Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Jozdfbq1YVPQif9s1bij6UQuv1F5jFo1Mn2DBeDECYt/2/3138392e35302e36302e302f32322d3234203d3e20323730393633.roa
File:                     3138392e35302e36302e302f32322d3234203d3e20323730393633.roa (raw, json)
Hash identifier:          YBPFuIcIf7A8UMLdsyXCewYxtVOnRWL3BPLyYNEKNkk=
Subject key identifier:   CA:00:AC:F1:D6:FD:DC:40:F8:53:DB:7F:BD:C2:97:BB:C1:CD:1A:43
Certificate issuer:       /CN=B8BF37906635F24C2D247EFC8F28584994678276
Certificate serial:       6C6DDE75BA28847D1FA4BE847013FD2E4481EB85
Authority key identifier: B8:BF:37:90:66:35:F2:4C:2D:24:7E:FC:8F:28:58:49:94:67:82:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF37906635F24C2D247EFC8F28584994678276.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Jozdfbq1YVPQif9s1bij6UQuv1F5jFo1Mn2DBeDECYt/2/3138392e35302e36302e302f32322d3234203d3e20323730393633.roa
Signing time:             Thu 06 Mar 2025 23:20:58 +0000
ROA not before:           Thu 06 Mar 2025 23:15:58 +0000
ROA not after:            Thu 05 Mar 2026 23:20:58 +0000
asID:                     270963
IP address blocks:        189.50.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Jozdfbq1YVPQif9s1bij6UQuv1F5jFo1Mn2DBeDECYt/2/B8BF37906635F24C2D247EFC8F28584994678276.crl
                          rsync://rpki-repo.registro.br/repo/9Jozdfbq1YVPQif9s1bij6UQuv1F5jFo1Mn2DBeDECYt/2/B8BF37906635F24C2D247EFC8F28584994678276.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF37906635F24C2D247EFC8F28584994678276.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 09:46:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:6d:de:75:ba:28:84:7d:1f:a4:be:84:70:13:fd:2e:44:81:eb:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8BF37906635F24C2D247EFC8F28584994678276
        Validity
            Not Before: Mar  6 23:15:58 2025 GMT
            Not After : Mar  5 23:20:58 2026 GMT
        Subject: CN=CA00ACF1D6FDDC40F853DB7FBDC297BBC1CD1A43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7d:2d:e5:b0:39:d0:e5:ca:4c:fa:37:f2:1c:
                    0d:ac:a7:c6:d7:cf:88:c4:e9:f4:90:a2:86:8e:a6:
                    0a:90:6b:92:74:ba:97:95:b0:7f:b9:c9:3c:bf:8d:
                    f6:8b:45:3f:b6:78:07:9b:50:cd:35:68:66:23:c8:
                    bb:83:67:f2:b3:ad:b8:3c:49:41:9e:42:e9:77:42:
                    89:2f:a8:ca:33:27:34:3e:e0:53:7e:b4:6d:6c:a9:
                    8c:67:35:6d:82:e4:83:f5:19:54:6f:0f:55:c6:83:
                    5d:91:da:a7:8b:24:3b:98:8e:de:75:60:3f:a8:bc:
                    d6:cf:b5:e7:9f:02:09:10:5c:80:e4:6f:aa:08:08:
                    85:e9:1e:57:e6:a2:07:27:30:dc:99:84:b7:f7:36:
                    92:c9:01:72:ce:b9:b4:ca:56:7c:e2:be:df:c2:e7:
                    a5:d9:6c:89:0e:39:3c:59:f3:21:5a:82:16:77:ec:
                    2b:21:24:33:1e:1a:ae:91:b7:f9:e0:f7:66:05:90:
                    86:d3:e8:c6:5f:04:aa:e9:8a:62:e8:26:1b:9c:8b:
                    80:d7:15:ed:17:18:b3:91:43:7d:e9:50:39:8a:19:
                    d2:22:9f:d5:9f:f5:8a:56:18:70:3f:8a:25:75:f5:
                    e4:7a:ad:e2:eb:d3:41:95:b9:32:83:ae:24:5e:e2:
                    42:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:00:AC:F1:D6:FD:DC:40:F8:53:DB:7F:BD:C2:97:BB:C1:CD:1A:43
            X509v3 Authority Key Identifier:
                keyid:B8:BF:37:90:66:35:F2:4C:2D:24:7E:FC:8F:28:58:49:94:67:82:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Jozdfbq1YVPQif9s1bij6UQuv1F5jFo1Mn2DBeDECYt/2/B8BF37906635F24C2D247EFC8F28584994678276.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF37906635F24C2D247EFC8F28584994678276.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Jozdfbq1YVPQif9s1bij6UQuv1F5jFo1Mn2DBeDECYt/2/3138392e35302e36302e302f32322d3234203d3e20323730393633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.50.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:a3:8b:26:7e:f2:0e:b6:d7:7a:fb:75:7e:b7:13:f5:21:28:
         0b:69:5d:43:e6:5d:8b:6d:0c:96:e3:f4:dc:f1:4a:6c:66:a8:
         6e:a0:14:14:06:13:e1:f1:68:79:10:d4:71:b7:34:3c:7e:73:
         79:82:cb:f8:fe:ed:d9:24:30:4f:6a:84:6b:bc:d3:20:e3:b7:
         7e:d8:2e:24:07:b4:18:21:46:02:66:16:be:9c:d5:a3:d6:85:
         2b:33:bb:a6:47:e8:89:10:68:49:8d:b4:76:8e:13:fa:ca:f8:
         cc:b4:c0:77:46:c5:ad:5e:d7:cd:a3:ab:fb:4b:82:3b:21:52:
         ab:69:dc:55:e2:24:97:72:6d:e4:ef:9f:d1:0e:c8:fd:41:83:
         2b:86:3c:3a:b1:79:07:c2:9f:c8:b0:77:8d:28:31:70:9c:f3:
         e1:fd:62:4e:c2:32:f6:56:89:dc:65:cd:63:ab:b6:3f:09:1a:
         97:2a:4f:e0:06:8b:66:74:85:9b:64:f5:2f:a2:7e:32:d2:7e:
         fa:01:c2:0c:d6:13:f0:2c:7f:64:5d:65:ef:ae:7f:91:67:b1:
         4d:a9:cd:b2:4a:9a:cb:7f:13:49:59:bf:01:a8:e0:35:77:9f:
         4d:97:18:23:41:c5:f8:34:05:c7:e2:06:96:fe:ab:9d:dd:87:
         de:24:12:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 21:05:57 2025 by rpki-client