Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8bbLLJG6U9eWtuny3Lry2aErc3dCgheBEcgB95eGYHhJ/0/3138392e38342e3130342e302f32342d3234203d3e20323730393034.roa
File:                     3138392e38342e3130342e302f32342d3234203d3e20323730393034.roa (raw, json)
Hash identifier:          0/ZXpSYntdZK63DuaG8qpdm4YAUElKWKQqLTpzmeMjQ=
Subject key identifier:   B1:BC:67:18:96:60:EB:08:17:45:E3:56:6A:9C:55:CF:C7:2A:D9:B6
Certificate issuer:       /CN=190A6797EAE214D286B07B3B50908CBAA0C857F9
Certificate serial:       6FE99D011720CAE623548F1658E61014FD9C6CA6
Authority key identifier: 19:0A:67:97:EA:E2:14:D2:86:B0:7B:3B:50:90:8C:BA:A0:C8:57:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/190A6797EAE214D286B07B3B50908CBAA0C857F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8bbLLJG6U9eWtuny3Lry2aErc3dCgheBEcgB95eGYHhJ/0/3138392e38342e3130342e302f32342d3234203d3e20323730393034.roa
Signing time:             Thu 30 Jan 2025 16:34:11 +0000
ROA not before:           Thu 30 Jan 2025 16:29:11 +0000
ROA not after:            Thu 29 Jan 2026 16:34:11 +0000
asID:                     270904
IP address blocks:        189.84.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8bbLLJG6U9eWtuny3Lry2aErc3dCgheBEcgB95eGYHhJ/0/190A6797EAE214D286B07B3B50908CBAA0C857F9.crl
                          rsync://rpki-repo.registro.br/repo/8bbLLJG6U9eWtuny3Lry2aErc3dCgheBEcgB95eGYHhJ/0/190A6797EAE214D286B07B3B50908CBAA0C857F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/190A6797EAE214D286B07B3B50908CBAA0C857F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 22 Feb 2025 07:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e9:9d:01:17:20:ca:e6:23:54:8f:16:58:e6:10:14:fd:9c:6c:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=190A6797EAE214D286B07B3B50908CBAA0C857F9
        Validity
            Not Before: Jan 30 16:29:11 2025 GMT
            Not After : Jan 29 16:34:11 2026 GMT
        Subject: CN=B1BC67189660EB081745E3566A9C55CFC72AD9B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f3:76:cb:8b:b7:2b:e1:9a:2c:1d:92:04:6e:
                    f2:fe:23:0b:ce:35:6e:3d:ad:74:d3:3a:a6:4b:56:
                    1a:0c:cd:e1:49:d3:9e:23:e1:00:e5:7f:bd:85:5b:
                    73:78:77:17:67:8d:19:40:9a:4b:58:2f:b0:49:3c:
                    9c:3b:7c:7e:0c:f9:96:83:fe:e7:6e:b1:17:9e:0c:
                    2d:9e:b7:4e:7c:a0:7c:e6:eb:5d:95:48:3a:87:3a:
                    86:4c:e7:72:6a:19:c4:17:0f:ba:fc:15:f7:5c:27:
                    0d:a6:5d:79:25:93:37:ff:a7:ba:1c:17:5e:10:e4:
                    99:50:c4:b2:45:d5:34:4e:cf:bb:62:1f:98:6d:1a:
                    20:45:65:51:cd:4b:0d:12:0f:f0:4b:4c:f2:cb:83:
                    7d:7d:c2:37:71:80:63:19:76:93:ae:31:ec:0f:51:
                    aa:89:27:bb:e9:eb:5f:54:7e:37:1b:0a:63:d9:6b:
                    16:49:26:47:be:3f:90:00:bf:22:dd:80:57:98:3a:
                    67:e0:3c:63:7f:19:6c:26:c3:a6:8e:79:52:36:ad:
                    ab:65:45:7c:d8:f5:ee:fb:2b:7f:b5:4f:93:9e:3a:
                    c8:be:15:cd:8c:51:42:e4:71:b9:aa:e7:3f:e4:a5:
                    9c:8e:93:23:fd:b3:c7:2e:30:0c:72:03:27:cd:56:
                    c6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:BC:67:18:96:60:EB:08:17:45:E3:56:6A:9C:55:CF:C7:2A:D9:B6
            X509v3 Authority Key Identifier:
                keyid:19:0A:67:97:EA:E2:14:D2:86:B0:7B:3B:50:90:8C:BA:A0:C8:57:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8bbLLJG6U9eWtuny3Lry2aErc3dCgheBEcgB95eGYHhJ/0/190A6797EAE214D286B07B3B50908CBAA0C857F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/190A6797EAE214D286B07B3B50908CBAA0C857F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8bbLLJG6U9eWtuny3Lry2aErc3dCgheBEcgB95eGYHhJ/0/3138392e38342e3130342e302f32342d3234203d3e20323730393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:42:16:23:ca:95:41:d1:ef:a4:07:c9:39:6d:ab:9a:43:e6:
         da:b6:a9:0d:f1:c5:50:12:bd:9d:61:ef:25:d4:32:01:5e:68:
         90:82:2c:50:cb:3c:79:da:c3:e6:0c:57:57:78:d1:a7:85:a4:
         db:be:f7:35:ef:a8:63:85:de:1e:7b:d4:70:9b:a8:da:63:5c:
         5e:7c:d5:74:7e:50:d3:1b:ee:e3:6c:41:93:ee:f0:d2:92:d6:
         4a:79:0a:f8:cc:07:64:df:fa:09:92:12:3e:2d:f9:71:aa:6b:
         4a:39:0d:7e:59:fd:12:90:ac:b1:a6:d9:32:11:6f:00:f5:e0:
         8a:26:db:93:c8:af:59:fc:2b:5e:0b:09:84:2b:04:99:ca:c1:
         6a:5d:3c:4d:c1:0d:56:38:d9:52:73:66:cf:1b:05:9d:83:f0:
         84:62:87:d9:37:56:84:dd:f1:ff:75:74:11:42:b4:0a:10:9b:
         0a:d6:32:3b:5b:ff:ae:9a:7c:92:33:ff:24:10:5f:ac:bc:7f:
         1a:e0:a9:5a:03:58:54:91:e1:80:1d:37:2e:e7:4a:b9:b7:2e:
         16:69:4c:63:1b:f5:c1:41:e0:5a:ab:2d:e6:cf:a9:ef:75:92:
         25:e8:34:72:da:9f:f2:2a:02:56:ca:b5:f9:69:b4:78:d3:c7:
         85:03:2a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:25:57 2025 by rpki-client