Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/3136382e39302e3231322e302f32332d3233203d3e20323635323935.roa
File:                     3136382e39302e3231322e302f32332d3233203d3e20323635323935.roa (raw, json)
Hash identifier:          CzD8qMEuqAVkGZUyj62xql2BkaUVhTIuLN2fnMx4eJI=
Subject key identifier:   E5:17:A5:14:95:8D:AF:2E:F2:90:10:86:E7:2D:26:E1:36:FA:8B:1E
Certificate issuer:       /CN=F261A4A527B62FE3115DF7AF213290B9F54F37FF
Certificate serial:       15A90AE0D1AC9C55927EE4D27DD1973C33224056
Authority key identifier: F2:61:A4:A5:27:B6:2F:E3:11:5D:F7:AF:21:32:90:B9:F5:4F:37:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F261A4A527B62FE3115DF7AF213290B9F54F37FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/3136382e39302e3231322e302f32332d3233203d3e20323635323935.roa
Signing time:             Sat 11 May 2024 14:27:29 +0000
ROA not before:           Sat 11 May 2024 14:22:29 +0000
ROA not after:            Sat 10 May 2025 14:27:29 +0000
asID:                     265295
IP address blocks:        168.90.212.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/F261A4A527B62FE3115DF7AF213290B9F54F37FF.crl
                          rsync://rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/F261A4A527B62FE3115DF7AF213290B9F54F37FF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F261A4A527B62FE3115DF7AF213290B9F54F37FF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:a9:0a:e0:d1:ac:9c:55:92:7e:e4:d2:7d:d1:97:3c:33:22:40:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F261A4A527B62FE3115DF7AF213290B9F54F37FF
        Validity
            Not Before: May 11 14:22:29 2024 GMT
            Not After : May 10 14:27:29 2025 GMT
        Subject: CN=E517A514958DAF2EF2901086E72D26E136FA8B1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:0a:84:cc:6f:75:88:21:20:7b:be:83:75:86:
                    90:39:97:b0:a7:91:53:27:19:94:57:53:f1:82:f5:
                    95:ad:69:a0:44:96:d5:a2:b4:50:ca:4c:da:70:8b:
                    11:fa:e3:22:31:af:2a:1f:6d:28:bc:22:61:83:64:
                    32:e2:3a:45:ac:bc:48:48:4d:88:62:4f:dd:58:6c:
                    76:13:7f:7e:c9:e7:9b:d9:ff:a1:9d:d0:7f:00:42:
                    91:27:a5:79:40:6f:df:75:da:9b:c7:82:b4:71:4d:
                    38:17:45:97:49:e2:89:ef:1d:a8:75:96:ef:3b:f7:
                    2a:f6:7e:b5:d4:26:ea:f2:fb:73:16:76:93:6a:d9:
                    11:21:0f:77:b3:d8:80:ec:ce:b6:37:6d:3c:19:46:
                    f0:96:8b:8d:4a:70:3a:1b:3c:98:ab:a3:83:d1:48:
                    e1:d4:0d:33:5c:d7:a2:b2:de:48:98:b0:98:fb:bf:
                    df:af:41:ce:16:4e:38:9d:9f:48:26:1f:42:45:0a:
                    ef:3f:5e:63:57:fb:1a:75:4f:6b:54:27:57:ed:ca:
                    03:46:ba:ba:5a:4f:22:73:f9:dc:e5:9f:45:69:a1:
                    f1:ea:ab:be:c9:e9:3a:ff:98:2b:21:d0:4b:19:72:
                    21:c7:5c:0e:8f:6c:fe:dc:3a:a4:9a:ae:ea:50:9a:
                    fe:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:17:A5:14:95:8D:AF:2E:F2:90:10:86:E7:2D:26:E1:36:FA:8B:1E
            X509v3 Authority Key Identifier:
                keyid:F2:61:A4:A5:27:B6:2F:E3:11:5D:F7:AF:21:32:90:B9:F5:4F:37:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/F261A4A527B62FE3115DF7AF213290B9F54F37FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F261A4A527B62FE3115DF7AF213290B9F54F37FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/3136382e39302e3231322e302f32332d3233203d3e20323635323935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:ff:37:3f:66:aa:4a:8f:15:36:ca:36:ad:19:8a:46:77:6c:
         75:c7:77:cb:d0:e5:bb:3c:b8:83:c9:84:ce:71:6a:d2:6c:d3:
         cf:2b:f1:12:33:bd:34:ca:aa:7b:63:99:3d:eb:a2:ac:43:73:
         86:7c:61:8f:69:8c:c3:b6:18:91:e4:60:e7:8f:ab:48:02:05:
         aa:4b:f5:a1:e8:a2:cc:fd:c9:35:7c:68:fd:c1:65:52:57:96:
         c2:79:22:5b:d8:08:f1:81:fa:b1:05:ff:23:43:e1:9f:39:40:
         fe:c5:39:3b:78:71:26:3d:1a:df:b4:77:91:3f:13:c9:17:cd:
         ce:b8:d7:a6:ad:05:2f:0a:a7:65:e8:97:e8:3e:9c:33:c6:c2:
         d8:28:95:94:5c:e7:9c:f7:81:0d:36:70:fa:8d:0c:a2:85:53:
         f9:37:82:43:01:0b:4c:1e:15:27:8d:61:13:61:7c:8c:c4:18:
         b2:11:9a:b0:57:91:eb:ac:7f:6a:de:87:fc:96:b6:f9:af:4e:
         04:9f:ab:b1:c8:ec:78:aa:25:a5:1f:9e:e5:7c:ac:1b:34:e9:
         f5:46:c1:d6:95:33:74:e4:bb:4b:47:4f:08:aa:b3:a6:c0:2a:
         fa:3b:e0:c4:27:0b:06:80:d9:d6:ee:fc:21:64:23:95:59:81:
         51:c6:f0:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:39 2024 by rpki-client on console-ams.rpki-client.org