Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/3136382e39302e3139342e302f32342d3234203d3e20323635323831.roa
File:                     3136382e39302e3139342e302f32342d3234203d3e20323635323831.roa (raw, json)
Hash identifier:          4jgtbrC2KbC+BbxcpxHT1WhKLu3rIY4ihkDNKVr7bto=
Subject key identifier:   76:B5:5F:63:BA:47:DE:2E:D2:03:B2:10:54:B1:77:20:D9:A2:54:36
Certificate issuer:       /CN=27703D671AE6A9B45D2221CB442F8C340216A354
Certificate serial:       76559F0EAC13A3B9792458D7D5184793AF7E71D0
Authority key identifier: 27:70:3D:67:1A:E6:A9:B4:5D:22:21:CB:44:2F:8C:34:02:16:A3:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27703D671AE6A9B45D2221CB442F8C340216A354.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/3136382e39302e3139342e302f32342d3234203d3e20323635323831.roa
Signing time:             Thu 04 Jul 2024 16:32:10 +0000
ROA not before:           Thu 04 Jul 2024 16:27:10 +0000
ROA not after:            Thu 03 Jul 2025 16:32:10 +0000
asID:                     265281
IP address blocks:        168.90.194.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/27703D671AE6A9B45D2221CB442F8C340216A354.crl
                          rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/27703D671AE6A9B45D2221CB442F8C340216A354.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27703D671AE6A9B45D2221CB442F8C340216A354.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:55:9f:0e:ac:13:a3:b9:79:24:58:d7:d5:18:47:93:af:7e:71:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27703D671AE6A9B45D2221CB442F8C340216A354
        Validity
            Not Before: Jul  4 16:27:10 2024 GMT
            Not After : Jul  3 16:32:10 2025 GMT
        Subject: CN=76B55F63BA47DE2ED203B21054B17720D9A25436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:74:12:b7:5d:e3:3e:8a:50:68:50:4d:6f:ee:
                    fa:8e:f4:02:02:d2:42:10:46:e3:9b:ba:65:14:01:
                    0c:bc:6e:e9:be:fe:b9:63:6c:bf:e2:5d:d1:fe:d4:
                    2c:3f:a8:61:c4:8b:b1:3a:69:f8:c1:ea:f6:0a:b3:
                    af:ca:72:c6:b7:59:4b:0e:4a:1e:5e:20:b8:3c:04:
                    3f:27:59:13:62:ef:dc:f1:67:33:03:ea:7f:19:67:
                    3b:bf:16:94:4d:eb:24:04:5b:e7:f3:7a:04:83:84:
                    8f:b0:dd:4f:36:fa:3b:be:f6:1a:dd:03:bc:07:74:
                    d5:cc:39:e9:96:b8:bb:ac:3b:5c:92:e4:21:dc:b6:
                    1f:4f:dd:0e:9e:bf:a3:f2:43:ef:fc:1d:64:fc:83:
                    a4:74:97:00:0d:1d:d5:26:ad:d1:43:d6:1e:cc:68:
                    7e:17:af:ab:f3:2a:e9:e8:64:6c:10:f0:7e:ba:2c:
                    4e:3b:5c:e2:04:47:47:49:71:75:ac:99:c3:64:a4:
                    e8:13:8a:94:3b:3a:d4:23:ab:6d:aa:84:f5:2b:f0:
                    1e:21:fc:af:01:1c:fe:b9:14:f6:d2:55:02:2b:58:
                    f2:b3:d7:9e:8b:30:8b:50:23:4c:74:52:f6:5c:b5:
                    d6:19:82:94:7c:ec:dd:df:dd:48:dd:b9:7e:b8:13:
                    39:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:B5:5F:63:BA:47:DE:2E:D2:03:B2:10:54:B1:77:20:D9:A2:54:36
            X509v3 Authority Key Identifier:
                keyid:27:70:3D:67:1A:E6:A9:B4:5D:22:21:CB:44:2F:8C:34:02:16:A3:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/27703D671AE6A9B45D2221CB442F8C340216A354.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27703D671AE6A9B45D2221CB442F8C340216A354.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/3136382e39302e3139342e302f32342d3234203d3e20323635323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:32:de:ca:46:86:4d:df:0b:93:6b:d9:b4:8e:fa:55:2a:14:
         8b:70:49:04:00:4b:2d:6e:8d:46:d8:32:a5:22:d5:1f:64:e1:
         30:35:23:71:41:d7:44:16:41:a8:6e:19:de:1d:ed:19:a7:c5:
         7f:b4:94:cf:09:2e:4f:42:76:30:bc:1c:74:7f:b1:4c:ab:10:
         3f:16:54:6f:c6:e4:b5:7e:6c:d4:1f:52:4a:13:ef:e7:68:11:
         ca:8f:db:3e:53:18:40:5b:61:78:6f:6b:70:6d:cc:64:9f:dc:
         f7:7c:f6:84:2e:88:6b:31:49:8e:3d:62:11:aa:0c:bf:d7:fc:
         a0:1d:52:2e:86:0a:ea:f3:db:95:2f:b0:e2:e3:ac:5f:c0:1f:
         2f:1a:49:e1:5a:52:da:ac:47:4e:bf:a7:fb:16:be:43:93:cb:
         4f:10:de:87:68:2c:0d:11:4e:8e:42:e2:9c:04:f6:79:09:a4:
         3f:92:19:16:b2:3b:b9:92:a8:17:d9:b5:59:29:d8:1f:57:5e:
         8c:95:e9:7e:08:86:78:d9:09:06:80:c5:8a:ee:ce:48:9c:4c:
         41:e3:fe:59:45:e8:7a:0b:80:2a:13:00:f7:e0:c4:29:1b:e8:
         ca:a1:b9:91:d4:ce:eb:24:79:ed:7c:7b:a3:48:6e:10:ee:ac:
         d0:07:dd:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:32:39 2024 by rpki-client on console-ams.rpki-client.org