Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/3136382e39302e3131322e302f32342d3234203d3e20323635313837.roa
File:                     3136382e39302e3131322e302f32342d3234203d3e20323635313837.roa (raw, json)
Hash identifier:          siA5LEu0CbbAOdPTHfFXc5Vpc+Y28rY5YASruUNfVgU=
Subject key identifier:   BF:84:0E:B0:0C:6C:63:31:0C:68:87:48:F7:95:B7:C2:B7:7A:2E:2E
Certificate issuer:       /CN=F455D0BE5138AE552B4857270EED2A7CE5B5C6F2
Certificate serial:       644950CF5CEF971631AD8F65FA01FBFBD830B4D8
Authority key identifier: F4:55:D0:BE:51:38:AE:55:2B:48:57:27:0E:ED:2A:7C:E5:B5:C6:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/3136382e39302e3131322e302f32342d3234203d3e20323635313837.roa
Signing time:             Fri 05 Jul 2024 13:17:22 +0000
ROA not before:           Fri 05 Jul 2024 13:12:22 +0000
ROA not after:            Fri 04 Jul 2025 13:17:22 +0000
asID:                     265187
IP address blocks:        168.90.112.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.crl
                          rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:49:50:cf:5c:ef:97:16:31:ad:8f:65:fa:01:fb:fb:d8:30:b4:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F455D0BE5138AE552B4857270EED2A7CE5B5C6F2
        Validity
            Not Before: Jul  5 13:12:22 2024 GMT
            Not After : Jul  4 13:17:22 2025 GMT
        Subject: CN=BF840EB00C6C63310C688748F795B7C2B77A2E2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ae:c5:34:8f:97:61:ab:00:df:b4:e9:7c:95:
                    3b:8a:f4:f3:da:f6:25:c2:c8:3d:29:9b:dc:e9:34:
                    f3:fb:b4:21:6d:1a:24:f8:10:23:a2:d4:e1:a6:59:
                    23:b7:58:09:73:02:0f:0b:91:e9:84:d5:e7:a6:ab:
                    8c:48:a8:da:60:9a:f4:a6:50:e2:40:b5:c9:aa:d9:
                    ce:29:ce:eb:c7:0a:58:cd:5e:9b:d0:c5:7d:4c:7d:
                    bd:b8:64:04:2b:a9:f0:ca:14:e6:0e:93:28:87:a8:
                    95:52:87:29:5c:f9:0c:3c:72:7d:23:9d:b5:3c:a8:
                    85:1b:1f:c5:df:e7:5d:43:1d:e1:b6:7e:95:13:e9:
                    06:53:38:62:9b:d0:f4:eb:0f:a4:b6:fd:e2:cb:02:
                    4e:c8:69:d8:5e:d3:36:72:c4:af:6d:be:14:0e:e9:
                    5e:20:b3:95:8e:7e:2c:89:1d:c8:05:68:c2:0d:71:
                    83:7d:2e:d9:ac:91:00:e4:79:8d:dd:41:94:be:98:
                    58:7f:e9:be:95:a3:d8:6d:3d:80:cc:3f:37:e1:ea:
                    c3:91:4b:10:99:b9:79:a1:95:50:a4:6f:62:9c:5e:
                    83:ad:32:37:b8:05:a9:da:dd:c6:3f:1e:28:1a:64:
                    b5:a5:87:f7:f0:a8:a4:75:2e:8a:9e:08:24:b4:bf:
                    62:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:84:0E:B0:0C:6C:63:31:0C:68:87:48:F7:95:B7:C2:B7:7A:2E:2E
            X509v3 Authority Key Identifier:
                keyid:F4:55:D0:BE:51:38:AE:55:2B:48:57:27:0E:ED:2A:7C:E5:B5:C6:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/3136382e39302e3131322e302f32342d3234203d3e20323635313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:a6:ae:03:75:31:98:0a:ef:f5:75:01:6c:f1:c3:66:86:f7:
         e8:7d:a4:e8:04:8a:65:90:f4:5d:4e:ef:2b:6b:db:f5:c7:c4:
         27:08:f5:6e:a4:f9:18:dd:12:a9:c3:09:7e:f5:9d:87:dc:86:
         e6:b6:9c:66:85:66:7c:d5:a5:cb:33:12:ad:6d:4e:82:0c:16:
         3b:a5:18:f9:7a:aa:dd:1f:1c:62:85:ed:c0:cf:8b:42:61:fb:
         3e:64:61:25:44:bb:a7:fa:5f:44:41:c8:b5:8f:39:3e:06:4b:
         9c:cf:1b:3a:98:8b:0b:b6:18:52:56:76:04:3e:23:d9:a2:72:
         be:42:a1:87:1e:45:10:2f:30:48:58:4d:23:11:06:02:83:7c:
         47:00:e5:39:83:dd:58:55:6c:21:6a:0d:98:4a:56:1b:19:f3:
         58:20:eb:7f:cd:7e:81:18:fb:21:ea:a9:50:6d:6a:8c:96:14:
         a0:79:81:02:6c:0b:e3:c7:32:32:d7:7a:bf:c2:fc:e5:27:d9:
         65:d8:0f:14:22:04:44:33:f7:d6:96:f7:15:8e:22:ea:75:de:
         31:25:4f:21:06:cb:a5:16:6d:cf:dd:8d:5d:49:71:9e:f4:33:
         c3:e4:61:9e:10:70:72:37:fd:27:bc:b7:96:65:73:f7:65:49:
         8a:57:06:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:12 2024 by rpki-client on console-fra.rpki-client.org