Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/1/3136382e39302e3132302e302f32322d3234203d3e203533313735.roa
File:                     3136382e39302e3132302e302f32322d3234203d3e203533313735.roa (raw, json)
Hash identifier:          6sFPH2UBX9tFG2U0X3A59VltXJu/t4RTJdPNCb8cVyg=
Subject key identifier:   EE:22:F9:D3:69:FB:F4:E1:B7:6C:EC:7E:DE:26:D2:A0:D9:03:F9:A3
Certificate issuer:       /CN=B87E403FD04360E1BA519D841853FF5C9E675A23
Certificate serial:       2DD28E251D95B5C17FB246C4596E931FB610BD0B
Authority key identifier: B8:7E:40:3F:D0:43:60:E1:BA:51:9D:84:18:53:FF:5C:9E:67:5A:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B87E403FD04360E1BA519D841853FF5C9E675A23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/1/3136382e39302e3132302e302f32322d3234203d3e203533313735.roa
Signing time:             Wed 03 Apr 2024 18:30:21 +0000
ROA not before:           Wed 03 Apr 2024 18:25:21 +0000
ROA not after:            Wed 02 Apr 2025 18:30:21 +0000
asID:                     53175
IP address blocks:        168.90.120.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/1/B87E403FD04360E1BA519D841853FF5C9E675A23.crl
                          rsync://rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/1/B87E403FD04360E1BA519D841853FF5C9E675A23.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B87E403FD04360E1BA519D841853FF5C9E675A23.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:22:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:d2:8e:25:1d:95:b5:c1:7f:b2:46:c4:59:6e:93:1f:b6:10:bd:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B87E403FD04360E1BA519D841853FF5C9E675A23
        Validity
            Not Before: Apr  3 18:25:21 2024 GMT
            Not After : Apr  2 18:30:21 2025 GMT
        Subject: CN=EE22F9D369FBF4E1B76CEC7EDE26D2A0D903F9A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e9:42:d8:d6:66:ea:f4:30:53:3d:6a:07:f0:
                    3b:90:a9:ad:3e:fd:78:91:0b:be:e5:4d:37:6a:61:
                    87:bb:dc:7a:09:f4:ba:02:61:45:4a:76:53:b4:b0:
                    fa:e5:e0:e6:c7:d4:1d:96:66:24:c1:62:03:37:01:
                    ae:de:00:af:09:74:35:ea:8f:b1:89:c4:82:4b:4f:
                    7e:b2:a0:89:ed:5b:cd:4e:df:ef:56:ef:d2:f0:b5:
                    19:86:9c:d8:29:85:7f:a3:e0:50:68:7d:21:61:de:
                    fe:b4:2a:95:a0:ba:df:8b:1c:a3:ad:d0:2b:2f:46:
                    47:e0:01:d9:9c:3f:b4:72:7f:ac:85:5c:f8:9a:41:
                    3a:ad:c5:be:92:d7:ea:95:ef:1f:45:55:63:ff:da:
                    4f:5e:51:78:1a:c2:88:01:11:28:a4:a1:8b:ad:37:
                    30:05:f7:3c:b0:22:fb:c4:34:a8:dd:76:c1:27:60:
                    4a:13:e8:1d:71:84:74:8d:0d:08:7f:9c:02:c6:55:
                    a0:31:ab:b7:f1:8e:99:d2:29:8d:5a:04:de:32:ef:
                    63:ef:04:49:59:9e:e1:88:55:71:e1:cb:b8:8e:03:
                    95:5e:15:d8:84:47:be:a3:69:3e:67:4a:30:0a:63:
                    42:8d:14:25:fc:f9:a8:45:a2:1a:9c:7c:09:f8:30:
                    84:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:22:F9:D3:69:FB:F4:E1:B7:6C:EC:7E:DE:26:D2:A0:D9:03:F9:A3
            X509v3 Authority Key Identifier:
                keyid:B8:7E:40:3F:D0:43:60:E1:BA:51:9D:84:18:53:FF:5C:9E:67:5A:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/1/B87E403FD04360E1BA519D841853FF5C9E675A23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B87E403FD04360E1BA519D841853FF5C9E675A23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/1/3136382e39302e3132302e302f32322d3234203d3e203533313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:06:bc:f9:7f:c4:3a:f9:c6:3e:db:91:8d:56:f5:96:c9:83:
         67:02:c1:0d:77:d9:51:23:0e:1f:99:d4:c8:b4:2a:74:5f:ff:
         6c:04:d2:b0:50:d1:73:99:32:d3:1d:e4:d6:31:22:ae:f4:70:
         09:88:a4:53:5f:68:64:74:fc:35:aa:74:bf:73:79:af:89:e4:
         11:1d:22:1b:b7:61:02:e2:2a:70:3e:c3:b8:f0:a6:11:08:4a:
         4a:fe:3c:2a:2b:2c:50:1a:49:c3:84:1a:9f:9b:2b:df:84:dc:
         93:55:49:cd:8f:4a:25:90:dd:02:27:10:2f:87:32:e4:3f:2a:
         1b:c7:80:b4:36:f6:a8:17:25:b5:36:68:14:e1:e3:89:6c:3b:
         cf:b2:c4:7f:28:87:73:b7:97:e5:a8:be:6a:e4:a5:94:cd:45:
         b8:de:5a:5b:fd:f5:fe:f7:83:7c:49:3e:13:2c:12:d2:24:7b:
         0c:a5:2f:f2:20:67:ae:37:b4:2f:29:f4:2d:7d:f8:9a:9a:ed:
         87:0f:49:e7:8c:a1:c4:bf:a2:54:51:d5:21:fc:9f:ce:56:33:
         9d:48:86:1a:20:d4:b7:70:a2:0a:17:46:16:e1:e1:91:43:28:
         93:20:21:61:6a:a8:51:8c:b0:e1:c4:4c:93:e0:6c:29:b8:6b:
         0a:6f:bd:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:11 2024 by rpki-client on console-ams.rpki-client.org