Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GxQwBChNpEHSLCrzqnc6S1iLdB1xPAprmeyRw1YaCGhb/0/3136382e39302e3130342e302f32322d3332203d3e20323635333130.roa
File:                     3136382e39302e3130342e302f32322d3332203d3e20323635333130.roa (raw, json)
Hash identifier:          FgEin2CfwEgyUlqSwau5XfUORCBgB7qCZ/Q6kkZ58s8=
Subject key identifier:   A7:1E:DF:67:8B:36:4D:98:9D:63:67:3F:1C:58:02:9D:BD:4A:F8:94
Certificate issuer:       /CN=ADCD3FBE64DF83F123DCA7C212089403CD855CD0
Certificate serial:       3AB9173DD4C12FF3934DF9D70461A9BAD12C0BA2
Authority key identifier: AD:CD:3F:BE:64:DF:83:F1:23:DC:A7:C2:12:08:94:03:CD:85:5C:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADCD3FBE64DF83F123DCA7C212089403CD855CD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GxQwBChNpEHSLCrzqnc6S1iLdB1xPAprmeyRw1YaCGhb/0/3136382e39302e3130342e302f32322d3332203d3e20323635333130.roa
Signing time:             Tue 19 Nov 2024 13:54:42 +0000
ROA not before:           Tue 19 Nov 2024 13:49:42 +0000
ROA not after:            Tue 18 Nov 2025 13:54:42 +0000
asID:                     265310
IP address blocks:        168.90.104.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GxQwBChNpEHSLCrzqnc6S1iLdB1xPAprmeyRw1YaCGhb/0/ADCD3FBE64DF83F123DCA7C212089403CD855CD0.crl
                          rsync://rpki-repo.registro.br/repo/GxQwBChNpEHSLCrzqnc6S1iLdB1xPAprmeyRw1YaCGhb/0/ADCD3FBE64DF83F123DCA7C212089403CD855CD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADCD3FBE64DF83F123DCA7C212089403CD855CD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:b9:17:3d:d4:c1:2f:f3:93:4d:f9:d7:04:61:a9:ba:d1:2c:0b:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADCD3FBE64DF83F123DCA7C212089403CD855CD0
        Validity
            Not Before: Nov 19 13:49:42 2024 GMT
            Not After : Nov 18 13:54:42 2025 GMT
        Subject: CN=A71EDF678B364D989D63673F1C58029DBD4AF894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:15:a5:0b:ca:fd:b9:a8:5d:6f:6c:9c:7b:81:
                    35:2c:c4:3e:d6:b2:db:28:db:c8:df:c5:b9:75:99:
                    2b:88:6a:71:30:f3:aa:e3:4c:da:4a:cd:9f:5d:a8:
                    7b:6b:c6:99:f5:c3:8f:54:96:ee:f4:0e:96:f7:cf:
                    c6:53:f9:82:4b:ba:09:da:69:0a:cd:8a:be:a0:63:
                    8c:ca:06:41:4d:d0:db:d4:60:f5:c0:d9:83:4c:12:
                    bc:97:a4:51:81:28:23:d0:76:b0:8d:00:84:33:b5:
                    92:61:1b:a7:99:63:26:9e:09:83:b8:45:b0:dd:7a:
                    8a:b8:d2:d2:84:2b:b1:92:17:a5:f8:62:70:bd:72:
                    b6:f5:fc:e8:f0:d0:6e:83:ff:c0:a3:1c:96:bb:4c:
                    8f:cd:ae:d4:3f:e9:11:76:0b:a6:c1:4d:55:c0:13:
                    4e:ef:f0:bd:04:5f:e2:a7:f1:4a:59:36:01:af:e6:
                    4c:b5:31:39:b5:89:b2:72:1a:83:c7:bd:93:10:0b:
                    8b:45:ba:0a:30:40:54:07:06:e0:2c:fd:89:e3:bb:
                    d0:f2:79:64:e5:05:e5:7a:00:9e:33:8e:9b:89:88:
                    fa:52:23:97:83:ba:8f:56:61:96:43:c2:83:93:86:
                    71:88:72:e8:29:ca:16:1f:54:46:57:27:94:28:86:
                    5a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:1E:DF:67:8B:36:4D:98:9D:63:67:3F:1C:58:02:9D:BD:4A:F8:94
            X509v3 Authority Key Identifier:
                keyid:AD:CD:3F:BE:64:DF:83:F1:23:DC:A7:C2:12:08:94:03:CD:85:5C:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GxQwBChNpEHSLCrzqnc6S1iLdB1xPAprmeyRw1YaCGhb/0/ADCD3FBE64DF83F123DCA7C212089403CD855CD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADCD3FBE64DF83F123DCA7C212089403CD855CD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GxQwBChNpEHSLCrzqnc6S1iLdB1xPAprmeyRw1YaCGhb/0/3136382e39302e3130342e302f32322d3332203d3e20323635333130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:0c:cf:a5:d9:af:c9:0d:a1:94:06:92:45:70:4e:a0:1b:53:
         36:40:ea:f6:eb:c5:45:14:1c:26:e7:1c:7d:30:af:d1:91:1e:
         a4:75:7c:79:4f:3d:4c:be:0f:ed:c4:7c:c1:1c:c7:84:5d:d1:
         0d:03:5e:7b:80:d8:37:c7:fb:06:8a:d3:fe:04:c6:d0:8e:8a:
         32:72:af:23:3e:de:5b:d7:8d:2f:30:43:48:97:8e:36:44:84:
         07:42:17:f2:08:f5:f2:5c:6a:31:f5:35:e3:0f:57:2d:ef:dd:
         7f:e4:03:59:08:d7:9f:7e:ce:03:57:87:0f:fb:6f:37:0b:10:
         a4:aa:ca:39:54:19:59:4f:ae:77:57:3a:50:67:a7:8f:2d:00:
         8d:fa:e4:85:0b:aa:05:d3:70:c2:8b:91:14:37:cb:0c:d8:c8:
         bf:2d:a8:bc:62:05:0b:a0:12:df:d0:5d:ba:58:22:2c:06:b6:
         f8:df:2c:ab:1d:13:3d:96:9f:b2:14:e1:48:58:fe:57:23:a9:
         cd:c7:41:de:c2:6c:38:f4:88:f7:14:74:5d:5e:00:bf:bc:82:
         2d:10:8f:34:13:73:f5:f7:97:0c:8c:68:e0:9e:7d:1f:fc:69:
         35:53:13:d1:e0:8f:e3:64:5d:98:97:74:c8:05:32:ee:1d:d0:
         96:25:5e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:22:40 2024 by rpki-client on console-fra.rpki-client.org