Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HYUHERJsUAGNNZza4YuYZ1eCqizGa8dcwtFxPpnzE5sV/1/3139302e38392e3130382e302f32322d3234203d3e20323730333732.roa
File:                     3139302e38392e3130382e302f32322d3234203d3e20323730333732.roa (raw, json)
Hash identifier:          OhJ5UCHQ6Hq09DHYgvA9n2l2mWwds2zSl6STmDQ0GdU=
Subject key identifier:   63:D7:50:8C:C8:81:89:75:C0:E5:0A:CF:54:28:5B:D7:91:DC:86:38
Certificate issuer:       /CN=160E0741C20C69D1A3995FCEC72F6A5F6B7E79EE
Certificate serial:       20224EDC6353B5127ED1C43622AADB5D3B8CFF5C
Authority key identifier: 16:0E:07:41:C2:0C:69:D1:A3:99:5F:CE:C7:2F:6A:5F:6B:7E:79:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/160E0741C20C69D1A3995FCEC72F6A5F6B7E79EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HYUHERJsUAGNNZza4YuYZ1eCqizGa8dcwtFxPpnzE5sV/1/3139302e38392e3130382e302f32322d3234203d3e20323730333732.roa
Signing time:             Wed 03 Apr 2024 18:31:33 +0000
ROA not before:           Wed 03 Apr 2024 18:26:33 +0000
ROA not after:            Wed 02 Apr 2025 18:31:33 +0000
asID:                     270372
IP address blocks:        190.89.108.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HYUHERJsUAGNNZza4YuYZ1eCqizGa8dcwtFxPpnzE5sV/1/160E0741C20C69D1A3995FCEC72F6A5F6B7E79EE.crl
                          rsync://rpki-repo.registro.br/repo/HYUHERJsUAGNNZza4YuYZ1eCqizGa8dcwtFxPpnzE5sV/1/160E0741C20C69D1A3995FCEC72F6A5F6B7E79EE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/160E0741C20C69D1A3995FCEC72F6A5F6B7E79EE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:22:4e:dc:63:53:b5:12:7e:d1:c4:36:22:aa:db:5d:3b:8c:ff:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=160E0741C20C69D1A3995FCEC72F6A5F6B7E79EE
        Validity
            Not Before: Apr  3 18:26:33 2024 GMT
            Not After : Apr  2 18:31:33 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:52:4c:1c:ef:3c:98:a2:dd:0a:01:5d:21:f2:
                    6f:f2:60:56:e0:f7:a8:b5:ab:bc:5e:d4:5a:8d:57:
                    45:3a:a6:dc:55:36:1d:58:e9:04:8c:06:69:5f:78:
                    79:b4:07:10:eb:38:5a:1b:5d:20:60:47:3f:9b:24:
                    69:49:c5:37:9e:c8:0b:14:74:b5:73:f4:8a:25:d4:
                    d6:4a:af:26:9b:57:9a:d9:eb:a6:0d:d5:bf:8c:d0:
                    79:12:c1:04:89:9b:8d:32:da:4b:5d:4f:cf:42:aa:
                    89:9d:8e:a9:f2:de:1c:d2:08:39:e9:55:fc:94:4f:
                    60:8e:d8:5b:27:f8:fd:88:3d:62:52:f2:dc:7c:0e:
                    e6:07:60:21:42:49:2f:05:41:71:56:f9:62:7f:b3:
                    d3:70:5b:cc:49:77:98:5a:7c:e9:e1:41:5f:0c:c9:
                    54:8b:20:f5:78:67:4c:6f:fc:4a:77:bd:5d:3b:b1:
                    b6:52:79:bd:e6:67:d7:e4:54:6b:83:8f:ab:ac:0a:
                    e8:7a:98:5c:36:f0:02:67:3d:0b:95:e0:66:5a:df:
                    02:4d:80:e0:4b:cf:af:fa:11:b1:16:51:1f:d8:2d:
                    e2:79:6f:25:85:a1:96:77:08:8a:2c:66:d8:18:c9:
                    63:9e:45:e3:f3:bb:3d:d8:1d:22:53:d9:96:fe:80:
                    53:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:D7:50:8C:C8:81:89:75:C0:E5:0A:CF:54:28:5B:D7:91:DC:86:38
            X509v3 Authority Key Identifier:
                keyid:16:0E:07:41:C2:0C:69:D1:A3:99:5F:CE:C7:2F:6A:5F:6B:7E:79:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HYUHERJsUAGNNZza4YuYZ1eCqizGa8dcwtFxPpnzE5sV/1/160E0741C20C69D1A3995FCEC72F6A5F6B7E79EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/160E0741C20C69D1A3995FCEC72F6A5F6B7E79EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HYUHERJsUAGNNZza4YuYZ1eCqizGa8dcwtFxPpnzE5sV/1/3139302e38392e3130382e302f32322d3234203d3e20323730333732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:4e:05:6e:44:a5:0d:b4:d1:8b:2e:53:07:76:8c:1b:cd:6b:
         2c:7b:4f:56:7b:81:2e:d6:c6:a8:bc:f3:17:ab:c1:fa:b2:c9:
         77:a1:cb:66:cd:da:47:f5:37:13:c9:62:9b:2e:ed:f6:7f:98:
         0a:84:83:54:7c:7f:38:32:5c:0f:44:7e:07:4b:e4:b7:a2:58:
         36:29:ea:36:2c:fd:76:06:81:38:c2:ff:8b:6c:39:5e:5e:9f:
         1d:74:4e:c7:04:ba:c7:b6:49:04:59:d2:b8:45:48:75:25:b1:
         95:84:97:83:6d:b6:84:6c:8b:cb:ba:4a:df:05:34:ef:85:a7:
         46:f7:6a:2f:63:af:dd:c6:26:7b:4f:17:f4:0c:8f:ef:8f:88:
         35:22:d4:69:9f:a9:be:ee:48:d0:90:1f:ea:76:f4:2f:ee:8b:
         c8:21:70:e9:c7:77:ef:ea:c7:0d:50:0e:cc:36:ad:8b:de:0f:
         c8:da:3f:6e:74:2c:ee:54:2f:f7:62:65:cd:db:9d:09:41:77:
         8d:64:63:49:ef:35:ca:8f:ff:f6:83:ce:be:3c:18:c0:1d:56:
         a0:c1:53:4c:b9:b5:bb:91:2f:32:b7:a8:bd:16:8b:ee:3b:5e:
         53:97:eb:9d:b1:87:42:f9:17:09:55:2c:48:91:83:b6:72:d7:
         dc:ee:1a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:56 2024 by rpki-client on console-ams.rpki-client.org