Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9mWQDRXo6cd2x8KseddnkvKkhm3UAKzNzovCYE8Vzh5G/0/3138392e38352e3134342e302f32302d3332203d3e203238333035.roa
File:                     3138392e38352e3134342e302f32302d3332203d3e203238333035.roa (raw, json)
Hash identifier:          UFI2Hj5+gnsvxuvuG9PgdFqnHIyMDPTGWkMjMAkRt5c=
Subject key identifier:   A7:84:7A:45:FE:2D:BE:3B:65:23:75:A6:65:2B:13:8C:B8:85:5C:95
Certificate issuer:       /CN=F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2
Certificate serial:       440D90F4421D89056EF6228B4D7DCB7A3C042573
Authority key identifier: F6:85:5C:37:8F:9C:9C:A3:71:CE:AA:34:0A:9F:CB:F4:8F:C9:DF:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9mWQDRXo6cd2x8KseddnkvKkhm3UAKzNzovCYE8Vzh5G/0/3138392e38352e3134342e302f32302d3332203d3e203238333035.roa
Signing time:             Sat 05 Oct 2024 16:34:00 +0000
ROA not before:           Sat 05 Oct 2024 16:29:00 +0000
ROA not after:            Sat 04 Oct 2025 16:34:00 +0000
asID:                     28305
IP address blocks:        189.85.144.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9mWQDRXo6cd2x8KseddnkvKkhm3UAKzNzovCYE8Vzh5G/0/F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.crl
                          rsync://rpki-repo.registro.br/repo/9mWQDRXo6cd2x8KseddnkvKkhm3UAKzNzovCYE8Vzh5G/0/F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 16:40:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:0d:90:f4:42:1d:89:05:6e:f6:22:8b:4d:7d:cb:7a:3c:04:25:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2
        Validity
            Not Before: Oct  5 16:29:00 2024 GMT
            Not After : Oct  4 16:34:00 2025 GMT
        Subject: CN=A7847A45FE2DBE3B652375A6652B138CB8855C95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:95:ff:e9:bd:4d:54:32:61:07:c1:69:b4:f7:
                    d0:6a:ad:1f:bb:f7:25:a4:d0:8d:02:ce:49:24:9f:
                    a1:c3:66:35:87:95:c9:f9:ea:2a:60:0a:10:69:6b:
                    28:25:5f:41:29:ba:5d:ca:98:cd:05:00:2d:6c:79:
                    01:c9:31:ba:24:72:a0:af:85:24:66:7a:6e:a9:1e:
                    0f:99:79:df:09:c8:31:5c:79:84:ac:9e:ce:5e:ae:
                    0d:96:7c:91:85:aa:4a:31:f6:98:9d:e7:a7:4d:81:
                    0d:48:5e:48:f6:97:c6:cc:39:b8:fd:b2:72:b1:7c:
                    60:ca:f0:2b:89:cc:73:56:94:e4:16:7d:20:00:10:
                    c9:03:75:c3:6d:33:05:fa:26:6d:13:5e:20:30:b8:
                    b3:51:54:77:bf:ff:de:38:d6:b1:ff:ae:bb:63:d1:
                    f8:84:20:80:e4:f2:86:f6:99:08:62:4e:cc:38:6c:
                    6b:97:49:17:a2:0d:f3:4e:f0:8c:b0:c1:63:53:d3:
                    b4:d8:bc:a7:ad:eb:bb:70:48:c8:88:1c:c6:54:85:
                    7a:ae:aa:e2:db:72:a3:51:07:b7:03:17:ac:1d:9a:
                    d9:55:29:3b:c4:dd:87:fd:22:a0:58:2c:c4:2f:d5:
                    be:a7:8a:65:f8:a7:1e:c8:63:1f:96:19:6b:32:d9:
                    87:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:84:7A:45:FE:2D:BE:3B:65:23:75:A6:65:2B:13:8C:B8:85:5C:95
            X509v3 Authority Key Identifier:
                keyid:F6:85:5C:37:8F:9C:9C:A3:71:CE:AA:34:0A:9F:CB:F4:8F:C9:DF:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9mWQDRXo6cd2x8KseddnkvKkhm3UAKzNzovCYE8Vzh5G/0/F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9mWQDRXo6cd2x8KseddnkvKkhm3UAKzNzovCYE8Vzh5G/0/3138392e38352e3134342e302f32302d3332203d3e203238333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.85.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3c:97:d9:21:54:f4:6a:73:8b:6a:b9:60:0f:2f:41:5b:66:fc:
         3e:eb:6b:83:7e:de:ee:3b:b0:9f:2a:03:2a:02:6b:1e:46:55:
         5f:5e:02:fb:cc:fb:9f:a4:c8:e1:fd:26:17:7d:6e:71:ca:d0:
         1e:e1:3e:52:ab:d7:5a:4b:87:87:6b:1d:ea:a4:db:b3:3d:98:
         a6:a3:3b:e2:67:79:38:fd:2e:c1:c2:6e:eb:c9:05:ef:58:04:
         41:06:7b:fb:e7:9a:88:05:59:ad:56:ff:ad:78:b4:6c:ac:38:
         e2:a1:85:7c:33:1f:7f:8c:25:fe:1b:61:2a:8f:2e:bf:a0:a9:
         99:7e:21:c9:b7:85:2d:46:92:0b:5d:e6:dc:86:ec:a4:4d:49:
         a8:7d:93:ff:11:da:48:0c:59:22:44:c3:e0:f1:03:ef:7d:7f:
         7f:ff:55:b0:a6:fc:59:2e:90:c9:fa:c5:d1:1a:49:bf:70:bb:
         16:a5:7c:d0:b2:31:ba:e9:b4:bd:b2:cf:de:8e:21:1b:f2:83:
         a8:ab:67:74:a3:2f:dd:9a:f0:71:cb:b8:84:6e:2e:2c:cd:e6:
         1b:cb:e2:58:94:ec:af:05:20:16:52:4d:17:32:4b:89:e2:b2:
         08:e1:86:d7:a6:5a:d8:bf:e2:de:94:03:bc:65:8d:e7:da:b8:
         e2:63:91:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 17:14:40 2024 by rpki-client on console-fra.rpki-client.org