Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36342e302f32332d3234203d3e203238313834.roa
File:                     3138392e38392e36342e302f32332d3234203d3e203238313834.roa (raw, json)
Hash identifier:          LA1/bzMqp2bnZI9tGD3Wgd+1zQdr4juwYsRLOSf7unA=
Subject key identifier:   D8:15:01:4D:57:E1:D2:10:8D:99:65:BD:EE:9A:04:27:3D:F0:1E:48
Certificate issuer:       /CN=F2C6E0587FD7F70011347A9B93679A111A9A7FB9
Certificate serial:       1ABC3D54A53F6E6B9511866436575A5F93368B8B
Authority key identifier: F2:C6:E0:58:7F:D7:F7:00:11:34:7A:9B:93:67:9A:11:1A:9A:7F:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36342e302f32332d3234203d3e203238313834.roa
Signing time:             Fri 14 Mar 2025 20:13:22 +0000
ROA not before:           Fri 14 Mar 2025 20:08:22 +0000
ROA not after:            Fri 13 Mar 2026 20:13:22 +0000
asID:                     28184
IP address blocks:        189.89.64.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.crl
                          rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 03:56:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:bc:3d:54:a5:3f:6e:6b:95:11:86:64:36:57:5a:5f:93:36:8b:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2C6E0587FD7F70011347A9B93679A111A9A7FB9
        Validity
            Not Before: Mar 14 20:08:22 2025 GMT
            Not After : Mar 13 20:13:22 2026 GMT
        Subject: CN=D815014D57E1D2108D9965BDEE9A04273DF01E48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ca:fd:06:55:e8:0a:e1:09:49:00:e5:e8:26:
                    30:7f:1d:ce:91:71:45:fb:40:bd:93:2d:11:b6:44:
                    e3:96:c4:63:ca:89:ca:30:eb:d0:51:1f:81:e6:18:
                    06:f6:df:fb:c6:5c:13:c2:81:14:e8:55:06:ba:56:
                    68:db:5b:37:74:97:42:36:d7:25:3b:3a:58:4a:73:
                    e6:98:c4:d0:04:7c:af:47:c8:28:bc:5a:42:88:01:
                    b9:86:0a:23:e5:03:ea:65:17:37:d0:d2:d2:dc:5d:
                    50:9d:97:e4:ce:5d:2f:88:2d:71:b0:b6:84:ed:59:
                    e1:06:8f:ba:d0:e5:e2:b4:bf:98:bd:b1:ed:51:e8:
                    46:66:1a:06:fa:ec:fb:6c:de:98:2a:09:22:74:61:
                    b5:60:14:81:f2:35:ce:4c:01:40:6e:71:86:08:c2:
                    36:40:c0:4a:ce:f9:80:4f:68:8d:c4:78:22:5c:1f:
                    7e:04:6b:f6:3b:ae:3c:85:f6:77:e3:1c:2f:ea:5f:
                    3a:ff:a7:5d:52:1b:1b:a5:65:07:14:a7:a5:d8:37:
                    c1:cd:c5:81:b2:7f:10:47:07:cd:f9:40:6f:b4:14:
                    f6:67:50:1c:56:2f:42:22:76:85:6d:81:fb:f8:0f:
                    f4:f2:71:b1:95:2b:35:60:14:11:8f:ce:12:29:3e:
                    5c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:15:01:4D:57:E1:D2:10:8D:99:65:BD:EE:9A:04:27:3D:F0:1E:48
            X509v3 Authority Key Identifier:
                keyid:F2:C6:E0:58:7F:D7:F7:00:11:34:7A:9B:93:67:9A:11:1A:9A:7F:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36342e302f32332d3234203d3e203238313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:88:81:3d:9d:04:3a:20:9e:4a:9a:e5:c2:cd:75:9f:aa:de:
         ab:c7:71:0f:db:91:70:37:e2:e0:4e:70:ab:5d:65:59:d5:8e:
         1b:42:ef:81:e7:1a:f6:51:0d:29:6e:4b:5e:7a:fc:fa:fe:b6:
         26:ed:5b:8f:52:92:bd:c5:8a:4c:fa:62:23:a9:04:b9:6f:e5:
         bf:a9:8a:c6:ab:8c:d8:9d:f0:e1:9d:11:43:3b:e1:47:7a:d1:
         96:c3:da:1e:58:08:47:72:9f:08:39:f4:3c:17:dd:4c:33:74:
         d6:08:55:7f:15:39:45:66:75:ee:54:0f:ed:ed:a2:ee:cf:2c:
         e0:7b:8e:fe:2a:ae:75:02:27:6f:e7:e9:14:1c:dc:b3:b7:f4:
         1b:b0:c0:0c:94:8e:01:50:56:87:b3:3a:6e:53:73:ba:30:6d:
         74:0e:7d:75:ce:e2:57:ce:46:6d:72:dc:32:dd:b2:bd:99:8e:
         6d:8d:7a:c2:2e:da:1b:1e:84:d8:e8:b4:f0:1d:35:b1:91:4c:
         32:e7:36:fe:fb:1a:7d:5e:38:79:0c:af:03:6a:60:5b:46:e0:
         74:2a:6c:e6:77:e6:2b:0a:11:91:35:8f:64:eb:d8:08:1a:1b:
         3a:33:bd:bb:bc:9a:36:06:63:9d:ff:70:58:c4:69:80:fa:ff:
         73:75:95:9a
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUGrw9VKU/bmuVEYZkNldaX5M2i4swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjJDNkUwNTg3RkQ3RjcwMDExMzQ3QTlCOTM2NzlBMTEx
QTlBN0ZCOTAeFw0yNTAzMTQyMDA4MjJaFw0yNjAzMTMyMDEzMjJaMDMxMTAvBgNV
BAMTKEQ4MTUwMTRENTdFMUQyMTA4RDk5NjVCREVFOUEwNDI3M0RGMDFFNDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjyv0GVegK4QlJAOXoJjB/Hc6R
cUX7QL2TLRG2ROOWxGPKicow69BRH4HmGAb23/vGXBPCgRToVQa6VmjbWzd0l0I2
1yU7OlhKc+aYxNAEfK9HyCi8WkKIAbmGCiPlA+plFzfQ0tLcXVCdl+TOXS+ILXGw
toTtWeEGj7rQ5eK0v5i9se1R6EZmGgb67Pts3pgqCSJ0YbVgFIHyNc5MAUBucYYI
wjZAwErO+YBPaI3EeCJcH34Ea/Y7rjyF9nfjHC/qXzr/p11SGxulZQcUp6XYN8HN
xYGyfxBHB835QG+0FPZnUBxWL0IidoVtgfv4D/TycbGVKzVgFBGPzhIpPlxxAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU2BUBTVfh0hCNmWW97poEJz3wHkgwHwYDVR0j
BBgwFoAU8sbgWH/X9wARNHqbk2eaERqaf7kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUt1Vmg2MnNlaG5Hcm40ZWd3RlZRUFZWa3RqbW9kdFB3NXFwUEtWa1JL
emUvMC9GMkM2RTA1ODdGRDdGNzAwMTEzNDdBOUI5MzY3OUExMTFBOUE3RkI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YyQzZFMDU4N0ZEN0Y3MDAx
MTM0N0E5QjkzNjc5QTExMUE5QTdGQjkuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FLdVZoNjJzZWhuR3JuNGVnd0ZWUVBWVmt0am1vZHRQdzVxcFBLVmtSS3plLzAv
MzEzODM5MmUzODM5MmUzNjM0MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzODMx
MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAb1ZQDANBgkqhkiG9w0BAQsFAAOCAQEAb4iBPZ0EOiCe
Sprlws11n6req8dxD9uRcDfi4E5wq11lWdWOG0Lvgeca9lENKW5LXnr8+v62Ju1b
j1KSvcWKTPpiI6kEuW/lv6mKxquM2J3w4Z0RQzvhR3rRlsPaHlgIR3KfCDn0PBfd
TDN01ghVfxU5RWZ17lQP7e2i7s8s4HuO/iqudQInb+fpFBzcs7f0G7DADJSOAVBW
h7M6blNzujBtdA59dc7iV85GbXLcMt2yvZmObY16wi7aGx6E2Oi08B01sZFMMuc2
/vsafV44eQyvA2pgW0bgdCps5nfmKwoRkTWPZOvYCBobOjO9u7yaNgZjnf9wWMRp
gPr/c3WVmg==
-----END CERTIFICATE-----
Generated at Fri Apr 18 17:40:30 2025 by rpki-client