Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6g6MFG89jbTEcgRsiG4oSdiQizV4Z6CfDKsZcDcJDnsK/0/3136382e39302e3230302e302f32322d3234203d3e20323635323839.roa
File:                     3136382e39302e3230302e302f32322d3234203d3e20323635323839.roa (raw, json)
Hash identifier:          Ili/rgXcLOCRMxKAJEPwRuc2Vi+U6srz3T74jmanpiU=
Subject key identifier:   00:40:D6:3B:71:57:3F:B8:7C:B9:57:61:DF:27:FD:1E:97:DE:EC:71
Certificate issuer:       /CN=F94BBF6DCE63AB6BA9DE6A629D58E65FBE2B3CD4
Certificate serial:       4DE76F7385816B73635C60E2F597E7F2A1804DBE
Authority key identifier: F9:4B:BF:6D:CE:63:AB:6B:A9:DE:6A:62:9D:58:E6:5F:BE:2B:3C:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F94BBF6DCE63AB6BA9DE6A629D58E65FBE2B3CD4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6g6MFG89jbTEcgRsiG4oSdiQizV4Z6CfDKsZcDcJDnsK/0/3136382e39302e3230302e302f32322d3234203d3e20323635323839.roa
Signing time:             Tue 05 Nov 2024 18:14:05 +0000
ROA not before:           Tue 05 Nov 2024 18:09:05 +0000
ROA not after:            Tue 04 Nov 2025 18:14:05 +0000
asID:                     265289
IP address blocks:        168.90.200.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6g6MFG89jbTEcgRsiG4oSdiQizV4Z6CfDKsZcDcJDnsK/0/F94BBF6DCE63AB6BA9DE6A629D58E65FBE2B3CD4.crl
                          rsync://rpki-repo.registro.br/repo/6g6MFG89jbTEcgRsiG4oSdiQizV4Z6CfDKsZcDcJDnsK/0/F94BBF6DCE63AB6BA9DE6A629D58E65FBE2B3CD4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F94BBF6DCE63AB6BA9DE6A629D58E65FBE2B3CD4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:e7:6f:73:85:81:6b:73:63:5c:60:e2:f5:97:e7:f2:a1:80:4d:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F94BBF6DCE63AB6BA9DE6A629D58E65FBE2B3CD4
        Validity
            Not Before: Nov  5 18:09:05 2024 GMT
            Not After : Nov  4 18:14:05 2025 GMT
        Subject: CN=0040D63B71573FB87CB95761DF27FD1E97DEEC71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:23:94:0e:35:64:22:c7:6c:91:61:95:85:a7:
                    02:c8:96:a2:91:a0:04:53:b8:3f:03:7b:58:b6:85:
                    b5:03:95:4b:19:50:2a:c7:9c:82:9c:59:4b:db:72:
                    69:f3:77:a5:28:8b:54:92:68:80:84:58:30:44:76:
                    c5:c4:47:95:99:9c:88:d6:99:b1:ab:df:98:f1:3c:
                    bc:06:af:ea:e4:3d:9a:3a:8a:dd:32:f6:4c:99:f8:
                    a3:85:31:f9:9c:36:a2:7d:20:83:83:a9:b4:34:ea:
                    ef:6c:82:6f:d1:8b:7f:6d:8a:c5:a0:8d:e4:91:e2:
                    70:a7:53:a3:94:65:ad:43:7e:f1:69:d5:3d:68:eb:
                    41:cc:c9:4e:43:ec:9c:0e:d5:76:9b:4b:99:26:78:
                    53:ff:50:0f:83:6c:a6:bd:35:2c:97:ab:21:76:ad:
                    7d:50:a6:18:f1:47:7d:91:0d:35:a7:f5:44:27:d3:
                    c6:b1:54:2f:77:10:f1:96:50:64:b9:9b:33:1d:c8:
                    c3:52:52:c8:e4:48:36:f8:1a:df:2c:6f:5c:dd:26:
                    8e:e7:0f:a7:4f:5c:52:47:7f:23:57:48:03:57:c2:
                    4d:01:2a:0b:56:0e:27:37:74:58:06:1f:5e:25:a6:
                    c5:25:83:78:8d:16:eb:56:21:a0:32:98:da:1f:e9:
                    5d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:40:D6:3B:71:57:3F:B8:7C:B9:57:61:DF:27:FD:1E:97:DE:EC:71
            X509v3 Authority Key Identifier:
                keyid:F9:4B:BF:6D:CE:63:AB:6B:A9:DE:6A:62:9D:58:E6:5F:BE:2B:3C:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6g6MFG89jbTEcgRsiG4oSdiQizV4Z6CfDKsZcDcJDnsK/0/F94BBF6DCE63AB6BA9DE6A629D58E65FBE2B3CD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F94BBF6DCE63AB6BA9DE6A629D58E65FBE2B3CD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6g6MFG89jbTEcgRsiG4oSdiQizV4Z6CfDKsZcDcJDnsK/0/3136382e39302e3230302e302f32322d3234203d3e20323635323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:7a:44:d5:ba:ed:f1:87:e3:0a:a8:94:15:9c:12:e1:f4:6d:
         cb:e2:f9:5b:14:99:d7:bb:df:a0:08:10:35:9d:52:ef:4c:a7:
         6e:98:38:25:63:68:f8:8b:de:d5:9e:bf:9d:0b:c4:f8:52:54:
         f4:4f:c3:77:7f:6c:14:b2:05:53:72:69:e2:e4:5f:9c:b3:02:
         b1:3f:62:d5:07:2a:11:1e:13:24:28:07:03:72:45:6d:9a:27:
         2a:17:99:fa:49:35:cb:58:c6:93:c3:40:74:0a:16:3f:18:2e:
         58:69:05:92:78:b0:f7:6c:61:19:fd:13:33:3f:e2:d3:de:5f:
         f2:69:d3:04:c6:87:ba:2d:79:a5:41:52:18:3b:88:56:0b:89:
         0c:9b:76:6b:b2:49:7e:c7:bf:c7:21:c3:14:59:83:da:43:69:
         eb:ac:50:6c:d9:10:d6:64:10:eb:8c:3f:6c:08:34:3e:07:5a:
         88:1a:e8:a0:09:8c:29:bf:bb:d1:c2:a3:ef:55:01:2e:0f:34:
         ea:b4:11:26:aa:80:2b:f8:c0:d6:94:54:33:23:e4:54:68:6e:
         84:d6:dc:0c:fa:c5:90:1f:43:42:34:ec:1e:e9:23:61:de:1c:
         82:55:4c:a9:5d:9a:ee:99:f5:38:fe:16:c8:72:70:45:ad:d7:
         4c:b8:a5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:53:03 2024 by rpki-client on console-ams.rpki-client.org