Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7T7tW6PQwJk1UF4EVc8ZvsHGqiHfJydzxFviQiarMFo/0/3136382e39302e35322e302f32322d3234203d3e20323635333134.roa
File:                     3136382e39302e35322e302f32322d3234203d3e20323635333134.roa (raw, json)
Hash identifier:          moBGAEwSjhNBUxe6puT2vMagHmZ48iiC3ytyiOO2+XM=
Subject key identifier:   E1:82:30:CB:2C:5C:2D:7D:8D:AE:41:1B:A7:E8:4C:57:A3:28:C4:B7
Certificate issuer:       /CN=6C7F9672098FA97F6AFC6506273D5BC75FAABA2C
Certificate serial:       67EE0BA24FF318E73FA861BC99A830606DC3DE31
Authority key identifier: 6C:7F:96:72:09:8F:A9:7F:6A:FC:65:06:27:3D:5B:C7:5F:AA:BA:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C7F9672098FA97F6AFC6506273D5BC75FAABA2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7T7tW6PQwJk1UF4EVc8ZvsHGqiHfJydzxFviQiarMFo/0/3136382e39302e35322e302f32322d3234203d3e20323635333134.roa
Signing time:             Wed 05 Jun 2024 19:32:22 +0000
ROA not before:           Wed 05 Jun 2024 19:27:22 +0000
ROA not after:            Wed 04 Jun 2025 19:32:22 +0000
asID:                     265314
IP address blocks:        168.90.52.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7T7tW6PQwJk1UF4EVc8ZvsHGqiHfJydzxFviQiarMFo/0/6C7F9672098FA97F6AFC6506273D5BC75FAABA2C.crl
                          rsync://rpki-repo.registro.br/repo/7T7tW6PQwJk1UF4EVc8ZvsHGqiHfJydzxFviQiarMFo/0/6C7F9672098FA97F6AFC6506273D5BC75FAABA2C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C7F9672098FA97F6AFC6506273D5BC75FAABA2C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 23:20:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:ee:0b:a2:4f:f3:18:e7:3f:a8:61:bc:99:a8:30:60:6d:c3:de:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C7F9672098FA97F6AFC6506273D5BC75FAABA2C
        Validity
            Not Before: Jun  5 19:27:22 2024 GMT
            Not After : Jun  4 19:32:22 2025 GMT
        Subject: CN=E18230CB2C5C2D7D8DAE411BA7E84C57A328C4B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3c:60:12:cb:16:4e:c8:42:b9:57:4a:73:92:
                    96:97:b3:0e:8f:d0:9e:27:7f:0c:ce:58:f7:33:fe:
                    13:1b:f3:2e:c7:50:4b:c4:77:6d:2a:99:d2:d5:a2:
                    70:0b:37:7b:00:ac:16:cf:17:d0:ec:9a:46:63:9b:
                    cf:ad:46:c7:ff:4f:da:ef:eb:16:17:e1:30:35:32:
                    38:07:1d:8c:46:d7:78:c2:9b:34:bb:64:ba:66:28:
                    5c:f9:d6:c1:d8:26:53:a5:87:92:b6:37:67:09:79:
                    2f:1d:ae:1a:21:28:38:63:29:de:72:57:a0:28:81:
                    ea:db:19:e7:2c:0a:5e:46:a9:6d:42:4b:36:fe:dc:
                    44:6e:3d:79:5a:b0:1d:f2:33:b8:64:b1:73:77:c5:
                    af:b3:68:bf:09:1d:fd:5e:8b:d7:2e:c3:31:28:96:
                    22:c0:d0:c2:0b:e3:c3:3a:1d:eb:e9:85:a5:12:02:
                    ba:0f:8b:9e:e2:25:3e:f0:46:5b:8f:74:d0:63:16:
                    38:1d:b0:80:fa:42:96:85:0f:13:6e:22:56:a4:66:
                    0a:2a:1d:0a:14:97:1f:55:b1:a5:e7:08:e3:4c:e4:
                    e8:a2:27:27:52:0e:bf:63:f3:2d:44:d8:61:8c:dc:
                    d0:64:6b:91:e2:eb:a3:cb:5c:a8:ab:85:2c:e4:a6:
                    32:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:82:30:CB:2C:5C:2D:7D:8D:AE:41:1B:A7:E8:4C:57:A3:28:C4:B7
            X509v3 Authority Key Identifier:
                keyid:6C:7F:96:72:09:8F:A9:7F:6A:FC:65:06:27:3D:5B:C7:5F:AA:BA:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7T7tW6PQwJk1UF4EVc8ZvsHGqiHfJydzxFviQiarMFo/0/6C7F9672098FA97F6AFC6506273D5BC75FAABA2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C7F9672098FA97F6AFC6506273D5BC75FAABA2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7T7tW6PQwJk1UF4EVc8ZvsHGqiHfJydzxFviQiarMFo/0/3136382e39302e35322e302f32322d3234203d3e20323635333134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:6b:98:9a:b3:56:be:59:be:a0:ce:d1:30:33:8c:12:5c:c3:
         4e:21:82:e2:41:aa:92:ab:ce:70:9f:c7:46:6e:10:c2:7f:51:
         98:cb:70:a2:ae:be:54:51:43:55:0b:93:b0:9c:a0:70:b8:7f:
         5a:d3:97:36:80:07:a3:cc:7d:cc:36:8a:84:01:ba:37:10:2d:
         66:43:80:53:69:53:57:5e:74:de:d8:e9:02:67:8f:ab:50:2f:
         9f:62:14:ea:a1:4b:91:9e:4b:40:de:c5:47:0a:69:ac:be:56:
         7f:85:4b:24:5b:f1:0c:ff:c9:62:9d:d8:76:8d:e0:c5:49:df:
         5c:33:59:f8:c9:73:69:ee:4c:19:e6:00:c4:f5:06:aa:04:75:
         c8:20:f8:4c:ef:f7:21:22:7d:e5:c2:86:e7:71:a4:10:aa:b9:
         ec:7f:c8:c5:bd:40:70:12:80:a5:dc:46:f5:24:be:c4:66:21:
         e7:50:4e:a1:90:61:aa:57:08:42:86:3e:fb:16:5a:ac:94:bb:
         dd:d0:e1:42:12:53:40:2d:c6:91:af:a6:84:ed:80:24:6e:f5:
         bd:da:58:34:26:67:8f:bc:35:67:24:bb:9d:43:36:19:a1:b3:
         b7:74:69:7d:26:4c:b5:a2:14:18:6f:fb:37:20:25:89:5c:da:
         c0:6e:e8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:52 2024 by rpki-client on console-fra.rpki-client.org