Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GJJC42ntNAu4RCivvsDU57dL5pGJWbasTRPJSSpEjWgM/1/3136382e39302e31362e302f32322d3234203d3e20323635323731.roa
File:                     3136382e39302e31362e302f32322d3234203d3e20323635323731.roa (raw, json)
Hash identifier:          CYm4tO51+S7Kw5MPZnvP+OwSAQK92KeN9sThe3qP50U=
Subject key identifier:   A4:6A:CA:7B:D0:35:23:9F:AE:A2:A0:2F:DC:8C:E0:3A:C0:3C:B3:60
Certificate issuer:       /CN=6AA0D50C320D533B784D03818C756A9E5E447085
Certificate serial:       52EA01C27895B04DA3D8A852C5B48A1760F2FDF6
Authority key identifier: 6A:A0:D5:0C:32:0D:53:3B:78:4D:03:81:8C:75:6A:9E:5E:44:70:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AA0D50C320D533B784D03818C756A9E5E447085.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GJJC42ntNAu4RCivvsDU57dL5pGJWbasTRPJSSpEjWgM/1/3136382e39302e31362e302f32322d3234203d3e20323635323731.roa
Signing time:             Wed 05 Mar 2025 22:25:16 +0000
ROA not before:           Wed 05 Mar 2025 22:20:16 +0000
ROA not after:            Wed 04 Mar 2026 22:25:16 +0000
asID:                     265271
IP address blocks:        168.90.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GJJC42ntNAu4RCivvsDU57dL5pGJWbasTRPJSSpEjWgM/1/6AA0D50C320D533B784D03818C756A9E5E447085.crl
                          rsync://rpki-repo.registro.br/repo/GJJC42ntNAu4RCivvsDU57dL5pGJWbasTRPJSSpEjWgM/1/6AA0D50C320D533B784D03818C756A9E5E447085.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AA0D50C320D533B784D03818C756A9E5E447085.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 19:38:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:ea:01:c2:78:95:b0:4d:a3:d8:a8:52:c5:b4:8a:17:60:f2:fd:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AA0D50C320D533B784D03818C756A9E5E447085
        Validity
            Not Before: Mar  5 22:20:16 2025 GMT
            Not After : Mar  4 22:25:16 2026 GMT
        Subject: CN=A46ACA7BD035239FAEA2A02FDC8CE03AC03CB360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2a:fe:e1:8d:45:b7:75:89:dd:be:7c:61:aa:
                    8b:cf:d9:15:f7:7c:bb:cf:98:72:e5:ff:5f:55:4c:
                    fe:f8:3e:3a:f0:fa:a6:c9:06:eb:6c:fc:0b:51:79:
                    48:f8:f9:03:db:85:27:d6:bf:06:2e:88:0b:b0:91:
                    ae:0b:c8:0a:b1:d4:d5:d0:ab:8f:c2:5f:03:bd:40:
                    43:c7:62:69:ae:77:45:e5:0d:b9:80:03:8e:7d:82:
                    0e:0c:95:33:c0:0c:db:7c:95:fa:62:00:87:7a:91:
                    c3:13:fa:7c:5d:26:2d:99:f0:ef:86:ef:ec:f4:7c:
                    d0:20:ea:39:dc:2a:f2:72:b0:7c:31:df:f1:23:d2:
                    ac:bb:8d:a8:34:e3:82:8c:6d:8a:39:fd:c7:ba:2f:
                    99:6b:71:fc:2f:d5:73:b2:c2:86:02:4b:e4:db:d6:
                    d8:bd:ab:3a:0f:e0:a5:02:33:dc:75:f9:84:d4:95:
                    99:2b:a3:c3:dc:5d:c7:e0:78:b1:3f:8c:05:c8:c2:
                    33:1d:65:28:14:9e:e5:68:b4:17:8b:ba:5b:21:42:
                    d1:cf:e7:d8:87:19:1f:24:a3:f3:26:bb:06:5a:80:
                    ae:42:4b:3a:ec:6e:72:4a:b1:6f:70:ff:1a:59:a4:
                    13:da:84:2f:a7:8c:a8:ab:74:9c:76:27:21:83:56:
                    52:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:6A:CA:7B:D0:35:23:9F:AE:A2:A0:2F:DC:8C:E0:3A:C0:3C:B3:60
            X509v3 Authority Key Identifier:
                keyid:6A:A0:D5:0C:32:0D:53:3B:78:4D:03:81:8C:75:6A:9E:5E:44:70:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GJJC42ntNAu4RCivvsDU57dL5pGJWbasTRPJSSpEjWgM/1/6AA0D50C320D533B784D03818C756A9E5E447085.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AA0D50C320D533B784D03818C756A9E5E447085.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJJC42ntNAu4RCivvsDU57dL5pGJWbasTRPJSSpEjWgM/1/3136382e39302e31362e302f32322d3234203d3e20323635323731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:d7:ef:ac:7c:06:1d:a2:d9:a5:7f:38:42:54:3c:60:35:a3:
         09:5b:bd:48:35:95:b6:fa:ff:cc:02:26:63:3f:e0:53:ae:f4:
         3c:ed:d8:4c:da:1d:9d:97:79:a6:10:b2:7c:00:e7:a4:d3:31:
         97:bf:4c:dd:46:ad:de:8f:cf:9a:37:ab:62:31:33:0a:fe:71:
         7a:50:ea:e7:9c:c4:d4:ed:3f:5c:04:45:36:dc:e3:c3:1a:c8:
         dc:4e:16:e2:06:2f:a5:17:de:8c:38:01:d1:47:2a:a9:10:31:
         99:71:3c:e1:02:c9:c9:ad:f9:96:42:35:37:3a:59:ee:85:c8:
         d3:8d:53:0d:99:d8:af:48:15:73:ca:7b:a6:d0:55:8f:ac:f6:
         5b:e9:a3:02:9b:00:59:a6:ed:32:5e:94:6b:e1:5e:18:54:2e:
         f3:e8:59:9f:89:0b:4a:37:48:fc:53:4c:d3:88:bc:ab:f7:1c:
         06:05:a6:a8:a4:57:bf:83:b7:1f:53:b5:01:fd:5c:4b:f6:de:
         5d:49:e5:2e:26:18:0e:3b:6f:a4:c7:03:06:94:12:02:66:39:
         09:c1:63:65:7e:9d:6d:cc:b7:3e:c2:f1:73:02:d5:97:66:c2:
         74:29:d9:85:36:84:81:d9:b0:56:d6:15:5a:5c:d5:f2:dd:b2:
         d0:c7:8d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:34:45 2025 by rpki-client