Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/3138392e38342e3130362e302f32332d3234203d3e20323632373334.roa
File:                     3138392e38342e3130362e302f32332d3234203d3e20323632373334.roa (raw, json)
Hash identifier:          V/QIGeUOv7teeKoC5tfLyjpYqKJoYkgHdCbD5/E5DsU=
Subject key identifier:   E8:62:6B:30:C5:AB:9D:DB:26:E3:59:2A:7A:03:00:83:C2:15:5F:5D
Certificate issuer:       /CN=BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4
Certificate serial:       44FEC0B5F4A918F8274F4FCA67E381A2C709D74E
Authority key identifier: BD:EA:3E:14:C3:2F:29:AC:82:ED:A1:5B:2D:4E:D1:AD:25:04:FF:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/3138392e38342e3130362e302f32332d3234203d3e20323632373334.roa
Signing time:             Tue 16 Apr 2024 17:25:49 +0000
ROA not before:           Tue 16 Apr 2024 17:20:49 +0000
ROA not after:            Tue 15 Apr 2025 17:25:49 +0000
asID:                     262734
IP address blocks:        189.84.106.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.crl
                          rsync://rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:fe:c0:b5:f4:a9:18:f8:27:4f:4f:ca:67:e3:81:a2:c7:09:d7:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4
        Validity
            Not Before: Apr 16 17:20:49 2024 GMT
            Not After : Apr 15 17:25:49 2025 GMT
        Subject: CN=E8626B30C5AB9DDB26E3592A7A030083C2155F5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:b3:a6:00:ec:45:b5:8e:f1:ad:a2:82:cb:f4:
                    0d:ba:72:4d:07:17:4f:ec:53:9a:79:29:9f:fe:42:
                    9c:1d:c7:f2:c3:f5:e4:8d:5b:40:18:41:a7:21:3c:
                    9e:81:db:0e:92:25:72:21:b1:e5:5c:49:3b:9f:7a:
                    53:22:ac:57:e7:7a:1f:29:fb:23:9b:ad:a7:b1:0c:
                    f1:fb:9b:f8:27:6d:07:14:cd:2c:48:10:a4:0e:ca:
                    4a:dc:06:32:8f:f7:05:cc:82:12:4b:3a:a5:96:31:
                    57:ec:61:01:f5:02:b4:43:21:e6:30:e7:45:c7:bc:
                    ef:30:84:00:b3:83:c1:7f:68:81:17:7f:dd:32:51:
                    bf:30:e4:ef:20:d8:08:ae:e6:65:0b:da:39:62:05:
                    74:cb:55:5f:40:0e:48:46:82:d4:c1:c8:1e:d7:c6:
                    c9:e5:56:86:b6:c3:77:1f:8e:b6:de:53:a5:b9:8c:
                    19:fa:e7:24:c8:6c:81:21:3a:0e:94:72:59:a1:78:
                    25:fe:10:88:7b:52:4a:d4:93:c7:ba:e6:d8:05:6f:
                    db:3e:e7:fc:0f:22:a9:39:fd:34:70:06:82:da:05:
                    20:c4:84:ac:11:3f:d4:d5:de:9c:3f:04:de:e7:f1:
                    5d:e0:c3:fe:2b:27:8a:b8:49:46:01:61:34:f3:ea:
                    98:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:62:6B:30:C5:AB:9D:DB:26:E3:59:2A:7A:03:00:83:C2:15:5F:5D
            X509v3 Authority Key Identifier:
                keyid:BD:EA:3E:14:C3:2F:29:AC:82:ED:A1:5B:2D:4E:D1:AD:25:04:FF:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/3138392e38342e3130362e302f32332d3234203d3e20323632373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:60:00:01:32:74:42:e0:65:fa:78:d3:fe:d5:ea:87:32:de:
         89:a0:c8:29:1a:a2:ed:39:70:f8:fe:7f:0a:97:21:fe:b3:ad:
         6f:46:ce:35:10:04:9a:b1:5c:43:fa:0f:f2:09:8c:07:ea:9c:
         6d:25:b7:9d:cf:30:59:b5:00:f6:c3:b4:41:bb:a3:38:60:17:
         c6:50:79:47:19:0b:74:96:3a:ac:77:99:90:20:d6:25:cc:47:
         a1:4e:75:ee:f6:d6:58:31:6e:27:67:c1:4d:5c:f3:53:cf:fb:
         e9:41:e8:59:1d:96:71:04:87:a9:d0:97:13:6a:7f:5f:c7:21:
         b3:47:f5:26:3e:ba:33:03:f4:ed:50:da:ef:43:ad:59:b4:cf:
         59:4b:ce:11:8b:db:45:9e:fd:b1:6c:eb:37:95:ce:5b:e8:8b:
         df:a6:48:07:51:d3:e3:fc:d9:86:51:d5:c0:c6:4b:db:43:d4:
         44:5a:16:66:8f:3a:40:9b:74:69:8c:f2:db:54:4e:a7:92:f5:
         81:2b:d7:9f:e6:43:3d:6b:7d:92:23:80:21:fc:4d:c9:f2:3c:
         79:36:8a:29:ec:1a:26:4a:b4:42:aa:f7:27:e6:a4:42:68:0e:
         44:95:7a:79:c7:db:00:63:78:0f:24:c1:98:95:c4:3b:13:4e:
         12:ea:fe:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:36:32 2024 by rpki-client on console-ams.rpki-client.org