Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36372e302f32342d3234203d3e203238313834.roa
File:                     3138392e38392e36372e302f32342d3234203d3e203238313834.roa (raw, json)
Hash identifier:          bfQ/ThCN5X/kFeEnkOX/aNn7pX56G24NxJ44++QAejI=
Subject key identifier:   7E:0A:65:17:6E:99:69:2B:83:8C:09:5A:4F:45:29:B3:F4:14:70:EE
Certificate issuer:       /CN=F2C6E0587FD7F70011347A9B93679A111A9A7FB9
Certificate serial:       3AB8B7679C4433E8F4A6EE4EA17E57B5FD82C44E
Authority key identifier: F2:C6:E0:58:7F:D7:F7:00:11:34:7A:9B:93:67:9A:11:1A:9A:7F:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36372e302f32342d3234203d3e203238313834.roa
Signing time:             Tue 11 Mar 2025 19:05:09 +0000
ROA not before:           Tue 11 Mar 2025 19:00:09 +0000
ROA not after:            Tue 10 Mar 2026 19:05:09 +0000
asID:                     28184
IP address blocks:        189.89.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.crl
                          rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 03:56:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:b8:b7:67:9c:44:33:e8:f4:a6:ee:4e:a1:7e:57:b5:fd:82:c4:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2C6E0587FD7F70011347A9B93679A111A9A7FB9
        Validity
            Not Before: Mar 11 19:00:09 2025 GMT
            Not After : Mar 10 19:05:09 2026 GMT
        Subject: CN=7E0A65176E99692B838C095A4F4529B3F41470EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:2d:a4:65:78:af:6b:29:f4:b5:2d:f6:9a:5c:
                    9c:22:15:df:a6:fd:1d:6e:c0:67:a4:fb:39:59:e6:
                    e0:ca:15:8d:a4:7a:7a:4b:75:cf:18:91:7c:b2:cc:
                    e5:15:9f:c8:51:c0:b7:35:6b:3c:25:11:17:42:de:
                    7d:1a:f4:5b:bc:69:e0:82:fd:4d:77:d4:b6:a8:60:
                    f6:70:9a:80:ea:30:37:f1:ec:cd:f5:d6:4d:67:04:
                    5c:30:00:58:f8:07:5a:e6:58:88:3e:95:7f:dd:e3:
                    0e:e2:06:11:0b:1b:f0:20:2e:93:7a:d1:a0:82:11:
                    c2:cf:b0:d2:13:03:2f:b6:35:1a:74:77:6b:9f:fc:
                    19:3a:17:fb:e5:a9:26:7d:d3:65:6b:28:48:c5:43:
                    92:c2:fa:0a:ea:f1:65:59:8f:ac:8f:43:c0:f0:f3:
                    ec:e0:69:49:8b:34:04:4d:cd:09:ec:ef:8e:ac:e1:
                    47:b0:ce:3d:a5:12:98:24:af:59:42:94:ed:6c:66:
                    68:70:31:e5:91:87:9c:9f:75:84:b1:67:2c:b4:23:
                    59:63:ac:c2:7c:4d:09:c0:a9:7a:5d:e4:01:62:6e:
                    74:b7:34:96:cd:e8:f8:c8:fd:d9:fc:3c:b8:c5:b6:
                    c9:dc:e0:d9:39:dd:59:68:3f:9a:9d:99:d5:55:58:
                    9b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:0A:65:17:6E:99:69:2B:83:8C:09:5A:4F:45:29:B3:F4:14:70:EE
            X509v3 Authority Key Identifier:
                keyid:F2:C6:E0:58:7F:D7:F7:00:11:34:7A:9B:93:67:9A:11:1A:9A:7F:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36372e302f32342d3234203d3e203238313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:f1:4b:b6:a4:c5:9c:1f:16:8e:a8:48:a4:88:05:b4:2c:cd:
         57:d0:3a:13:b4:82:df:ca:cc:3f:9b:ae:68:cb:94:ee:12:bd:
         65:bd:2f:b0:7c:16:9a:ff:d1:40:77:4e:d0:63:4c:14:49:51:
         cc:f2:7c:55:98:90:99:e3:51:f6:28:b0:89:1b:14:9e:ea:4b:
         bd:ee:8a:5f:97:58:fd:50:06:d4:ac:0f:dc:71:cd:ae:4c:57:
         3e:14:5b:f0:41:bf:19:53:41:6e:4d:d5:11:bf:c9:05:cf:a7:
         4b:0d:b6:51:02:51:79:b9:cb:ee:6b:a4:6f:be:26:57:8e:70:
         3b:ff:f8:6f:47:3e:d4:70:64:23:20:be:59:d6:fd:60:17:49:
         03:ed:ba:79:5a:68:3f:63:4e:0b:e0:c2:da:a2:0f:2a:5a:3c:
         31:3f:60:1a:4e:91:4c:3e:b6:e4:7f:71:29:74:5a:80:9b:e9:
         59:39:8b:4a:fb:88:df:01:31:4d:ec:ec:0c:eb:31:ec:e0:42:
         26:9f:bc:3d:71:f1:58:0b:0a:16:ce:cc:e6:7f:f5:85:54:3d:
         e1:79:fd:1e:63:e9:21:35:03:d7:dd:e7:4a:04:1c:8d:8a:52:
         52:c8:26:de:f5:97:b1:5d:fe:69:60:9f:bf:76:43:df:a0:ce:
         bf:f8:40:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 17:42:54 2025 by rpki-client