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/3136382e39302e3139322e302f32322d3232203d3e20323635323831.roa
Signing time:             Thu 04 Jul 2024 16:32:09 +0000
ROA not before:           Thu 04 Jul 2024 16:27:09 +0000
ROA not after:            Thu 03 Jul 2025 16:32:09 +0000
asID:                     265281
IP address blocks:        168.90.192.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/27703D671AE6A9B45D2221CB442F8C340216A354.crl
                          rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/27703D671AE6A9B45D2221CB442F8C340216A354.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27703D671AE6A9B45D2221CB442F8C340216A354.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:66:27:84:ee:7c:0d:09:e9:f5:dd:48:9e:7f:f7:33:8e:30:53:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27703D671AE6A9B45D2221CB442F8C340216A354
        Validity
            Not Before: Jul  4 16:27:09 2024 GMT
            Not After : Jul  3 16:32:09 2025 GMT
        Subject: CN=D698F2B5DBCBFDD4BA329271C6829AD50277BDFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1e:38:48:34:c2:1e:04:d4:f6:02:e0:86:f2:
                    bc:3e:80:4f:9a:28:dd:e4:20:01:38:b4:79:b7:56:
                    75:6a:9d:26:29:d1:61:2d:cb:45:0d:79:70:14:21:
                    14:15:bf:2d:e5:39:a9:c7:ee:b3:85:89:61:e5:ea:
                    60:a1:b0:3e:e9:d7:95:fb:2a:81:7c:3f:15:6f:b4:
                    87:7c:34:d9:42:3e:7e:ff:7b:19:0f:48:62:5e:46:
                    f0:b6:12:76:40:1f:96:41:4f:c8:3b:f3:7d:7c:9f:
                    1d:fe:36:2a:a5:57:99:06:f5:79:7d:bc:95:d8:1b:
                    75:ea:1e:d0:ff:57:ff:c8:cf:89:9e:ca:4c:a4:6c:
                    cb:d4:48:59:87:8d:2c:20:51:f4:fa:f8:c3:64:af:
                    77:f3:ac:05:27:10:73:47:1e:38:69:06:e6:8d:47:
                    9a:68:0e:16:7f:60:75:5f:bd:26:97:7f:8d:c9:77:
                    23:58:44:c6:58:3d:07:4e:fc:d0:1d:07:9d:ac:60:
                    99:85:5f:90:36:d2:3e:2d:e2:3b:6f:05:08:41:a1:
                    c6:8c:25:6c:ff:2d:48:48:bb:f4:ba:2b:e7:48:8c:
                    31:3b:02:c7:6b:3b:33:3b:3e:b8:86:39:4e:23:e6:
                    38:ff:c7:5e:a6:7c:b5:59:0d:ef:64:db:c5:12:cb:
                    e1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:98:F2:B5:DB:CB:FD:D4:BA:32:92:71:C6:82:9A:D5:02:77:BD:FA
            X509v3 Authority Key Identifier:
                keyid:27:70:3D:67:1A:E6:A9:B4:5D:22:21:CB:44:2F:8C:34:02:16:A3:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/27703D671AE6A9B45D2221CB442F8C340216A354.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27703D671AE6A9B45D2221CB442F8C340216A354.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/3136382e39302e3139322e302f32322d3232203d3e20323635323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:b8:e0:48:2d:2b:d4:78:a2:16:b5:07:f7:1c:00:cb:b8:90:
         bf:99:b4:08:a3:e8:5b:b6:22:87:9d:c1:0d:98:4a:4d:86:98:
         60:b4:97:7e:b2:f4:11:f0:6a:e6:17:a8:e6:c2:d2:a1:27:ef:
         b9:41:7f:62:4c:cb:7e:6f:e6:e4:a9:3a:ba:16:f1:03:6a:2f:
         a3:ac:9c:19:ac:ed:0c:4a:56:95:d0:35:44:25:ac:5a:d6:7a:
         84:9a:02:d8:69:c8:87:8d:63:f8:e5:eb:5b:7b:15:0f:26:c1:
         f1:52:49:4c:41:f6:28:80:a6:9e:ad:1d:b2:9c:9e:45:cf:3b:
         9b:09:bf:ab:17:9b:f8:72:40:7d:2f:4d:e9:d4:32:26:5b:30:
         5c:30:5e:54:94:54:a9:80:e6:76:91:b6:49:dd:d4:f4:ab:f9:
         9c:67:bf:52:d2:8c:16:59:45:62:cf:ab:aa:f2:98:10:2e:f8:
         6d:57:bf:a4:81:16:49:a3:23:ce:16:b3:e0:9e:c1:b6:1a:3c:
         94:2f:ab:41:6b:ff:59:21:ec:0c:4c:bd:b7:f5:9a:bb:ca:59:
         57:76:d0:e2:ae:07:9b:1f:7b:87:f7:a2:8b:04:d8:9d:d1:33:
         1a:9a:3a:f5:4d:f1:21:27:af:83:5b:ef:b5:e5:48:ee:6f:3c:
         6a:82:28:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:32:38 2024 by rpki-client on console-ams.rpki-client.org