Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GJJC42ntNAu4RCivvsDU57dL5pGJWbasTRPJSSpEjWgM/1/3136382e39302e31362e302f32322d3234203d3e20323635323731.roa
File:                     3136382e39302e31362e302f32322d3234203d3e20323635323731.roa (raw, json)
Hash identifier:          OcrvfRIKZlIwi0YdRsfdjGDnn9q3jI0SlnB1ufAWHY4=
Subject key identifier:   6A:DC:2A:B4:DB:0D:5D:D1:5F:55:0C:75:40:65:8C:88:32:6E:49:A8
Certificate issuer:       /CN=6AA0D50C320D533B784D03818C756A9E5E447085
Certificate serial:       4B32A53111BFE88275A7C129B8187BCE0002BDD8
Authority key identifier: 6A:A0:D5:0C:32:0D:53:3B:78:4D:03:81:8C:75:6A:9E:5E:44:70:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AA0D50C320D533B784D03818C756A9E5E447085.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GJJC42ntNAu4RCivvsDU57dL5pGJWbasTRPJSSpEjWgM/1/3136382e39302e31362e302f32322d3234203d3e20323635323731.roa
Signing time:             Wed 03 Apr 2024 21:56:17 +0000
ROA not before:           Wed 03 Apr 2024 21:51:17 +0000
ROA not after:            Wed 02 Apr 2025 21:56:17 +0000
asID:                     265271
IP address blocks:        168.90.16.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GJJC42ntNAu4RCivvsDU57dL5pGJWbasTRPJSSpEjWgM/1/6AA0D50C320D533B784D03818C756A9E5E447085.crl
                          rsync://rpki-repo.registro.br/repo/GJJC42ntNAu4RCivvsDU57dL5pGJWbasTRPJSSpEjWgM/1/6AA0D50C320D533B784D03818C756A9E5E447085.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AA0D50C320D533B784D03818C756A9E5E447085.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:32:a5:31:11:bf:e8:82:75:a7:c1:29:b8:18:7b:ce:00:02:bd:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AA0D50C320D533B784D03818C756A9E5E447085
        Validity
            Not Before: Apr  3 21:51:17 2024 GMT
            Not After : Apr  2 21:56:17 2025 GMT
        Subject: CN=6ADC2AB4DB0D5DD15F550C7540658C88326E49A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e3:2b:7f:2d:3e:1e:2b:0f:50:be:35:ed:a6:
                    a3:da:12:71:2e:66:f3:d4:ce:88:7f:55:46:b2:28:
                    a8:e2:fd:6a:99:f1:50:0a:f5:9e:ae:99:7b:90:de:
                    52:7d:c8:09:c2:73:1d:c7:d0:8a:c5:7d:e4:a2:29:
                    2e:7e:a1:3f:c2:61:72:06:5d:b7:fc:9c:27:21:69:
                    4d:bc:33:10:58:88:42:c7:45:f0:7e:52:5f:26:1f:
                    9d:d8:f2:88:f6:eb:05:b2:3a:82:01:81:66:7a:ac:
                    b3:b4:18:a2:69:ee:41:b9:f4:7c:fa:0b:ab:49:c0:
                    c0:37:b6:d3:3e:82:94:6b:71:92:67:31:be:08:a0:
                    13:ff:95:23:b0:83:4a:b6:f7:07:db:dc:71:ca:77:
                    b1:c6:36:d3:de:4d:fc:4d:e9:94:90:06:59:9b:72:
                    15:c0:e1:fa:91:c4:e8:8e:ba:ee:97:d5:6d:75:da:
                    c1:a0:04:19:8d:dd:45:36:20:c1:43:54:15:86:23:
                    a6:3d:6d:f1:6d:24:bf:68:cc:07:90:45:1e:94:95:
                    a4:db:3d:bc:e1:e7:8e:b7:24:4a:15:eb:01:a4:43:
                    1a:5d:09:59:64:8d:41:76:ee:cc:45:b7:62:e6:1e:
                    4a:d2:86:8b:de:ae:0d:11:fe:8c:23:16:58:22:71:
                    95:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:DC:2A:B4:DB:0D:5D:D1:5F:55:0C:75:40:65:8C:88:32:6E:49:A8
            X509v3 Authority Key Identifier:
                keyid:6A:A0:D5:0C:32:0D:53:3B:78:4D:03:81:8C:75:6A:9E:5E:44:70:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GJJC42ntNAu4RCivvsDU57dL5pGJWbasTRPJSSpEjWgM/1/6AA0D50C320D533B784D03818C756A9E5E447085.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AA0D50C320D533B784D03818C756A9E5E447085.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJJC42ntNAu4RCivvsDU57dL5pGJWbasTRPJSSpEjWgM/1/3136382e39302e31362e302f32322d3234203d3e20323635323731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:aa:e4:97:7b:05:6c:86:48:1e:40:13:d6:63:09:86:ca:34:
         ff:d9:0e:b1:c1:56:2d:b5:ca:3a:70:21:a1:78:9a:32:22:c4:
         7f:e9:ef:d9:87:16:71:db:f0:32:96:44:ed:1e:4f:e2:2b:fe:
         d5:d1:8f:6d:7b:89:40:2c:6f:44:f6:28:ac:75:44:3c:da:db:
         5c:fa:0d:8d:5d:24:4b:9b:12:b0:46:be:56:0c:d8:63:6e:b5:
         be:30:3d:a4:7b:9a:ba:d9:8b:8b:f3:13:ba:48:bd:47:0e:a6:
         77:ac:17:a3:f6:a9:0b:28:af:ca:0a:e5:84:f7:73:82:a5:5e:
         09:23:a6:74:6b:87:f8:59:0f:7a:26:7d:56:d8:9a:3c:b7:63:
         be:8b:5e:2a:d6:c7:77:21:10:bb:80:c8:3d:54:23:dc:e9:37:
         38:94:a6:ec:52:0f:6d:28:83:f9:7e:b4:2f:eb:92:9b:31:b0:
         3f:13:27:8e:52:0d:11:55:5d:54:f9:85:ce:b1:63:2c:3d:9f:
         ee:07:80:31:e7:ae:9b:49:ed:8a:10:bc:90:f5:7d:a8:60:bc:
         02:26:df:49:92:e9:83:5c:eb:62:4e:c8:a1:e6:40:be:c4:84:
         63:bd:bb:65:ef:c7:dd:e7:2b:ff:6c:da:c9:47:51:44:1f:12:
         39:fb:c7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 14:04:04 2024 by rpki-client on console-fra.rpki-client.org