Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/0/3136382e39302e33342e302f32332d3233203d3e20323635323633.roa
File:                     3136382e39302e33342e302f32332d3233203d3e20323635323633.roa (raw, json)
Hash identifier:          NyW0j5bFxkCC5+rbN0ksFNuy+DNloFRbvoa+4Ki8Sq0=
Subject key identifier:   42:C4:9D:DA:67:55:F3:FA:F9:B5:AD:88:6B:31:81:98:0E:6A:D1:EC
Certificate issuer:       /CN=C6F963BAA26ECFF8F75CC00D1BD99E961D6314FA
Certificate serial:       05B26DDB416DA99D8D6FEBE945896A3D3B712AF5
Authority key identifier: C6:F9:63:BA:A2:6E:CF:F8:F7:5C:C0:0D:1B:D9:9E:96:1D:63:14:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6F963BAA26ECFF8F75CC00D1BD99E961D6314FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/0/3136382e39302e33342e302f32332d3233203d3e20323635323633.roa
Signing time:             Sat 23 Nov 2024 14:57:32 +0000
ROA not before:           Sat 23 Nov 2024 14:52:32 +0000
ROA not after:            Sat 22 Nov 2025 14:57:32 +0000
asID:                     265263
IP address blocks:        168.90.34.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/0/C6F963BAA26ECFF8F75CC00D1BD99E961D6314FA.crl
                          rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/0/C6F963BAA26ECFF8F75CC00D1BD99E961D6314FA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6F963BAA26ECFF8F75CC00D1BD99E961D6314FA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:b2:6d:db:41:6d:a9:9d:8d:6f:eb:e9:45:89:6a:3d:3b:71:2a:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6F963BAA26ECFF8F75CC00D1BD99E961D6314FA
        Validity
            Not Before: Nov 23 14:52:32 2024 GMT
            Not After : Nov 22 14:57:32 2025 GMT
        Subject: CN=42C49DDA6755F3FAF9B5AD886B3181980E6AD1EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1f:d5:2e:bb:69:45:5d:a8:38:3f:6c:3d:17:
                    25:a8:44:46:8d:9d:67:f2:bb:f9:c2:f1:96:59:ca:
                    9d:b6:29:1e:6b:5e:ce:3c:da:f9:ca:43:3a:4e:4d:
                    a2:37:82:a1:c2:82:5c:e5:e0:e2:57:1d:8a:c8:ef:
                    65:fa:b5:c0:4e:ee:e3:6e:24:3d:33:ed:c3:0d:a7:
                    ff:59:11:86:3b:ae:a9:13:51:15:88:66:c6:f2:0d:
                    2e:df:66:6d:94:c4:26:78:cd:f3:18:a3:98:d6:49:
                    3c:76:3a:a4:a8:a6:e8:87:a5:c4:a1:0c:a9:80:20:
                    be:e8:3a:63:22:d5:4e:19:1b:65:3a:31:65:e9:47:
                    6c:be:6c:39:a6:b6:91:3d:8b:6c:cf:85:07:e7:d0:
                    69:53:95:9a:c7:b0:13:88:2c:aa:a1:0b:56:18:05:
                    4e:25:fb:92:42:c5:3d:67:30:f8:5a:47:9e:da:05:
                    3c:7c:67:b6:b8:ad:d9:74:55:8c:38:6d:c0:49:6a:
                    f3:7a:f0:e2:cd:10:e7:01:a1:dd:45:30:1a:e6:d3:
                    f4:4c:fe:ad:03:1f:c4:64:b1:e1:fd:4e:e3:6c:4e:
                    cf:e9:e4:b0:44:2f:3c:98:86:a4:38:8c:f2:95:ab:
                    64:d9:e3:3d:3e:d0:a0:f7:67:c6:22:84:aa:7b:93:
                    b1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:C4:9D:DA:67:55:F3:FA:F9:B5:AD:88:6B:31:81:98:0E:6A:D1:EC
            X509v3 Authority Key Identifier:
                keyid:C6:F9:63:BA:A2:6E:CF:F8:F7:5C:C0:0D:1B:D9:9E:96:1D:63:14:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/0/C6F963BAA26ECFF8F75CC00D1BD99E961D6314FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6F963BAA26ECFF8F75CC00D1BD99E961D6314FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/0/3136382e39302e33342e302f32332d3233203d3e20323635323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:b7:73:d3:af:3d:3b:d0:75:59:4d:6a:51:23:61:fa:ae:8e:
         6c:e3:fb:12:9c:97:11:6a:ba:1d:66:4f:ea:02:bd:ef:9e:93:
         7c:51:27:f0:2b:1d:92:68:2c:14:58:a1:a5:84:ad:ed:64:78:
         04:24:b9:3e:0e:97:75:37:16:0f:55:c8:29:5f:39:04:76:cd:
         4c:93:a1:de:00:c1:af:b0:b8:9e:9a:e5:29:ef:19:b2:4c:7b:
         64:df:e1:25:a3:4a:d4:b8:e6:ac:50:f9:91:a5:c7:a8:c0:50:
         99:45:95:e0:56:5a:39:0f:ae:40:47:cd:47:37:97:fb:23:54:
         cd:c5:7b:48:71:ef:84:d2:3c:f9:d8:a7:dd:c7:dc:9b:ca:44:
         3c:43:8d:15:da:1c:c2:ba:ed:7a:ea:79:f6:d3:30:4a:f9:7c:
         a6:06:f6:d4:4c:e5:2e:3c:73:d3:a3:4e:24:8e:db:0f:ea:7c:
         46:51:af:43:a2:b3:b9:c2:85:37:0e:49:4e:e2:86:22:74:14:
         c8:ab:0a:cc:6b:fd:47:da:ae:1d:d4:11:6a:13:88:42:df:16:
         6d:23:bd:9c:91:fa:77:a1:f4:1e:7f:f3:87:48:f5:fc:1b:85:
         b0:85:c3:fe:b9:35:ab:43:ec:62:39:78:b8:d6:18:eb:9e:c0:
         0a:a6:0a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:53:21 2024 by rpki-client on console-ams.rpki-client.org