Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/1/3136382e39302e3138302e302f32322d3234203d3e20323632343931.roa
File:                     3136382e39302e3138302e302f32322d3234203d3e20323632343931.roa (raw, json)
Hash identifier:          L3JFd2+Q/xjwBFzNDVyrQwE3F5HngLcjowelA2Sd/sg=
Subject key identifier:   77:AC:89:D7:A7:59:09:BC:6D:A6:B1:6E:E9:E5:E2:EB:58:82:FE:78
Certificate issuer:       /CN=FA1BB5615A4C0E692CEE2AF571867C35017ED68A
Certificate serial:       5EF01A21C3C48C88DD77DFE174F00ABD1ADD982A
Authority key identifier: FA:1B:B5:61:5A:4C:0E:69:2C:EE:2A:F5:71:86:7C:35:01:7E:D6:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1BB5615A4C0E692CEE2AF571867C35017ED68A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/1/3136382e39302e3138302e302f32322d3234203d3e20323632343931.roa
Signing time:             Thu 04 Apr 2024 14:53:47 +0000
ROA not before:           Thu 04 Apr 2024 14:48:47 +0000
ROA not after:            Thu 03 Apr 2025 14:53:47 +0000
asID:                     262491
IP address blocks:        168.90.180.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/1/FA1BB5615A4C0E692CEE2AF571867C35017ED68A.crl
                          rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/1/FA1BB5615A4C0E692CEE2AF571867C35017ED68A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1BB5615A4C0E692CEE2AF571867C35017ED68A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 14:03:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:f0:1a:21:c3:c4:8c:88:dd:77:df:e1:74:f0:0a:bd:1a:dd:98:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA1BB5615A4C0E692CEE2AF571867C35017ED68A
        Validity
            Not Before: Apr  4 14:48:47 2024 GMT
            Not After : Apr  3 14:53:47 2025 GMT
        Subject: CN=77AC89D7A75909BC6DA6B16EE9E5E2EB5882FE78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ba:97:db:a4:bf:b4:c9:7d:49:d6:bb:60:f9:
                    af:fa:6a:87:6d:a7:35:86:a7:0c:47:9c:57:fd:c3:
                    e5:2b:da:45:05:1f:4c:34:48:0c:95:5b:f8:79:63:
                    1e:93:55:17:03:00:0e:17:f3:59:55:0c:9e:a3:40:
                    1e:ae:31:6a:13:57:f8:a4:e0:ec:8e:cb:aa:1d:fb:
                    9b:2b:97:9f:fc:e0:49:2c:af:5d:1a:e4:65:06:01:
                    dd:7b:d3:04:eb:ad:20:de:5b:c0:5e:3a:3e:98:f4:
                    f3:b5:a5:bf:0b:2a:02:36:8a:f5:a5:65:2c:0a:db:
                    bb:5d:5b:a2:3b:ac:c5:fc:8e:13:22:c8:04:c1:50:
                    dc:81:ef:5d:fe:c8:fe:d7:3d:d1:50:d8:a7:bc:3c:
                    08:10:04:7f:5a:04:00:48:47:1d:9f:2c:99:54:9c:
                    cc:2a:f0:4f:ba:2f:ea:85:68:79:13:fc:44:b0:d2:
                    c7:75:f2:be:68:d6:1f:58:f6:8e:ce:b3:3f:2b:1a:
                    00:3c:4f:93:5b:95:ff:f9:81:b1:b1:de:cb:11:7d:
                    16:5d:a2:da:66:b0:07:23:b9:de:1d:be:b9:31:52:
                    75:ca:2a:bd:3b:3f:e5:62:d2:68:af:ff:f8:b5:37:
                    0e:bc:79:bb:9b:56:22:79:01:6a:81:c8:92:2d:f8:
                    eb:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:AC:89:D7:A7:59:09:BC:6D:A6:B1:6E:E9:E5:E2:EB:58:82:FE:78
            X509v3 Authority Key Identifier:
                keyid:FA:1B:B5:61:5A:4C:0E:69:2C:EE:2A:F5:71:86:7C:35:01:7E:D6:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/1/FA1BB5615A4C0E692CEE2AF571867C35017ED68A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1BB5615A4C0E692CEE2AF571867C35017ED68A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/1/3136382e39302e3138302e302f32322d3234203d3e20323632343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:a7:62:a6:f5:5f:1a:d8:4f:7f:23:06:93:45:cb:e3:4a:c7:
         ac:84:85:f0:0d:b4:b3:82:b5:52:1d:80:c5:af:86:13:dd:2c:
         f2:6e:aa:21:46:4a:a3:11:9e:1e:44:09:ff:fb:83:d9:c4:6c:
         3e:e7:e7:15:65:da:3c:f8:8d:6f:a5:1b:15:2d:e4:37:dd:c7:
         42:0a:ad:ed:55:84:29:ba:2d:ee:27:ac:2e:51:aa:0d:28:11:
         2c:fc:83:ff:67:13:c3:c9:49:ad:8b:0a:70:54:c8:d2:c1:61:
         92:10:eb:8f:8c:e2:91:ce:a6:b2:c0:20:33:9e:44:ad:c8:60:
         58:2c:25:29:ba:aa:a6:3a:c7:29:c4:00:1c:a3:c4:0d:c4:81:
         71:ce:19:8c:1b:86:c5:f5:da:2b:f8:e9:b1:f2:30:1d:99:64:
         39:b9:df:2b:aa:5a:01:48:d7:84:a4:c3:d4:e0:9d:ec:95:70:
         52:45:d8:2d:c9:04:b4:a6:ea:41:d4:9e:73:ec:1e:5b:68:84:
         be:7c:3a:23:c3:d2:19:4a:08:6d:d8:6e:0b:01:2a:43:1f:7b:
         9e:cd:7f:f7:59:af:d7:e2:81:b4:fc:ce:30:de:11:03:74:2c:
         92:f2:4c:5f:20:30:5e:27:a6:dc:79:b1:a9:9e:48:bf:ed:40:
         1a:47:80:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 16:00:01 2024 by rpki-client on console-fra.rpki-client.org