Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/3136382e39302e3230382e302f32322d3234203d3e20323635323832.roa
File:                     3136382e39302e3230382e302f32322d3234203d3e20323635323832.roa (raw, json)
Hash identifier:          PBAVWDEZ/8URUjnI7xWp37tBWzT+HtUN4BzJA9/c93Q=
Subject key identifier:   28:03:8F:07:8C:4B:00:50:E5:DF:07:4F:10:E7:73:A0:C8:B1:0B:FE
Certificate issuer:       /CN=9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC
Certificate serial:       522976CF11BEE24BBDFB9BD18C92676B468E2354
Authority key identifier: 9C:B6:D5:EC:53:00:D1:A3:6F:F8:93:C6:0F:39:0D:64:BF:00:F1:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/3136382e39302e3230382e302f32322d3234203d3e20323635323832.roa
Signing time:             Mon 14 Oct 2024 13:21:06 +0000
ROA not before:           Mon 14 Oct 2024 13:16:06 +0000
ROA not after:            Mon 13 Oct 2025 13:21:06 +0000
asID:                     265282
IP address blocks:        168.90.208.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.crl
                          rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 06:32:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:29:76:cf:11:be:e2:4b:bd:fb:9b:d1:8c:92:67:6b:46:8e:23:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC
        Validity
            Not Before: Oct 14 13:16:06 2024 GMT
            Not After : Oct 13 13:21:06 2025 GMT
        Subject: CN=28038F078C4B0050E5DF074F10E773A0C8B10BFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:09:b9:d8:2f:8a:58:7a:59:58:ce:5d:3b:91:
                    a6:a0:f0:65:c9:e0:fd:66:0a:5b:06:e9:1c:9f:c8:
                    70:1c:b9:bb:a7:66:0c:62:e0:0f:c6:88:09:4e:5c:
                    61:e3:9a:2d:16:46:cf:a1:13:da:b0:cf:8f:5e:77:
                    da:ca:4a:b3:76:fb:4a:de:42:0c:2d:30:58:30:ba:
                    83:3a:cd:b2:45:3b:36:e8:e0:c4:86:27:53:3e:b8:
                    d3:a1:33:d2:fc:37:00:ba:00:53:0d:7f:de:40:2a:
                    bd:80:82:fb:5c:e3:bf:b5:0c:65:67:03:03:9d:30:
                    ac:4f:57:a3:e6:bb:2f:1c:e2:70:23:b9:d8:80:52:
                    2a:0f:a6:45:b5:12:31:50:08:50:17:91:7f:73:47:
                    80:b2:79:6e:1d:69:81:04:66:54:fa:4f:5a:be:35:
                    f3:21:76:55:fc:dc:c5:cc:5d:2d:84:a2:a9:ca:fe:
                    d0:04:c3:7a:18:1c:88:94:1e:2a:4d:c8:6b:8c:3b:
                    96:86:ec:fc:fd:13:64:de:52:69:43:7a:8d:20:80:
                    e7:68:4e:64:4c:78:65:06:0e:6c:93:04:d7:9b:5c:
                    90:78:52:df:57:30:f5:8e:1b:27:f4:9e:85:e2:26:
                    fc:d9:84:c9:5a:d9:8b:05:77:67:58:97:2d:44:ed:
                    5b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:03:8F:07:8C:4B:00:50:E5:DF:07:4F:10:E7:73:A0:C8:B1:0B:FE
            X509v3 Authority Key Identifier:
                keyid:9C:B6:D5:EC:53:00:D1:A3:6F:F8:93:C6:0F:39:0D:64:BF:00:F1:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/3136382e39302e3230382e302f32322d3234203d3e20323635323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:08:7a:43:cd:c5:e5:a1:65:3d:1a:13:53:7c:bd:b8:f9:ca:
         a5:01:47:5f:23:9b:02:81:62:13:50:66:02:75:bd:f5:fc:a3:
         de:4e:fd:44:f1:ce:13:c2:7a:f3:73:02:54:17:cd:40:5c:c0:
         9a:7a:87:ef:6e:0c:97:85:03:e3:d2:84:3f:a8:65:7f:34:b9:
         d4:b8:cd:e9:76:71:a6:6d:22:56:eb:d9:ce:22:64:7e:54:dd:
         e1:a7:9f:e4:e0:b1:96:61:ab:0e:ea:32:bd:f1:79:9c:7a:ac:
         e5:d5:60:71:ca:97:e6:c5:7f:e3:e0:e8:e0:35:ac:1b:fa:3c:
         ad:1a:44:5c:e5:b5:ea:5b:68:c1:26:ad:b5:92:13:42:c6:65:
         e9:26:a0:fa:83:05:a1:9f:7a:e8:bb:e3:d3:26:5e:cb:62:17:
         c8:21:5f:4e:db:a8:f0:60:cb:01:17:e3:b9:0f:01:aa:a9:e4:
         02:45:46:65:37:18:3f:c4:7a:12:4f:4a:f3:59:b9:79:be:95:
         87:37:ba:64:96:4a:3c:41:44:c3:b4:0b:75:ee:96:e9:cc:d3:
         36:79:fa:e5:14:ed:51:4e:87:21:33:9c:e4:0d:dd:1c:83:1a:
         15:53:2c:55:8c:f0:3b:2a:bb:7f:87:69:ea:33:b6:6c:ae:75:
         a5:25:41:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 06:32:16 2024 by rpki-client on console-fra.rpki-client.org