Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8AHzZY53KQrdqWEWn8dYu1boQnKh9vf9BeR4mnbNE8NS/0/3138392e39302e32382e302f32322d3332203d3e20323632383334.roa
File:                     3138392e39302e32382e302f32322d3332203d3e20323632383334.roa (raw, json)
Hash identifier:          LlxI4jF2X77P41mSy7FWbxx0ZyoAALQMicChbiXHeAk=
Subject key identifier:   AD:6B:CA:42:C9:CF:46:5C:86:DB:B2:55:EE:64:7B:F5:B2:E1:28:E1
Certificate issuer:       /CN=D63959B514900E44DD7BE86715D804ACD701828D
Certificate serial:       38FFF0297BB0D827F23D46F1C5C9AD3AA23C1872
Authority key identifier: D6:39:59:B5:14:90:0E:44:DD:7B:E8:67:15:D8:04:AC:D7:01:82:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D63959B514900E44DD7BE86715D804ACD701828D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8AHzZY53KQrdqWEWn8dYu1boQnKh9vf9BeR4mnbNE8NS/0/3138392e39302e32382e302f32322d3332203d3e20323632383334.roa
Signing time:             Sat 04 May 2024 12:11:05 +0000
ROA not before:           Sat 04 May 2024 12:06:05 +0000
ROA not after:            Sat 03 May 2025 12:11:05 +0000
asID:                     262834
IP address blocks:        189.90.28.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8AHzZY53KQrdqWEWn8dYu1boQnKh9vf9BeR4mnbNE8NS/0/D63959B514900E44DD7BE86715D804ACD701828D.crl
                          rsync://rpki-repo.registro.br/repo/8AHzZY53KQrdqWEWn8dYu1boQnKh9vf9BeR4mnbNE8NS/0/D63959B514900E44DD7BE86715D804ACD701828D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D63959B514900E44DD7BE86715D804ACD701828D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 06:12:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:ff:f0:29:7b:b0:d8:27:f2:3d:46:f1:c5:c9:ad:3a:a2:3c:18:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D63959B514900E44DD7BE86715D804ACD701828D
        Validity
            Not Before: May  4 12:06:05 2024 GMT
            Not After : May  3 12:11:05 2025 GMT
        Subject: CN=AD6BCA42C9CF465C86DBB255EE647BF5B2E128E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:83:eb:50:31:e5:6e:c8:37:43:8d:d0:09:94:
                    cd:9e:2a:c1:c8:10:04:58:0f:70:6e:9b:59:be:ef:
                    77:95:cd:da:a7:62:5f:64:06:41:40:e6:33:65:ab:
                    8e:12:a3:76:cd:23:7f:c2:45:f8:f4:dd:de:9b:0d:
                    9f:e5:8f:41:83:d7:8e:a1:72:0f:4c:2f:60:7d:89:
                    cd:84:6d:dd:f3:f6:24:10:80:8e:93:31:f6:64:c3:
                    70:7c:81:a8:7e:6b:86:ca:12:a3:06:0f:05:55:a0:
                    e1:a4:6a:73:9f:97:7f:a1:df:78:c7:d3:35:ed:50:
                    19:3a:bc:24:dd:91:98:7b:55:1d:79:75:43:6f:ae:
                    09:c0:69:47:30:ed:33:aa:3a:e7:11:26:e0:9d:54:
                    4e:8d:16:71:66:ca:89:23:56:46:55:e0:99:7c:44:
                    a9:fc:47:d4:6b:f6:e8:d2:a6:20:be:f1:59:bc:81:
                    ca:4a:e1:29:5c:3b:63:51:17:c1:40:a5:7d:cd:2d:
                    bf:79:ad:49:f2:dd:68:39:26:2b:c1:8b:61:41:fc:
                    b8:49:a9:b9:b7:96:8c:fb:8e:e6:d3:5c:5d:a0:17:
                    1b:fe:a5:64:f1:52:2d:a7:84:d6:79:a2:64:91:31:
                    d0:f1:40:b7:29:39:f5:2d:92:d9:83:04:3b:df:2d:
                    83:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:6B:CA:42:C9:CF:46:5C:86:DB:B2:55:EE:64:7B:F5:B2:E1:28:E1
            X509v3 Authority Key Identifier:
                keyid:D6:39:59:B5:14:90:0E:44:DD:7B:E8:67:15:D8:04:AC:D7:01:82:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8AHzZY53KQrdqWEWn8dYu1boQnKh9vf9BeR4mnbNE8NS/0/D63959B514900E44DD7BE86715D804ACD701828D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D63959B514900E44DD7BE86715D804ACD701828D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8AHzZY53KQrdqWEWn8dYu1boQnKh9vf9BeR4mnbNE8NS/0/3138392e39302e32382e302f32322d3332203d3e20323632383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:ed:18:df:1b:f2:d1:05:b5:01:f6:54:c4:71:d6:16:0d:08:
         e5:3a:27:41:51:46:49:8d:1c:23:84:43:32:dc:bd:90:2e:8f:
         06:0d:43:84:53:45:de:d2:a7:8e:e8:2e:ed:4d:bf:e1:91:ef:
         f3:dc:43:12:ce:45:16:ac:7b:88:8e:a8:26:13:bc:80:87:e9:
         69:78:d0:5e:fc:fe:bc:1b:8a:e6:a9:9d:39:28:1a:d2:33:90:
         ba:c0:9f:b5:bf:78:23:d4:a3:81:6e:07:0c:dc:24:a7:96:58:
         5a:d4:0a:02:c5:96:bb:84:4f:15:f0:77:94:a0:c0:b9:6d:e7:
         48:bb:b7:19:13:fb:a3:70:4f:7b:bc:9d:b6:9d:ac:11:79:15:
         bf:fd:3c:7c:db:18:74:6b:59:fd:b0:eb:7f:e2:1a:9b:2e:4e:
         6c:b0:fd:cc:03:4e:de:fb:90:4f:05:67:70:e6:7c:04:0e:f0:
         93:73:95:76:e2:cf:02:8c:73:95:01:ed:53:fd:b5:86:40:ae:
         e1:c5:32:97:5d:4d:cb:c1:f6:ae:ca:9d:54:69:86:d5:43:f6:
         19:de:be:39:be:72:14:d2:40:ec:3f:1d:df:4f:7f:6c:b6:d3:
         bc:68:5d:6b:3d:5f:b1:3c:06:37:3b:68:b7:ae:57:ba:40:75:
         88:ce:db:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 06:32:05 2024 by rpki-client on console-fra.rpki-client.org