Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36382e302f32322d3232203d3e203238313834.roa
File:                     3138392e38392e36382e302f32322d3232203d3e203238313834.roa (raw, json)
Hash identifier:          P0aIsA//fzxiIPmAeBcn5cdOYgiY5Ah7Y0X4YJjp9S4=
Subject key identifier:   AD:7A:A5:AF:36:B8:75:E0:6D:D2:DA:BE:D6:45:52:64:DB:BB:38:A4
Certificate issuer:       /CN=F2C6E0587FD7F70011347A9B93679A111A9A7FB9
Certificate serial:       4FF1753840E1184022435F415D624E15B429893C
Authority key identifier: F2:C6:E0:58:7F:D7:F7:00:11:34:7A:9B:93:67:9A:11:1A:9A:7F:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36382e302f32322d3232203d3e203238313834.roa
Signing time:             Mon 24 Mar 2025 18:06:32 +0000
ROA not before:           Mon 24 Mar 2025 18:01:32 +0000
ROA not after:            Mon 23 Mar 2026 18:06:32 +0000
asID:                     28184
IP address blocks:        189.89.68.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.crl
                          rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 21:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:f1:75:38:40:e1:18:40:22:43:5f:41:5d:62:4e:15:b4:29:89:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2C6E0587FD7F70011347A9B93679A111A9A7FB9
        Validity
            Not Before: Mar 24 18:01:32 2025 GMT
            Not After : Mar 23 18:06:32 2026 GMT
        Subject: CN=AD7AA5AF36B875E06DD2DABED6455264DBBB38A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:23:a3:9d:84:ef:cf:bd:27:50:9e:e0:af:c3:
                    d7:c5:26:51:d7:80:73:48:14:6d:7c:c9:cb:fe:f6:
                    ed:46:7c:5c:c1:0d:93:a4:0f:14:15:8a:99:0f:5e:
                    ef:7a:3a:b6:59:f2:d9:6e:42:11:c5:c0:06:c3:33:
                    aa:7a:b3:f5:75:1c:09:86:df:25:80:5d:c5:81:d1:
                    09:18:80:1f:24:7a:a2:06:3a:3f:a6:31:23:d3:eb:
                    a1:89:68:57:03:bf:13:06:0c:6b:f6:94:9e:9b:c4:
                    09:39:18:1a:de:06:d2:0a:58:f1:4b:fd:1e:01:31:
                    c9:e2:2d:68:e2:15:fa:74:d0:7a:c6:4b:e1:20:cc:
                    be:21:a9:b8:56:31:23:32:d3:0b:c6:aa:57:29:c6:
                    1b:92:a2:9a:ad:88:64:b8:ef:8a:53:e4:d5:62:9b:
                    5e:ad:60:85:16:ad:ad:5f:ac:6e:99:f3:84:ee:0b:
                    dd:f2:88:35:79:38:ea:77:c8:8a:c8:96:b7:8d:34:
                    0f:28:b0:16:2f:0e:af:3a:79:56:de:4d:ee:eb:22:
                    49:b9:8e:14:84:10:42:fa:93:38:00:b0:f7:72:a2:
                    02:25:b0:e3:28:29:e4:8a:9c:d9:8b:d3:59:c0:a5:
                    eb:de:84:fa:19:cd:23:99:7f:9e:11:7f:0a:44:a0:
                    50:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:7A:A5:AF:36:B8:75:E0:6D:D2:DA:BE:D6:45:52:64:DB:BB:38:A4
            X509v3 Authority Key Identifier:
                keyid:F2:C6:E0:58:7F:D7:F7:00:11:34:7A:9B:93:67:9A:11:1A:9A:7F:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36382e302f32322d3232203d3e203238313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:98:62:f4:28:4d:c3:ed:3d:b1:4e:d0:30:f1:51:7b:c2:95:
         00:15:a5:00:d1:7c:5c:db:9a:6c:97:c9:3e:44:3a:a4:79:7e:
         7b:7c:e7:7a:fe:53:3f:c8:d6:86:9c:71:9c:5e:fe:60:f8:59:
         09:9c:90:78:b1:4c:a1:79:02:f1:43:72:10:ae:56:f3:ce:84:
         4e:87:05:fc:dc:89:ca:4d:68:69:c8:f6:b5:39:cb:0b:77:17:
         a2:74:75:68:59:b8:8b:ff:6e:c4:8c:39:e8:c9:86:8d:ab:3a:
         68:6a:4e:d5:d7:bc:80:90:7b:a7:ba:89:17:ee:e3:ce:f6:5e:
         b3:25:22:24:5a:df:0f:8a:81:b0:b9:8d:97:ef:97:e8:c2:8a:
         63:2d:94:7f:2f:a0:7a:c7:46:9c:98:35:f2:ba:9f:19:39:8c:
         cf:b9:e8:fd:c3:95:b5:4a:82:1c:59:49:41:3a:f6:a6:3a:82:
         ff:aa:f3:87:a9:5a:b1:7e:cd:35:61:9f:e2:47:e1:bb:91:82:
         17:de:68:61:4f:a2:f3:af:8a:72:2c:ac:1a:81:2b:4d:08:5e:
         40:b4:cb:50:2d:ff:68:2e:3a:40:d1:8c:06:2e:91:d9:b8:a9:
         06:54:09:a2:3a:ba:10:ce:d7:af:21:90:c7:d0:dd:3a:24:de:
         1d:c8:90:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:59:00 2025 by rpki-client