Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HS5t3Q1b7PRtSTz9qHJgigwnD5fpKe3K3EBE9sNwop2P/1/3136382e39302e3135322e302f32322d3234203d3e20323731313833.roa
File:                     3136382e39302e3135322e302f32322d3234203d3e20323731313833.roa (raw, json)
Hash identifier:          zLrysnKdfS+B3U2z+PYiHDj0cAnwmkbvby8nZu4qTd8=
Subject key identifier:   6C:E2:02:21:FE:CA:46:FC:0A:A5:CD:C7:00:54:9D:05:33:73:B1:D3
Certificate issuer:       /CN=44D3F1577250CA6E2174DFB39A484561766D6292
Certificate serial:       07C14B101C85C9A8B926C7F45623926CD3A98399
Authority key identifier: 44:D3:F1:57:72:50:CA:6E:21:74:DF:B3:9A:48:45:61:76:6D:62:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D3F1577250CA6E2174DFB39A484561766D6292.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HS5t3Q1b7PRtSTz9qHJgigwnD5fpKe3K3EBE9sNwop2P/1/3136382e39302e3135322e302f32322d3234203d3e20323731313833.roa
Signing time:             Wed 03 Apr 2024 22:32:16 +0000
ROA not before:           Wed 03 Apr 2024 22:27:16 +0000
ROA not after:            Wed 02 Apr 2025 22:32:16 +0000
asID:                     271183
IP address blocks:        168.90.152.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HS5t3Q1b7PRtSTz9qHJgigwnD5fpKe3K3EBE9sNwop2P/1/44D3F1577250CA6E2174DFB39A484561766D6292.crl
                          rsync://rpki-repo.registro.br/repo/HS5t3Q1b7PRtSTz9qHJgigwnD5fpKe3K3EBE9sNwop2P/1/44D3F1577250CA6E2174DFB39A484561766D6292.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D3F1577250CA6E2174DFB39A484561766D6292.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:c1:4b:10:1c:85:c9:a8:b9:26:c7:f4:56:23:92:6c:d3:a9:83:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44D3F1577250CA6E2174DFB39A484561766D6292
        Validity
            Not Before: Apr  3 22:27:16 2024 GMT
            Not After : Apr  2 22:32:16 2025 GMT
        Subject: CN=6CE20221FECA46FC0AA5CDC700549D053373B1D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1d:2f:f2:02:86:df:8a:2c:76:49:54:b7:e5:
                    78:b8:8d:0e:62:3d:1c:32:c2:f4:c4:dc:f4:82:b2:
                    9a:01:bd:e3:b4:98:6b:29:4c:85:05:d6:c1:32:56:
                    6a:ac:22:9a:53:3b:b0:cb:f6:d4:a5:76:1e:22:46:
                    2d:23:6c:8f:9a:8b:96:80:a5:89:5c:c2:45:58:36:
                    c3:94:3f:54:f6:f4:f9:bf:95:e0:16:eb:1e:1a:e0:
                    c8:95:d6:66:81:f7:8a:12:d8:b2:33:18:4f:eb:73:
                    3a:f5:09:2f:fc:de:9f:a9:4d:f3:60:f1:ac:ad:e8:
                    c9:6c:e0:5f:ca:c2:b0:3f:02:9b:b7:4d:d7:3a:ea:
                    4c:fc:a5:8a:26:ef:ce:4b:36:7a:fe:14:4e:38:76:
                    ee:9d:34:32:bf:1e:92:ac:4f:ee:99:20:c8:49:7a:
                    d7:78:20:19:a8:4e:2c:53:39:6a:17:86:89:bf:e2:
                    32:31:52:b9:3c:ae:2e:4d:64:6a:a7:ab:ab:4f:d3:
                    16:f8:ae:aa:b8:81:24:36:03:98:cf:ef:07:47:8a:
                    bf:66:b5:d6:d3:6d:a9:61:13:07:5e:82:35:08:28:
                    4e:8d:cc:67:4f:7c:2a:ad:2a:17:89:59:0a:47:38:
                    cf:75:54:45:60:0c:fe:02:66:60:49:0d:42:59:94:
                    de:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E2:02:21:FE:CA:46:FC:0A:A5:CD:C7:00:54:9D:05:33:73:B1:D3
            X509v3 Authority Key Identifier:
                keyid:44:D3:F1:57:72:50:CA:6E:21:74:DF:B3:9A:48:45:61:76:6D:62:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HS5t3Q1b7PRtSTz9qHJgigwnD5fpKe3K3EBE9sNwop2P/1/44D3F1577250CA6E2174DFB39A484561766D6292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D3F1577250CA6E2174DFB39A484561766D6292.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HS5t3Q1b7PRtSTz9qHJgigwnD5fpKe3K3EBE9sNwop2P/1/3136382e39302e3135322e302f32322d3234203d3e20323731313833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:7d:d2:37:fc:b2:b9:55:36:32:c5:fa:b0:d7:a4:aa:13:44:
         5a:a8:3c:a2:76:28:78:f4:b3:8c:a4:b8:2a:d0:66:78:e7:38:
         cd:f1:9c:e4:a4:1f:08:aa:25:c7:5d:ec:a4:f5:1a:a5:73:de:
         78:eb:07:99:da:89:8f:09:d1:47:65:85:3c:68:23:65:31:fa:
         73:f8:47:32:01:bc:d6:26:2a:af:01:eb:e5:5e:f1:bc:4e:8a:
         ca:cd:08:3c:d7:e8:0f:fe:54:12:36:50:74:9a:fb:be:90:9c:
         d1:18:24:6a:f4:45:d3:6f:57:ab:53:fe:5b:db:a9:37:70:65:
         42:b4:46:a7:ca:b0:63:84:34:cd:ca:08:17:ae:91:5d:47:3a:
         59:61:f4:17:44:da:73:de:7b:68:97:c3:8b:6e:a4:7e:ea:10:
         88:b5:10:84:4c:c7:3b:65:2a:2a:7d:63:be:ae:fd:3b:a6:8e:
         22:df:e0:23:53:0b:4a:22:c8:1f:7f:5c:7a:46:5e:ad:ce:13:
         58:0f:68:36:3f:61:c0:46:1f:5b:49:fb:e4:e1:5e:01:aa:81:
         4b:6b:21:6a:35:46:e9:9c:f2:54:a6:3f:d6:83:d5:bc:bf:e4:
         cc:88:3b:c6:6a:89:9e:41:e7:e8:e8:ed:7c:60:67:b5:2d:20:
         5b:26:44:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:53:19 2024 by rpki-client on console-ams.rpki-client.org