Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7T7tW6PQwJk1UF4EVc8ZvsHGqiHfJydzxFviQiarMFo/0/3136382e39302e35352e302f32342d3234203d3e20323635333134.roa
File:                     3136382e39302e35352e302f32342d3234203d3e20323635333134.roa (raw, json)
Hash identifier:          o60SQZxroTEm08kPW1gG0xEpmpE3rDfiDYg6uhos99A=
Subject key identifier:   4E:0F:43:69:63:98:C4:EE:78:CF:50:87:1C:DE:94:F5:A7:ED:E1:75
Certificate issuer:       /CN=6C7F9672098FA97F6AFC6506273D5BC75FAABA2C
Certificate serial:       409916E76706EDE5E6CCA8066D6B4B92F2CC60A1
Authority key identifier: 6C:7F:96:72:09:8F:A9:7F:6A:FC:65:06:27:3D:5B:C7:5F:AA:BA:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C7F9672098FA97F6AFC6506273D5BC75FAABA2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7T7tW6PQwJk1UF4EVc8ZvsHGqiHfJydzxFviQiarMFo/0/3136382e39302e35352e302f32342d3234203d3e20323635333134.roa
Signing time:             Wed 22 May 2024 11:39:33 +0000
ROA not before:           Wed 22 May 2024 11:34:33 +0000
ROA not after:            Wed 21 May 2025 11:39:33 +0000
asID:                     265314
IP address blocks:        168.90.55.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7T7tW6PQwJk1UF4EVc8ZvsHGqiHfJydzxFviQiarMFo/0/6C7F9672098FA97F6AFC6506273D5BC75FAABA2C.crl
                          rsync://rpki-repo.registro.br/repo/7T7tW6PQwJk1UF4EVc8ZvsHGqiHfJydzxFviQiarMFo/0/6C7F9672098FA97F6AFC6506273D5BC75FAABA2C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C7F9672098FA97F6AFC6506273D5BC75FAABA2C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 06:24:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:99:16:e7:67:06:ed:e5:e6:cc:a8:06:6d:6b:4b:92:f2:cc:60:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C7F9672098FA97F6AFC6506273D5BC75FAABA2C
        Validity
            Not Before: May 22 11:34:33 2024 GMT
            Not After : May 21 11:39:33 2025 GMT
        Subject: CN=4E0F43696398C4EE78CF50871CDE94F5A7EDE175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a3:68:02:73:45:b1:d6:eb:b6:3f:56:02:f4:
                    ce:b5:16:93:07:d8:d1:01:78:e2:f9:07:69:38:1d:
                    b9:5b:37:50:bd:b1:91:2e:41:80:96:16:34:19:c4:
                    47:d8:c6:49:c3:8e:20:5e:d2:3d:ee:c8:bd:65:67:
                    14:fe:80:64:87:0c:04:8f:5d:d8:d4:ef:b7:bb:1c:
                    ad:70:1b:b2:92:df:5a:c6:c2:70:67:33:1c:d0:b4:
                    22:2d:1a:6b:48:26:d3:b6:a7:a2:0d:f6:0e:68:31:
                    34:cc:e8:b9:8e:ce:0e:36:fc:da:8d:64:2c:db:21:
                    b2:f1:4a:d5:7f:67:2c:17:70:70:ba:c2:0c:68:93:
                    48:82:3f:70:7e:71:e3:b7:7f:5d:42:6f:f8:39:b9:
                    83:95:11:71:1e:70:06:b5:b6:05:9b:fe:2c:bd:d2:
                    69:3e:c8:5c:e1:82:c9:d6:63:68:f7:13:b0:9f:ef:
                    c7:f3:85:18:02:54:84:13:bc:d1:b9:7d:20:e5:f0:
                    3c:ff:39:14:cb:20:7d:e4:d3:dc:53:61:22:cf:7e:
                    e7:c0:e3:fd:d5:40:9a:fb:78:99:ed:07:da:c3:14:
                    b6:b6:3d:0e:fe:88:15:c3:0b:32:ea:9e:5f:41:44:
                    cb:35:fa:86:34:31:b5:3d:96:b0:0e:ae:11:be:c5:
                    e8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:0F:43:69:63:98:C4:EE:78:CF:50:87:1C:DE:94:F5:A7:ED:E1:75
            X509v3 Authority Key Identifier:
                keyid:6C:7F:96:72:09:8F:A9:7F:6A:FC:65:06:27:3D:5B:C7:5F:AA:BA:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7T7tW6PQwJk1UF4EVc8ZvsHGqiHfJydzxFviQiarMFo/0/6C7F9672098FA97F6AFC6506273D5BC75FAABA2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C7F9672098FA97F6AFC6506273D5BC75FAABA2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7T7tW6PQwJk1UF4EVc8ZvsHGqiHfJydzxFviQiarMFo/0/3136382e39302e35352e302f32342d3234203d3e20323635333134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:74:50:ef:b8:c3:8b:34:1e:8f:0b:35:4a:6f:75:b3:92:73:
         c9:ab:8e:7d:eb:93:0c:bc:27:51:f2:6f:34:4e:14:8c:4c:72:
         15:76:ec:6b:8c:62:15:79:d1:b6:ad:f6:2b:ff:78:f5:40:45:
         de:03:17:dd:3f:87:5d:db:9b:e2:06:b3:cb:69:ba:43:24:8f:
         07:ba:5c:d0:7d:55:0a:e4:be:49:63:d3:73:32:ab:d3:ae:d7:
         27:79:88:06:b1:46:e4:0b:58:dc:01:02:b1:52:0b:73:d4:2d:
         f3:36:ae:ac:a2:8f:f7:4d:f1:5e:ca:c8:a6:95:10:f6:f7:71:
         41:48:d5:7e:fc:16:ae:f7:45:31:a0:0f:d2:7f:7b:e1:6e:c3:
         e2:a9:e0:41:1a:fc:c1:fd:bd:29:53:89:ba:42:ef:18:22:b4:
         51:82:9f:e2:bd:2a:ae:a3:52:12:82:c0:22:6f:10:ae:8f:2a:
         ae:9a:5c:40:54:af:64:34:2c:e4:e7:9e:eb:23:b1:a3:ae:58:
         9a:f3:9a:31:01:0a:68:e4:9b:7d:66:47:d5:04:b8:fb:12:96:
         48:c9:46:a9:25:b6:40:ce:87:ab:4c:ab:7a:14:a9:66:8a:39:
         72:b6:96:28:1f:90:12:2f:d7:21:0a:d6:9e:19:db:53:be:6c:
         d6:26:3b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 07:07:23 2024 by rpki-client on console-ams.rpki-client.org