Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/3136382e39302e3131322e302f32322d3234203d3e20323635313837.roa
File:                     3136382e39302e3131322e302f32322d3234203d3e20323635313837.roa (raw, json)
Hash identifier:          9LvONKF4erH2R8GeIIVHhkcX+ks1yW+W0ep8+m+RpNk=
Subject key identifier:   60:6C:66:3D:D1:06:AB:7E:B9:0B:94:9A:EB:14:C7:43:BC:2B:FD:13
Certificate issuer:       /CN=F455D0BE5138AE552B4857270EED2A7CE5B5C6F2
Certificate serial:       7FC1FC3467DD04ABE688FC0FCE51998D3FCE404F
Authority key identifier: F4:55:D0:BE:51:38:AE:55:2B:48:57:27:0E:ED:2A:7C:E5:B5:C6:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/3136382e39302e3131322e302f32322d3234203d3e20323635313837.roa
Signing time:             Thu 23 Jan 2025 09:51:38 +0000
ROA not before:           Thu 23 Jan 2025 09:46:38 +0000
ROA not after:            Thu 22 Jan 2026 09:51:38 +0000
asID:                     265187
IP address blocks:        168.90.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.crl
                          rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 20:24:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:c1:fc:34:67:dd:04:ab:e6:88:fc:0f:ce:51:99:8d:3f:ce:40:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F455D0BE5138AE552B4857270EED2A7CE5B5C6F2
        Validity
            Not Before: Jan 23 09:46:38 2025 GMT
            Not After : Jan 22 09:51:38 2026 GMT
        Subject: CN=606C663DD106AB7EB90B949AEB14C743BC2BFD13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:83:e0:bb:a1:2b:ee:a9:12:7e:eb:cc:bb:b7:
                    13:28:0e:5a:df:a7:21:9c:65:61:66:77:fe:3d:52:
                    d6:0f:45:99:e5:e6:cb:1c:41:46:73:e1:e2:57:88:
                    13:e2:d4:75:d3:50:12:a0:25:a5:c4:13:cd:b8:1d:
                    4b:db:e2:44:94:ad:70:2b:fd:82:2f:47:aa:09:5a:
                    b6:2f:29:c9:94:c7:ae:b7:3b:46:d0:f7:ff:e6:08:
                    11:51:ad:98:32:29:4a:94:f3:8a:98:59:0d:f5:da:
                    65:e7:20:09:f1:4e:18:9c:f0:4b:2e:b1:4c:f8:f2:
                    16:07:5c:8e:53:99:91:03:c0:cb:60:2c:fe:7b:57:
                    98:9a:61:c6:54:70:73:c5:3c:35:6c:8e:d0:6a:d1:
                    d9:ed:b5:52:58:a2:7d:db:99:a5:1e:17:03:64:05:
                    ef:a0:55:83:6b:bb:c8:e1:9d:a8:cd:8b:52:d9:35:
                    6e:32:9f:73:d4:81:fa:b6:aa:08:08:62:41:fc:d6:
                    9a:5e:bf:5e:7b:e3:61:b0:98:8a:7c:1c:26:d6:a5:
                    e7:30:0a:74:e6:cb:b5:a2:5d:16:2a:00:e7:4e:73:
                    23:dd:0f:09:5f:8f:0d:03:a5:9a:06:e7:9b:82:af:
                    46:6e:2c:58:8b:a7:86:01:9a:f0:2c:ca:55:87:6c:
                    ab:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:6C:66:3D:D1:06:AB:7E:B9:0B:94:9A:EB:14:C7:43:BC:2B:FD:13
            X509v3 Authority Key Identifier:
                keyid:F4:55:D0:BE:51:38:AE:55:2B:48:57:27:0E:ED:2A:7C:E5:B5:C6:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/3136382e39302e3131322e302f32322d3234203d3e20323635313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:47:2e:36:9f:de:31:97:41:fd:81:2e:04:05:67:d1:56:d4:
         19:3f:a0:ee:cc:52:09:6c:07:8f:d3:44:78:66:6a:51:fe:08:
         bc:05:b7:fe:88:3e:02:60:b7:81:fd:92:01:a2:d9:53:51:2a:
         e3:64:06:94:92:bc:3f:71:ca:91:d7:b8:4f:3b:e9:fc:b3:08:
         f9:58:33:dd:28:97:ab:ab:87:1b:0c:89:21:ad:e3:12:89:4d:
         14:07:60:0d:e0:57:8f:69:ea:03:5d:26:cf:95:37:bc:a1:87:
         29:66:fa:2f:c9:66:a1:0b:c2:82:c5:41:b1:71:4f:5e:19:82:
         b4:5b:35:9d:ec:70:0f:80:7b:d8:ee:a5:9d:28:40:f5:b3:16:
         55:55:c6:3e:e4:0e:8e:61:64:81:c6:79:74:11:63:cd:3a:7d:
         9f:08:c4:f2:11:af:41:be:e9:38:4b:e7:32:80:c2:29:5d:5c:
         55:03:5a:6a:6a:d4:5f:21:b9:09:bc:5f:2e:58:17:6d:3f:f5:
         3e:23:94:9b:37:b3:a1:b2:06:c6:ff:63:00:ea:2e:47:cc:2f:
         13:85:44:b0:65:99:0a:63:66:dc:fa:08:8e:0f:bf:d3:63:d2:
         0f:ee:84:20:8f:f9:9f:be:89:e3:69:87:71:5e:f1:f8:6f:03:
         e2:4d:36:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:04:43 2025 by rpki-client