Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/1/3136382e3230352e39302e302f32342d3234203d3e20323635333634.roa
File:                     3136382e3230352e39302e302f32342d3234203d3e20323635333634.roa (raw, json)
Hash identifier:          wxQVRJxxbu9xuBlSqdeKP5WnBZ6kf9mm/LjarC6zPH0=
Subject key identifier:   10:F3:73:15:8D:B3:C6:92:C8:7D:02:C1:89:6E:E3:E6:DD:BB:34:34
Certificate issuer:       /CN=53B8EF890E159C97C854A2FD8A6A51B3E34E626C
Certificate serial:       5CF8F84B014B0DBAE380D23657B11767420FE403
Authority key identifier: 53:B8:EF:89:0E:15:9C:97:C8:54:A2:FD:8A:6A:51:B3:E3:4E:62:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53B8EF890E159C97C854A2FD8A6A51B3E34E626C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/1/3136382e3230352e39302e302f32342d3234203d3e20323635333634.roa
Signing time:             Fri 07 Mar 2025 00:12:24 +0000
ROA not before:           Fri 07 Mar 2025 00:07:24 +0000
ROA not after:            Fri 06 Mar 2026 00:12:24 +0000
asID:                     265364
IP address blocks:        168.205.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/1/53B8EF890E159C97C854A2FD8A6A51B3E34E626C.crl
                          rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/1/53B8EF890E159C97C854A2FD8A6A51B3E34E626C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53B8EF890E159C97C854A2FD8A6A51B3E34E626C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 16:21:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:f8:f8:4b:01:4b:0d:ba:e3:80:d2:36:57:b1:17:67:42:0f:e4:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53B8EF890E159C97C854A2FD8A6A51B3E34E626C
        Validity
            Not Before: Mar  7 00:07:24 2025 GMT
            Not After : Mar  6 00:12:24 2026 GMT
        Subject: CN=10F373158DB3C692C87D02C1896EE3E6DDBB3434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:01:90:34:35:9c:16:cf:06:a4:6f:74:c8:30:
                    1b:f7:12:02:b2:fb:c6:54:eb:10:40:50:59:19:fa:
                    54:56:2e:b7:ce:c7:73:61:cf:77:f3:d5:72:06:26:
                    8b:b8:e5:fd:14:8b:49:81:af:b7:e1:eb:b8:b6:f0:
                    b6:13:61:19:fb:f9:d1:84:db:9a:6e:3b:21:ec:ee:
                    8f:1b:52:0a:70:d7:ab:88:3a:0e:cc:07:ef:80:97:
                    fb:85:27:b0:30:c3:84:5d:80:10:97:d5:5a:a4:e8:
                    d5:2d:ff:ce:8f:b6:e9:c6:0c:55:73:a2:9d:93:8b:
                    db:b3:0d:84:b5:66:18:58:81:7e:c2:52:97:87:9d:
                    a9:23:38:20:5d:3a:dd:5a:24:39:df:78:16:20:47:
                    c6:89:f0:4b:ec:8b:dd:b1:5a:a0:df:99:72:aa:3a:
                    8e:b7:74:9e:76:fd:bd:9a:22:b0:54:8b:2f:ba:e0:
                    59:73:3f:7b:2e:a1:6e:a4:fb:f5:77:6b:5a:be:e5:
                    38:09:1b:97:28:ba:40:a8:4e:d6:95:d8:8e:90:91:
                    12:be:c2:89:b9:3d:3a:a0:48:a1:57:07:34:68:95:
                    29:81:fd:80:ac:14:ac:69:8d:30:c1:24:5b:b2:9c:
                    77:be:dc:c7:8c:8f:8e:45:a9:96:d2:9c:9b:a2:d3:
                    f3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:F3:73:15:8D:B3:C6:92:C8:7D:02:C1:89:6E:E3:E6:DD:BB:34:34
            X509v3 Authority Key Identifier:
                keyid:53:B8:EF:89:0E:15:9C:97:C8:54:A2:FD:8A:6A:51:B3:E3:4E:62:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/1/53B8EF890E159C97C854A2FD8A6A51B3E34E626C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53B8EF890E159C97C854A2FD8A6A51B3E34E626C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/1/3136382e3230352e39302e302f32342d3234203d3e20323635333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:61:3d:db:99:56:8f:fb:86:f8:d1:71:fb:f3:3b:43:87:c1:
         68:13:f8:00:d0:42:4f:c3:cf:d9:81:f5:0a:bb:d7:81:65:5e:
         8d:0c:5d:90:c2:e5:a6:94:3a:e4:fc:a7:6b:38:5b:0e:e2:f8:
         01:bb:1b:85:b0:a0:2a:b3:70:76:f4:ba:31:c5:30:ac:9e:4b:
         5a:e3:c2:a0:8f:40:c0:ad:38:4e:87:2c:14:0b:f8:1c:2f:80:
         fb:20:96:57:04:3c:e3:f1:4c:d1:3a:e0:8d:3e:4b:bb:19:4e:
         7c:e0:53:75:2d:2c:43:0f:fa:c0:00:42:f6:be:a4:85:29:80:
         ae:0f:ad:a5:a2:32:20:3e:0a:fb:6f:7c:14:10:f1:9a:73:0b:
         75:27:c9:a9:b6:3f:f7:aa:de:79:f2:d8:d0:2d:28:61:b3:a4:
         26:1f:21:42:b2:59:0e:87:21:d5:dd:0f:c0:fb:4e:8a:2f:6b:
         24:9a:92:37:d9:3e:75:f9:1d:56:ce:4d:a4:4e:25:22:32:68:
         00:2e:11:d7:2d:06:c0:81:17:d1:2b:f9:f0:7a:08:c2:e8:44:
         85:4d:ea:7e:bf:f8:b7:f2:fe:bf:19:12:20:57:ce:3d:94:c5:
         67:62:76:05:5e:20:f4:e9:a0:cc:1a:9e:a5:ae:79:73:b3:af:
         61:a6:8a:f6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXPj4SwFLDbrjgNI2V7EXZ0IP5AMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTNCOEVGODkwRTE1OUM5N0M4NTRBMkZEOEE2QTUxQjNF
MzRFNjI2QzAeFw0yNTAzMDcwMDA3MjRaFw0yNjAzMDYwMDEyMjRaMDMxMTAvBgNV
BAMTKDEwRjM3MzE1OERCM0M2OTJDODdEMDJDMTg5NkVFM0U2RERCQjM0MzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWAZA0NZwWzwakb3TIMBv3EgKy
+8ZU6xBAUFkZ+lRWLrfOx3Nhz3fz1XIGJou45f0Ui0mBr7fh67i28LYTYRn7+dGE
25puOyHs7o8bUgpw16uIOg7MB++Al/uFJ7Aww4RdgBCX1Vqk6NUt/86PtunGDFVz
op2Ti9uzDYS1ZhhYgX7CUpeHnakjOCBdOt1aJDnfeBYgR8aJ8Evsi92xWqDfmXKq
Oo63dJ52/b2aIrBUiy+64FlzP3suoW6k+/V3a1q+5TgJG5coukCoTtaV2I6QkRK+
wom5PTqgSKFXBzRolSmB/YCsFKxpjTDBJFuynHe+3MeMj45FqZbSnJui0/M9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUEPNzFY2zxpLIfQLBiW7j5t27NDQwHwYDVR0j
BBgwFoAUU7jviQ4VnJfIVKL9impRs+NOYmwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWh1RTJqRDZKdjR2bkFTQkdidU05cGZnRkJUWjdzaUtrQlg4YmFwN1lu
SmIvMS81M0I4RUY4OTBFMTU5Qzk3Qzg1NEEyRkQ4QTZBNTFCM0UzNEU2MjZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUzQjhFRjg5MEUxNTlDOTdD
ODU0QTJGRDhBNkE1MUIzRTM0RTYyNkMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlodUUyakQ2SnY0dm5BU0JHYnVNOXBmZ0ZCVFo3c2lLa0JYOGJhcDdZbkpiLzEv
MzEzNjM4MmUzMjMwMzUyZTM5MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzUzMzM2MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACozVowDQYJKoZIhvcNAQELBQADggEBACBhPduZ
Vo/7hvjRcfvzO0OHwWgT+ADQQk/Dz9mB9Qq714FlXo0MXZDC5aaUOuT8p2s4Ww7i
+AG7G4WwoCqzcHb0ujHFMKyeS1rjwqCPQMCtOE6HLBQL+BwvgPsgllcEPOPxTNE6
4I0+S7sZTnzgU3UtLEMP+sAAQva+pIUpgK4PraWiMiA+CvtvfBQQ8ZpzC3Unyam2
P/eq3nny2NAtKGGzpCYfIUKyWQ6HIdXdD8D7ToovaySakjfZPnX5HVbOTaROJSIy
aAAuEdctBsCBF9Er+fB6CMLoRIVN6n6/+Lfy/r8ZEiBXzj2UxWdidgVeIPTpoMwa
nqWueXOzr2GmivY=
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:15:20 2025 by rpki-client