Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138392e38342e36342e302f32302d3332203d3e20323632373733.roa
File:                     3138392e38342e36342e302f32302d3332203d3e20323632373733.roa (raw, json)
Hash identifier:          u4WMwu/WaLTLAyrwJsRsel+18892LIQjWY9zflVNgpM=
Subject key identifier:   E5:5A:7E:78:4F:CE:C7:D4:17:F7:00:EA:35:C4:BC:48:71:33:C7:CA
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       3339D121144514A43636EFC18FCBA8782EE3EC5C
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138392e38342e36342e302f32302d3332203d3e20323632373733.roa
Signing time:             Mon 07 Jul 2025 20:57:51 +0000
ROA not before:           Mon 07 Jul 2025 20:52:51 +0000
ROA not after:            Mon 06 Jul 2026 20:57:51 +0000
asID:                     262773
IP address blocks:        189.84.64.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 05:29:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:39:d1:21:14:45:14:a4:36:36:ef:c1:8f:cb:a8:78:2e:e3:ec:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Jul  7 20:52:51 2025 GMT
            Not After : Jul  6 20:57:51 2026 GMT
        Subject: CN=E55A7E784FCEC7D417F700EA35C4BC487133C7CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:27:80:2f:c8:c8:56:a0:94:74:7d:66:e2:13:
                    d9:b7:92:c0:bd:91:e5:bf:7b:4e:9c:9a:fd:2e:a5:
                    74:dc:5e:56:0b:5a:d3:f2:87:29:13:5c:bd:83:c4:
                    d1:7d:94:5a:92:7a:19:76:61:93:3f:3f:b4:86:75:
                    b6:2a:c3:83:0a:0e:19:c9:fb:b5:90:03:54:61:9e:
                    37:da:c8:52:39:b1:df:36:b4:8c:1b:e4:e8:aa:04:
                    4a:14:dd:7c:44:18:c5:7b:63:06:f2:4f:a7:fa:c2:
                    11:03:57:7f:53:af:fe:23:71:99:3b:1e:d2:88:0b:
                    02:d2:96:1d:3d:e7:80:d7:fa:87:05:9e:b0:87:4e:
                    63:5d:4a:14:59:56:7e:9c:7a:51:3c:08:e3:f0:5c:
                    1f:80:e0:a6:b6:b7:a7:13:0a:c3:e5:a8:e2:40:10:
                    60:dd:f2:ef:8e:ec:a2:11:38:c4:db:9a:d2:9b:6b:
                    cd:c4:01:6f:37:02:bf:4c:88:d5:20:3f:2d:6b:65:
                    6f:af:13:59:a1:44:e1:cc:7c:64:9a:64:1a:d3:a3:
                    1a:fe:5c:57:30:33:58:47:cf:45:cd:e1:d6:99:c6:
                    22:21:38:e1:5f:5a:9e:16:84:ee:91:cc:e8:b3:fa:
                    df:9d:87:02:fd:82:48:58:70:78:12:40:24:5d:7b:
                    07:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:5A:7E:78:4F:CE:C7:D4:17:F7:00:EA:35:C4:BC:48:71:33:C7:CA
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138392e38342e36342e302f32302d3332203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c6:bf:2a:0e:ff:db:d5:21:3e:5d:67:ca:fc:25:c5:24:6f:c2:
         18:f0:ae:71:2c:17:cc:2e:d1:96:55:96:19:84:ad:fe:ca:62:
         6e:b0:18:26:c2:5e:6b:d6:bb:d0:1a:34:37:c5:9b:59:2e:67:
         61:2a:94:ee:11:ae:26:1f:91:c6:01:d3:75:01:4b:f0:de:4f:
         b4:47:8d:d7:c2:d7:40:da:5b:a2:65:86:94:5c:6d:ce:1e:84:
         ff:d5:0e:e6:8a:38:d0:fe:bf:4a:f9:13:82:51:e9:a2:80:92:
         58:06:48:af:60:2b:5c:d3:ce:c3:c3:67:b1:02:fe:75:2c:dd:
         13:82:77:e8:ac:91:a3:c0:68:96:ce:1f:a5:3d:42:35:3e:3d:
         54:1b:9d:2e:a0:f6:88:fc:fe:8a:2c:bd:bf:8d:d2:92:37:78:
         ec:5a:62:f0:d0:c6:05:af:2c:44:b0:33:27:b2:01:05:1f:0a:
         bb:e4:c8:3f:af:d7:a8:2f:f8:c5:49:af:8a:b0:6d:e1:f4:6c:
         af:ef:fc:ad:4f:ca:55:6c:5d:57:23:8d:de:11:76:e4:7a:57:
         44:51:ec:3f:b7:7a:63:93:ba:90:1b:79:33:e9:d1:65:92:e5:
         75:d4:13:13:d9:a1:33:6b:b8:bd:79:5f:36:be:1c:bf:6e:0c:
         5d:3e:3d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:50:59 2025 by rpki-client