Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/3136382e39302e3131342e302f32342d3234203d3e20323635313837.roa
File:                     3136382e39302e3131342e302f32342d3234203d3e20323635313837.roa (raw, json)
Hash identifier:          00VRbD5wV9Ku577QS/tOf0+QXpr18xm5t8ecjQEEZzA=
Subject key identifier:   04:F8:42:80:3F:02:D2:49:0C:76:46:03:DB:F2:94:FC:0A:08:F0:2E
Certificate issuer:       /CN=F455D0BE5138AE552B4857270EED2A7CE5B5C6F2
Certificate serial:       690BB01E0E583C6A84F27692D8EDB679715B3089
Authority key identifier: F4:55:D0:BE:51:38:AE:55:2B:48:57:27:0E:ED:2A:7C:E5:B5:C6:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/3136382e39302e3131342e302f32342d3234203d3e20323635313837.roa
Signing time:             Fri 05 Jul 2024 13:19:56 +0000
ROA not before:           Fri 05 Jul 2024 13:14:56 +0000
ROA not after:            Fri 04 Jul 2025 13:19:56 +0000
asID:                     265187
IP address blocks:        168.90.114.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.crl
                          rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:0b:b0:1e:0e:58:3c:6a:84:f2:76:92:d8:ed:b6:79:71:5b:30:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F455D0BE5138AE552B4857270EED2A7CE5B5C6F2
        Validity
            Not Before: Jul  5 13:14:56 2024 GMT
            Not After : Jul  4 13:19:56 2025 GMT
        Subject: CN=04F842803F02D2490C764603DBF294FC0A08F02E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0c:35:81:af:68:e6:bd:3b:58:d7:6d:27:75:
                    cd:ae:6b:bd:ca:5d:8a:cc:ad:fd:9a:e3:4e:73:b8:
                    c7:f5:68:4d:0c:24:27:4b:b7:ae:e0:1e:fd:4f:a6:
                    f5:67:43:a9:9a:4a:8d:00:42:2f:13:93:1a:7f:b5:
                    de:64:5e:38:a0:aa:25:37:90:1e:b5:60:0d:ab:d8:
                    4e:27:09:bc:30:03:a2:e3:18:04:21:83:78:5a:55:
                    fc:80:48:7e:26:6f:16:3d:7e:1e:18:37:99:63:52:
                    9c:a7:4f:eb:3c:50:a8:72:97:04:c2:b0:9c:16:f9:
                    09:9c:f5:54:49:39:ce:eb:22:1e:0e:8f:f7:30:f4:
                    fe:de:c1:d3:80:7a:8a:ae:83:ac:11:89:c1:f1:77:
                    f7:ed:99:29:13:74:a0:e4:65:5c:ce:85:2c:d2:cc:
                    d8:77:ae:2a:3f:ba:fa:27:27:e0:66:e3:d4:b9:83:
                    ce:b0:86:aa:9e:01:10:d6:0f:30:a3:96:64:2e:38:
                    b4:d1:5d:f6:f6:74:d7:04:48:a2:26:d9:37:a3:e7:
                    b6:86:a4:bb:fb:e3:37:24:5d:e5:67:68:fe:28:cb:
                    c7:c8:e4:06:44:3e:86:94:df:62:b1:a9:54:24:f0:
                    25:d4:ed:2e:4e:93:0c:f8:2e:03:db:4b:de:00:34:
                    a2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:F8:42:80:3F:02:D2:49:0C:76:46:03:DB:F2:94:FC:0A:08:F0:2E
            X509v3 Authority Key Identifier:
                keyid:F4:55:D0:BE:51:38:AE:55:2B:48:57:27:0E:ED:2A:7C:E5:B5:C6:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/3136382e39302e3131342e302f32342d3234203d3e20323635313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:9d:28:dc:70:11:21:06:15:2f:fe:01:bc:da:dc:48:26:ae:
         70:a9:ef:bf:36:65:5f:9a:e6:90:15:c6:27:42:f2:43:b3:1e:
         51:68:28:4f:c6:24:30:16:99:7f:2a:94:c5:3b:27:7a:4d:fa:
         63:74:da:9f:12:7a:d7:21:eb:b4:a7:f4:ec:44:9e:64:b0:3c:
         61:ef:f9:6f:82:ff:0a:93:28:43:88:3b:44:67:1e:a3:af:98:
         dc:5b:e4:d7:27:77:0b:e2:be:2a:56:37:36:cb:77:fe:91:2a:
         9f:de:f6:5c:9e:5b:ec:ae:4d:1a:b2:78:ed:00:a7:44:34:ba:
         e3:b1:7c:90:0c:00:92:70:95:51:d0:fb:d4:e3:db:ee:17:8c:
         cf:50:d8:36:bc:ae:cf:ac:18:ac:f1:c0:5e:cb:a2:60:8e:bc:
         97:7a:03:14:f8:9e:cc:15:c6:23:ac:26:d8:de:e9:82:ef:54:
         70:97:8f:00:47:dc:de:f7:69:48:73:2f:ff:16:e2:4f:f1:28:
         77:e3:dd:3b:5b:7a:05:12:7c:0d:54:07:4e:5e:35:12:53:e0:
         44:64:32:d8:89:ed:6b:c2:77:f2:a6:67:3d:81:26:73:9c:28:
         41:43:59:e8:0c:19:b7:36:dc:89:e6:35:a4:40:6c:2c:48:13:
         c1:7e:be:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:12 2024 by rpki-client on console-fra.rpki-client.org