Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36382e302f32332d3233203d3e203238313834.roa
File:                     3138392e38392e36382e302f32332d3233203d3e203238313834.roa (raw, json)
Hash identifier:          /5WzXOaGWY32Z9gNWhDXNmrzCrFNUOppd8HLa7bRcjw=
Subject key identifier:   3F:13:98:B0:9F:FF:F2:C0:7D:47:BF:C0:13:01:29:C6:76:06:27:6F
Certificate issuer:       /CN=F2C6E0587FD7F70011347A9B93679A111A9A7FB9
Certificate serial:       22F7F0309E1B8313DCFF3F010ABF5AB9DE146D6A
Authority key identifier: F2:C6:E0:58:7F:D7:F7:00:11:34:7A:9B:93:67:9A:11:1A:9A:7F:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36382e302f32332d3233203d3e203238313834.roa
Signing time:             Mon 17 Mar 2025 14:15:57 +0000
ROA not before:           Mon 17 Mar 2025 14:10:57 +0000
ROA not after:            Mon 16 Mar 2026 14:15:57 +0000
asID:                     28184
IP address blocks:        189.89.68.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.crl
                          rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 21:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:f7:f0:30:9e:1b:83:13:dc:ff:3f:01:0a:bf:5a:b9:de:14:6d:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2C6E0587FD7F70011347A9B93679A111A9A7FB9
        Validity
            Not Before: Mar 17 14:10:57 2025 GMT
            Not After : Mar 16 14:15:57 2026 GMT
        Subject: CN=3F1398B09FFFF2C07D47BFC0130129C67606276F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b4:43:73:b3:9c:b0:93:d4:35:6b:37:36:13:
                    86:28:ea:2a:14:58:db:5e:0f:53:be:21:73:d8:dc:
                    07:22:5e:ca:b6:ae:ed:0e:06:8b:db:51:b2:1c:ad:
                    26:06:4d:8d:a0:41:f0:04:7d:37:b1:ab:16:7f:a9:
                    94:f4:79:6f:4f:b2:d3:97:53:7a:34:ed:cd:ca:35:
                    4b:5c:a6:10:07:68:5d:33:79:5d:38:a3:1c:d8:f3:
                    b4:db:fc:3c:74:36:9b:83:5e:a2:c4:7a:f8:e1:ef:
                    09:dd:ec:d6:d5:d6:aa:19:6b:b4:dc:35:dc:e0:9a:
                    63:de:40:88:3d:75:08:84:cc:17:7c:a0:0a:c0:1d:
                    e4:be:46:b9:98:aa:f2:ce:97:f9:0d:27:61:67:ca:
                    26:34:93:7d:a8:70:22:29:3a:c9:19:35:d3:96:db:
                    3d:40:10:24:e4:d9:91:cd:79:76:17:2b:87:20:94:
                    5b:59:46:35:48:cb:d5:86:73:e6:a2:d4:5a:ac:44:
                    57:80:01:20:9e:0a:ad:90:22:b3:d9:0d:1a:eb:c8:
                    6a:65:d4:3d:7b:a6:38:bd:09:d0:7c:c2:df:10:20:
                    0f:59:dd:3c:92:50:0a:02:a0:34:d5:78:ac:16:58:
                    3a:5c:1c:88:93:af:82:7b:43:dd:21:d6:26:02:21:
                    cb:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:13:98:B0:9F:FF:F2:C0:7D:47:BF:C0:13:01:29:C6:76:06:27:6F
            X509v3 Authority Key Identifier:
                keyid:F2:C6:E0:58:7F:D7:F7:00:11:34:7A:9B:93:67:9A:11:1A:9A:7F:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36382e302f32332d3233203d3e203238313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:08:d1:36:be:95:59:75:d7:c0:2b:45:d6:c1:bf:9c:5c:0c:
         97:d5:00:6d:15:70:b1:65:69:a4:82:42:df:21:b4:3d:41:ae:
         5b:68:cd:2b:08:a1:7c:f2:aa:a6:82:89:de:ce:6d:b6:d9:5a:
         5d:2c:e2:f4:3d:bb:b4:1d:5d:1d:0e:a4:f2:77:a2:6f:cc:a7:
         79:86:f0:b6:95:0d:a8:c6:14:ea:8b:c0:a8:46:1c:c8:95:a9:
         4f:fa:02:0a:9e:da:50:e4:86:6a:5f:a1:f8:d8:37:d7:59:05:
         b5:f4:b4:6a:c2:00:60:95:7d:bd:27:d5:23:af:18:dc:ff:b8:
         b2:f9:a4:5e:29:d5:0e:9b:c7:73:24:a8:a9:5d:09:cc:a4:fd:
         36:22:17:66:60:b2:8c:f4:14:12:18:d7:34:0f:de:bc:9e:06:
         fb:d4:57:55:18:a1:3a:1d:b0:dd:f6:c8:07:79:55:3e:71:57:
         67:d9:f5:68:d3:15:fa:2d:11:d3:40:f4:d9:08:26:4d:8e:70:
         d8:ad:47:08:20:42:48:c7:f6:73:11:bf:98:45:54:8e:b4:59:
         e0:c1:74:46:12:b5:b9:20:53:10:18:2e:b0:4d:e9:b5:27:c9:
         03:2a:d8:08:59:23:10:05:b1:c1:10:13:18:45:6f:7b:71:2d:
         01:ab:91:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:28:35 2025 by rpki-client