Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/1/3136382e3230352e38392e302f32342d3234203d3e20323635333634.roa
File:                     3136382e3230352e38392e302f32342d3234203d3e20323635333634.roa (raw, json)
Hash identifier:          OvZpdNC6sdYzZ2h4aXG8/1cZRhOS+cq/Krig8eQplg8=
Subject key identifier:   F2:0A:D0:E9:83:5A:E4:B9:B9:4A:83:6D:6B:E6:B7:DB:A1:65:03:30
Certificate issuer:       /CN=53B8EF890E159C97C854A2FD8A6A51B3E34E626C
Certificate serial:       7B180E61A8989A8C9B99BB862F1F4227AD7C71B5
Authority key identifier: 53:B8:EF:89:0E:15:9C:97:C8:54:A2:FD:8A:6A:51:B3:E3:4E:62:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53B8EF890E159C97C854A2FD8A6A51B3E34E626C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/1/3136382e3230352e38392e302f32342d3234203d3e20323635333634.roa
Signing time:             Thu 04 Apr 2024 23:59:33 +0000
ROA not before:           Thu 04 Apr 2024 23:54:33 +0000
ROA not after:            Thu 03 Apr 2025 23:59:33 +0000
asID:                     265364
IP address blocks:        168.205.89.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/1/53B8EF890E159C97C854A2FD8A6A51B3E34E626C.crl
                          rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/1/53B8EF890E159C97C854A2FD8A6A51B3E34E626C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53B8EF890E159C97C854A2FD8A6A51B3E34E626C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:18:0e:61:a8:98:9a:8c:9b:99:bb:86:2f:1f:42:27:ad:7c:71:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53B8EF890E159C97C854A2FD8A6A51B3E34E626C
        Validity
            Not Before: Apr  4 23:54:33 2024 GMT
            Not After : Apr  3 23:59:33 2025 GMT
        Subject: CN=F20AD0E9835AE4B9B94A836D6BE6B7DBA1650330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c1:a5:c1:31:d7:73:96:45:fc:1e:31:97:5f:
                    05:d4:b1:c3:76:a2:96:62:a5:3e:1f:49:a8:c2:e1:
                    17:78:f5:96:aa:8a:cc:90:f7:be:57:24:29:d2:e0:
                    f7:8d:aa:37:9a:d2:a1:15:2b:2e:d1:48:62:ff:9c:
                    22:52:84:d2:d3:61:4b:69:cb:cd:b8:f5:69:b3:f5:
                    11:bc:ef:05:20:a3:6b:15:da:4c:ba:e8:dd:83:2f:
                    27:54:23:02:0c:65:38:89:d5:1f:be:0b:73:c9:0a:
                    fd:ac:4a:d5:a6:7e:a2:d9:c9:f3:5a:94:6a:dd:1f:
                    b4:6a:4a:d0:b0:ae:2a:81:24:9a:5e:ed:de:00:f8:
                    2e:12:3b:04:f1:4c:6b:d3:c5:2e:fa:d1:37:2d:0f:
                    8c:3a:0b:6c:fe:ce:bf:01:e3:2f:81:af:30:2d:cf:
                    48:e3:72:0f:71:b1:b3:9c:ab:ce:05:2f:4a:ce:ed:
                    96:70:d7:65:84:82:b4:79:49:0c:9e:e5:ad:04:97:
                    a1:c1:c8:7c:6c:50:49:33:be:5e:38:b5:ee:4f:50:
                    86:d2:12:59:0e:9f:ec:0c:69:6d:65:95:8d:e5:a2:
                    5e:73:41:19:81:14:34:53:d0:bf:ff:ba:c2:60:97:
                    3c:b1:3c:fc:72:3f:1d:72:76:99:2e:e8:ea:9d:02:
                    92:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:0A:D0:E9:83:5A:E4:B9:B9:4A:83:6D:6B:E6:B7:DB:A1:65:03:30
            X509v3 Authority Key Identifier:
                keyid:53:B8:EF:89:0E:15:9C:97:C8:54:A2:FD:8A:6A:51:B3:E3:4E:62:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/1/53B8EF890E159C97C854A2FD8A6A51B3E34E626C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53B8EF890E159C97C854A2FD8A6A51B3E34E626C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/1/3136382e3230352e38392e302f32342d3234203d3e20323635333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:e3:d8:33:d1:70:3a:60:79:6e:89:43:43:64:b9:51:bf:eb:
         24:77:44:e7:2c:f6:59:33:81:e4:a9:b2:de:c3:1d:7e:71:55:
         d1:55:03:38:a7:b8:c3:61:c6:ea:04:25:80:1d:2d:5b:25:56:
         99:dd:c2:f4:03:e2:a9:27:4d:c4:f3:f2:48:f2:59:f9:cf:57:
         b9:ca:54:8c:dd:4e:a2:7b:22:d2:7b:09:ac:4d:de:b0:98:97:
         32:a1:c2:d1:24:22:57:74:97:0d:cd:72:60:7f:b7:7a:97:89:
         68:b0:e5:ee:2d:fd:f8:23:df:b3:29:19:3c:b0:b3:15:d3:b1:
         79:85:36:82:47:4e:41:84:a4:38:15:7b:64:cb:1f:84:9a:78:
         c4:6b:28:21:8c:4f:21:49:d1:7e:bd:fe:e5:48:3d:9d:1c:05:
         4f:0d:98:b9:4f:20:cc:fc:f6:12:4f:55:36:27:6d:72:75:87:
         d0:9e:bb:15:03:84:0e:93:c6:dd:c1:b5:1b:dc:96:cf:5a:11:
         21:75:07:1c:d2:db:b4:3d:19:82:52:ad:21:08:87:74:9c:4b:
         03:41:88:e4:cd:c6:f9:31:3a:93:52:87:f1:d5:73:c0:d9:0d:
         8a:7e:c8:5e:12:60:5f:cc:4b:a0:79:fa:2c:d3:16:20:89:b2:
         d7:f4:2a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:55 2024 by rpki-client on console-fra.rpki-client.org