Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/3136382e39302e3139332e302f32342d3234203d3e20323635323831.roa
File:                     3136382e39302e3139332e302f32342d3234203d3e20323635323831.roa (raw, json)
Hash identifier:          Gr2rsSyJjafqEzPzuHNQ1DnZ4WIorTQaHqRcscKLf8I=
Subject key identifier:   EA:DD:CA:7F:5F:A6:4A:24:85:3A:E9:60:B8:F6:6F:B1:B4:98:9E:3B
Certificate issuer:       /CN=27703D671AE6A9B45D2221CB442F8C340216A354
Certificate serial:       61A13E0B774B6A5AB1F61C253620518117377064
Authority key identifier: 27:70:3D:67:1A:E6:A9:B4:5D:22:21:CB:44:2F:8C:34:02:16:A3:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27703D671AE6A9B45D2221CB442F8C340216A354.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/3136382e39302e3139332e302f32342d3234203d3e20323635323831.roa
Signing time:             Thu 04 Jul 2024 16:32:10 +0000
ROA not before:           Thu 04 Jul 2024 16:27:10 +0000
ROA not after:            Thu 03 Jul 2025 16:32:10 +0000
asID:                     265281
IP address blocks:        168.90.193.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/27703D671AE6A9B45D2221CB442F8C340216A354.crl
                          rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/27703D671AE6A9B45D2221CB442F8C340216A354.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27703D671AE6A9B45D2221CB442F8C340216A354.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:a1:3e:0b:77:4b:6a:5a:b1:f6:1c:25:36:20:51:81:17:37:70:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27703D671AE6A9B45D2221CB442F8C340216A354
        Validity
            Not Before: Jul  4 16:27:10 2024 GMT
            Not After : Jul  3 16:32:10 2025 GMT
        Subject: CN=EADDCA7F5FA64A24853AE960B8F66FB1B4989E3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:62:02:5f:4a:d5:3c:1d:28:1d:e8:c7:0a:dd:
                    58:95:e3:c0:13:eb:7b:9e:60:c6:dc:f0:b1:69:e5:
                    1d:c5:40:61:43:a8:a5:64:d4:a5:81:9e:e5:47:90:
                    82:c3:41:45:98:72:45:2f:9c:2d:94:65:28:13:7e:
                    ce:a9:0e:3a:ed:9c:3e:22:5d:2a:f2:bf:20:15:2e:
                    9d:f6:86:ac:a7:13:00:24:62:6e:4c:bc:ef:0a:d8:
                    b1:08:d6:c2:cb:62:30:8c:62:58:85:5a:fc:fd:eb:
                    7d:7b:7b:e4:c1:83:d0:41:cb:b2:ae:94:50:94:b7:
                    ee:7c:1c:26:c2:0f:b7:60:85:1c:92:8a:cd:c8:11:
                    bd:7e:40:66:53:5a:4f:f8:21:10:8a:3f:23:f4:d7:
                    5d:44:7c:83:39:f4:75:90:9a:fd:ca:fa:3c:b3:f7:
                    ea:85:f9:7c:ee:d9:b5:71:aa:0f:c3:c6:21:13:37:
                    57:06:27:1a:ef:f8:63:0b:ac:c0:a0:b9:ec:b2:ae:
                    68:4f:04:a0:2d:f7:3b:31:49:2b:bf:93:1b:0c:91:
                    06:5e:d9:68:e1:0f:73:bf:6f:66:97:f6:48:90:ec:
                    af:8a:54:8a:04:73:20:5a:ce:eb:c0:14:24:f6:a2:
                    a3:8f:54:6d:f0:ec:3f:82:f6:9f:08:74:57:30:23:
                    c9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:DD:CA:7F:5F:A6:4A:24:85:3A:E9:60:B8:F6:6F:B1:B4:98:9E:3B
            X509v3 Authority Key Identifier:
                keyid:27:70:3D:67:1A:E6:A9:B4:5D:22:21:CB:44:2F:8C:34:02:16:A3:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/27703D671AE6A9B45D2221CB442F8C340216A354.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27703D671AE6A9B45D2221CB442F8C340216A354.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/3136382e39302e3139332e302f32342d3234203d3e20323635323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:14:12:08:66:c5:0e:e8:ce:e8:2f:5e:87:6d:4f:fc:8f:4f:
         a3:65:29:48:19:be:10:83:04:a4:77:61:3b:84:ef:57:0d:c2:
         92:60:d4:78:ce:cf:60:ea:c1:08:fa:d4:2b:d9:24:ba:c8:07:
         7e:3e:5b:54:65:68:14:6e:2c:b2:ec:cb:38:48:cd:29:51:5d:
         86:b3:bd:f0:ea:40:e7:e2:21:82:0b:ee:ad:16:50:7c:08:c7:
         a1:68:1c:a0:ce:9f:9f:01:fb:af:59:e7:b3:0a:51:27:1f:b0:
         95:b7:28:a6:c9:e4:ce:a6:be:bc:89:ea:00:76:aa:f5:17:68:
         5d:1d:17:12:42:0f:39:5d:34:50:96:aa:7e:46:91:eb:85:59:
         88:1f:67:66:ca:de:76:79:24:f9:a2:96:92:bf:c7:08:83:b4:
         cc:ee:58:ab:fd:78:57:bf:dc:75:01:f3:9e:ed:85:87:ff:2a:
         0a:8e:c8:f7:41:7c:a5:16:61:82:0c:8b:47:e0:ad:79:cd:2a:
         1b:04:77:80:e4:bf:6d:c5:6f:39:ab:1f:3a:8f:df:23:27:3d:
         84:04:b5:a0:25:24:48:6b:9d:93:e1:bf:23:ca:a2:c9:4d:81:
         de:4e:2c:dc:fa:bb:40:c3:2c:72:2f:1a:31:77:3d:bd:8e:f4:
         e2:8f:34:2c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYaE+C3dLalqx9hwlNiBRgRc3cGQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjc3MDNENjcxQUU2QTlCNDVEMjIyMUNCNDQyRjhDMzQw
MjE2QTM1NDAeFw0yNDA3MDQxNjI3MTBaFw0yNTA3MDMxNjMyMTBaMDMxMTAvBgNV
BAMTKEVBRERDQTdGNUZBNjRBMjQ4NTNBRTk2MEI4RjY2RkIxQjQ5ODlFM0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1YgJfStU8HSgd6McK3ViV48AT
63ueYMbc8LFp5R3FQGFDqKVk1KWBnuVHkILDQUWYckUvnC2UZSgTfs6pDjrtnD4i
XSryvyAVLp32hqynEwAkYm5MvO8K2LEI1sLLYjCMYliFWvz96317e+TBg9BBy7Ku
lFCUt+58HCbCD7dghRySis3IEb1+QGZTWk/4IRCKPyP0111EfIM59HWQmv3K+jyz
9+qF+Xzu2bVxqg/DxiETN1cGJxrv+GMLrMCgueyyrmhPBKAt9zsxSSu/kxsMkQZe
2WjhD3O/b2aX9kiQ7K+KVIoEcyBazuvAFCT2oqOPVG3w7D+C9p8IdFcwI8mPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU6t3Kf1+mSiSFOulguPZvsbSYnjswHwYDVR0j
BBgwFoAUJ3A9ZxrmqbRdIiHLRC+MNAIWo1QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmZOd3JFUlhucFN4TEt1QnU2c2p0NGU0cVBvQ3dqV2txRTZzcFZ1NmpO
M0YvMC8yNzcwM0Q2NzFBRTZBOUI0NUQyMjIxQ0I0NDJGOEMzNDAyMTZBMzU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI3NzAzRDY3MUFFNkE5QjQ1
RDIyMjFDQjQ0MkY4QzM0MDIxNkEzNTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJmTndyRVJYbnBTeExLdUJ1NnNqdDRlNHFQb0N3aldrcUU2c3BWdTZqTjNGLzAv
MzEzNjM4MmUzOTMwMmUzMTM5MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzUzMjM4MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACoWsEwDQYJKoZIhvcNAQELBQADggEBAEgUEghm
xQ7ozugvXodtT/yPT6NlKUgZvhCDBKR3YTuE71cNwpJg1HjOz2DqwQj61CvZJLrI
B34+W1RlaBRuLLLsyzhIzSlRXYazvfDqQOfiIYIL7q0WUHwIx6FoHKDOn58B+69Z
57MKUScfsJW3KKbJ5M6mvryJ6gB2qvUXaF0dFxJCDzldNFCWqn5GkeuFWYgfZ2bK
3nZ5JPmilpK/xwiDtMzuWKv9eFe/3HUB857thYf/KgqOyPdBfKUWYYIMi0fgrXnN
KhsEd4Dkv23FbzmrHzqP3yMnPYQEtaAlJEhrnZPhvyPKoslNgd5OLNz6u0DDLHIv
GjF3Pb2O9OKPNCw=
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:32:39 2024 by rpki-client on console-ams.rpki-client.org