Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/3136382e39302e3231342e302f32332d3233203d3e20323635323935.roa
File:                     3136382e39302e3231342e302f32332d3233203d3e20323635323935.roa (raw, json)
Hash identifier:          ZRpcZo3TQPWwuAZIgNZFdjQwCRAOza5cjJtkuz24o5Y=
Subject key identifier:   10:F8:86:EE:55:31:F2:B7:C8:BA:0C:0E:E0:37:1D:93:6D:BC:A8:88
Certificate issuer:       /CN=F261A4A527B62FE3115DF7AF213290B9F54F37FF
Certificate serial:       590AD7721EAD38873AEB2F2A8DD533FA8CA18718
Authority key identifier: F2:61:A4:A5:27:B6:2F:E3:11:5D:F7:AF:21:32:90:B9:F5:4F:37:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F261A4A527B62FE3115DF7AF213290B9F54F37FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/3136382e39302e3231342e302f32332d3233203d3e20323635323935.roa
Signing time:             Sat 11 May 2024 14:27:34 +0000
ROA not before:           Sat 11 May 2024 14:22:34 +0000
ROA not after:            Sat 10 May 2025 14:27:34 +0000
asID:                     265295
IP address blocks:        168.90.214.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/F261A4A527B62FE3115DF7AF213290B9F54F37FF.crl
                          rsync://rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/F261A4A527B62FE3115DF7AF213290B9F54F37FF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F261A4A527B62FE3115DF7AF213290B9F54F37FF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:0a:d7:72:1e:ad:38:87:3a:eb:2f:2a:8d:d5:33:fa:8c:a1:87:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F261A4A527B62FE3115DF7AF213290B9F54F37FF
        Validity
            Not Before: May 11 14:22:34 2024 GMT
            Not After : May 10 14:27:34 2025 GMT
        Subject: CN=10F886EE5531F2B7C8BA0C0EE0371D936DBCA888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2e:bc:ee:8f:f8:ec:e7:91:51:d7:72:62:99:
                    ec:d5:14:1b:9e:03:73:23:ef:68:f8:e3:6b:03:83:
                    83:a2:73:68:83:39:21:09:aa:08:28:20:0b:e5:98:
                    b4:81:4c:d7:1f:16:61:00:8a:00:9f:53:4a:0c:89:
                    55:c4:9e:6b:20:8d:58:6e:78:36:bd:c6:ec:b1:2e:
                    2b:2e:df:18:e5:4c:20:88:0a:c6:2c:71:88:43:01:
                    87:28:3c:2b:11:58:9e:e7:28:4e:d4:99:0c:1e:1b:
                    52:d0:9d:79:89:03:28:d9:d2:13:a8:45:03:52:80:
                    07:39:5f:3b:2e:54:0f:36:47:94:9a:b7:70:be:c6:
                    5c:ae:19:d9:58:43:2f:35:d6:ba:f1:39:31:86:52:
                    f6:b0:21:4d:97:9e:ac:a9:3d:74:8d:8a:72:c8:69:
                    77:83:38:f2:19:f1:52:5e:f9:43:fa:af:bb:4f:69:
                    aa:91:b0:94:e4:bf:a6:46:72:1c:72:6c:fd:cb:d1:
                    60:bc:95:0b:a8:6f:1e:53:d5:cc:c9:2a:1e:f1:f9:
                    8a:83:74:f6:5a:86:e3:bb:2a:85:22:b5:8a:5b:c8:
                    d4:9a:cd:37:ae:03:52:a7:90:3e:89:f5:57:e0:06:
                    d6:8d:8a:55:91:0a:d2:8c:57:da:52:0f:c9:06:c4:
                    98:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:F8:86:EE:55:31:F2:B7:C8:BA:0C:0E:E0:37:1D:93:6D:BC:A8:88
            X509v3 Authority Key Identifier:
                keyid:F2:61:A4:A5:27:B6:2F:E3:11:5D:F7:AF:21:32:90:B9:F5:4F:37:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/F261A4A527B62FE3115DF7AF213290B9F54F37FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F261A4A527B62FE3115DF7AF213290B9F54F37FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/3136382e39302e3231342e302f32332d3233203d3e20323635323935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:97:35:0a:75:15:60:17:c8:a2:0e:57:c2:c3:1a:4f:b9:51:
         a3:d9:8c:62:90:ff:a1:e8:08:67:5b:42:e1:66:76:fa:1b:95:
         c5:cd:a3:be:fb:be:82:5b:2d:47:da:37:39:3b:3c:b3:f6:64:
         b7:96:53:f9:cf:5c:45:97:8c:f4:a9:19:0b:2d:cb:17:f8:f1:
         7d:09:3e:20:6a:6d:81:f3:6b:fd:ba:f9:47:9b:f0:22:48:51:
         36:2a:5a:8a:a2:8e:8d:00:a1:ba:43:75:be:f6:98:bc:dc:4c:
         3b:a6:83:db:a8:c0:2f:00:2f:64:97:e3:40:eb:2b:f3:ca:f4:
         e3:5b:95:59:5e:46:3d:aa:3b:c6:21:28:c3:29:0d:c3:11:f8:
         87:d9:8a:10:3f:23:bc:77:b5:49:e0:85:e3:18:5d:9f:59:4f:
         37:7b:8c:9b:62:18:bb:09:dd:07:96:6a:44:59:85:9c:29:7b:
         17:2f:ed:b3:47:96:5c:30:a4:e9:2a:3c:e0:44:f3:7b:6d:ae:
         67:62:30:f1:b5:c7:23:e8:08:fb:db:51:68:bd:01:8e:6d:a8:
         7f:6d:fe:d0:23:f2:51:30:9f:7a:63:b1:fc:44:ef:17:78:ee:
         f2:25:1c:85:77:08:5e:f2:aa:2d:6e:42:3a:aa:f7:15:fa:63:
         40:6c:cd:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:39 2024 by rpki-client on console-ams.rpki-client.org