Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3136382e39302e32382e302f32322d3234203d3e20323632343137.roa
File:                     3136382e39302e32382e302f32322d3234203d3e20323632343137.roa (raw, json)
Hash identifier:          AiVOwFSs267ordZnEgFLHNyDDnoTYL95jQ13lTE5Wls=
Subject key identifier:   DA:4D:D9:75:51:43:7F:DE:08:1C:33:E4:94:B4:5D:E0:DD:3F:BF:08
Certificate issuer:       /CN=EB846310FC1F1BA82FBB3923B2F76ED66DA86097
Certificate serial:       3235020530671F34BD6599CE5655D80FB560269C
Authority key identifier: EB:84:63:10:FC:1F:1B:A8:2F:BB:39:23:B2:F7:6E:D6:6D:A8:60:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB846310FC1F1BA82FBB3923B2F76ED66DA86097.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3136382e39302e32382e302f32322d3234203d3e20323632343137.roa
Signing time:             Fri 23 Aug 2024 16:14:13 +0000
ROA not before:           Fri 23 Aug 2024 16:09:13 +0000
ROA not after:            Fri 22 Aug 2025 16:14:13 +0000
asID:                     262417
IP address blocks:        168.90.28.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/EB846310FC1F1BA82FBB3923B2F76ED66DA86097.crl
                          rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/EB846310FC1F1BA82FBB3923B2F76ED66DA86097.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB846310FC1F1BA82FBB3923B2F76ED66DA86097.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:35:02:05:30:67:1f:34:bd:65:99:ce:56:55:d8:0f:b5:60:26:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB846310FC1F1BA82FBB3923B2F76ED66DA86097
        Validity
            Not Before: Aug 23 16:09:13 2024 GMT
            Not After : Aug 22 16:14:13 2025 GMT
        Subject: CN=DA4DD97551437FDE081C33E494B45DE0DD3FBF08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1e:05:b0:45:91:02:d7:9e:8b:0d:90:17:41:
                    a4:04:16:85:72:42:5b:c5:2a:92:0a:f8:e1:11:9c:
                    f3:6d:9a:84:a4:67:6a:2f:87:ac:35:07:c1:fe:71:
                    98:f5:d5:3c:7f:4a:c4:77:9c:44:7b:0b:21:0a:c6:
                    c8:43:b8:97:5a:62:fc:b4:b1:34:fd:5b:32:09:80:
                    12:3c:a3:f7:9a:7d:be:85:68:a3:1c:3d:31:7a:18:
                    8b:33:e8:65:14:a8:0a:29:7e:f7:92:24:04:e8:cf:
                    1b:f2:96:24:44:3d:95:c3:20:ad:2a:0e:50:34:83:
                    6e:24:9f:94:2c:8b:3e:27:b8:75:29:9d:c9:b0:87:
                    93:b7:d7:64:1e:d2:76:24:e6:4b:84:74:97:1a:66:
                    fa:f9:5d:3e:ba:6b:4e:53:88:1b:bd:b2:ad:cb:ee:
                    6a:10:88:02:73:da:be:31:41:a8:b2:22:ba:9e:93:
                    21:c8:83:7e:a0:1a:e1:65:e8:48:c6:c4:01:59:ca:
                    c8:ac:48:dd:d3:89:f5:08:f1:8b:28:79:dc:5d:dd:
                    fd:c4:f7:3e:1f:ac:1f:5c:a1:73:2c:e0:a0:50:91:
                    28:aa:87:62:b6:ef:14:3a:53:bc:ff:20:40:f2:c5:
                    71:a3:07:53:5d:e0:d3:8e:b5:df:c9:2a:8e:b5:bb:
                    9e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:4D:D9:75:51:43:7F:DE:08:1C:33:E4:94:B4:5D:E0:DD:3F:BF:08
            X509v3 Authority Key Identifier:
                keyid:EB:84:63:10:FC:1F:1B:A8:2F:BB:39:23:B2:F7:6E:D6:6D:A8:60:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/EB846310FC1F1BA82FBB3923B2F76ED66DA86097.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB846310FC1F1BA82FBB3923B2F76ED66DA86097.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3136382e39302e32382e302f32322d3234203d3e20323632343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:62:68:11:a9:71:18:d7:eb:5d:ef:1d:15:98:8c:f6:09:f7:
         85:b5:8e:70:fd:5b:9b:b3:12:ac:c0:7d:22:9b:10:c4:72:38:
         eb:d1:67:bf:90:71:96:49:b1:10:8e:b9:d8:3c:80:cb:97:6f:
         31:a5:c0:7b:4f:41:81:93:1f:12:50:21:0e:3f:27:43:85:5b:
         08:7a:0c:c8:c6:87:0c:65:85:e3:3a:5f:59:c3:12:f5:69:90:
         21:04:37:5e:f0:3f:cf:02:32:ac:10:aa:a9:ad:68:7f:23:36:
         e6:9b:26:93:b9:15:99:80:5e:0a:4a:02:ac:89:d2:0b:7b:3c:
         b8:05:0b:ba:5a:88:df:ef:18:a2:eb:55:b2:df:3c:8a:66:59:
         a1:ca:e2:47:0b:af:c1:74:1c:43:04:67:9d:a7:62:ac:e6:1e:
         ac:86:61:45:af:a6:8c:f3:51:0c:6d:c0:46:e5:dd:0a:b0:31:
         1e:d0:6f:e8:f2:dc:27:e9:77:17:a9:ca:08:a4:e4:a4:29:40:
         50:c6:7e:a0:ee:3c:4d:73:25:72:ed:e8:68:db:53:c2:9f:9a:
         f7:b2:22:c7:2d:63:4d:b4:17:89:71:b9:bb:ae:9e:bf:68:96:
         31:46:bc:97:7a:42:ed:db:fe:e2:71:22:6f:d3:63:17:d7:86:
         17:e4:53:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:14 2024 by rpki-client on console-fra.rpki-client.org