Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37302e302f32342d3234203d3e203238313834.roa
File:                     3138392e38392e37302e302f32342d3234203d3e203238313834.roa (raw, json)
Hash identifier:          xF8+xgADVH1uZWE4QAJpzwLR3xZz4pA/MzWd8A5wW7Y=
Subject key identifier:   BA:81:F5:DD:A5:AF:B1:C0:79:94:ED:84:12:0B:49:D3:04:F3:6F:F4
Certificate issuer:       /CN=F2C6E0587FD7F70011347A9B93679A111A9A7FB9
Certificate serial:       6BC76A8D9A8B2796542821EDCFAB6B6157F1224E
Authority key identifier: F2:C6:E0:58:7F:D7:F7:00:11:34:7A:9B:93:67:9A:11:1A:9A:7F:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37302e302f32342d3234203d3e203238313834.roa
Signing time:             Wed 04 Dec 2024 17:35:18 +0000
ROA not before:           Wed 04 Dec 2024 17:30:18 +0000
ROA not after:            Wed 03 Dec 2025 17:35:18 +0000
asID:                     28184
IP address blocks:        189.89.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.crl
                          rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 21:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:c7:6a:8d:9a:8b:27:96:54:28:21:ed:cf:ab:6b:61:57:f1:22:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2C6E0587FD7F70011347A9B93679A111A9A7FB9
        Validity
            Not Before: Dec  4 17:30:18 2024 GMT
            Not After : Dec  3 17:35:18 2025 GMT
        Subject: CN=BA81F5DDA5AFB1C07994ED84120B49D304F36FF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:26:a5:e7:93:be:6a:c1:84:06:9b:66:0e:9e:
                    6a:67:47:3d:d6:d1:18:b1:af:0c:b5:eb:17:57:51:
                    07:48:ff:3c:ea:f2:d9:ed:fc:2b:30:e3:17:ad:bb:
                    46:13:26:f0:8d:06:ff:c1:6d:3b:de:7b:81:37:08:
                    09:94:cd:05:2b:e8:c0:f9:44:59:ed:ec:c6:f0:40:
                    40:e4:04:eb:4f:2e:77:74:9a:f9:af:df:20:d2:1e:
                    ff:71:ae:7c:85:75:bd:55:98:8f:87:9a:16:14:fa:
                    4d:ff:6a:9a:cf:78:55:b3:6e:6d:b4:67:3b:d0:d4:
                    bf:95:06:a8:5e:5d:ee:eb:5e:03:5d:f4:a8:9e:2b:
                    ef:1a:18:ad:c1:48:d6:99:c6:4d:6a:20:15:e3:3c:
                    a1:bc:7c:94:e6:17:25:81:69:ee:ac:cb:b1:bd:b1:
                    70:8a:99:f9:a5:2e:5a:4a:12:74:99:59:16:30:18:
                    32:b8:e6:76:47:16:8c:6a:61:72:f8:58:0b:c3:e5:
                    96:ef:1f:db:c2:a3:ea:70:91:1f:50:89:7f:a6:4e:
                    66:ba:3c:f5:74:7e:14:86:0e:7f:d6:cb:5d:55:75:
                    2b:3a:a4:9b:20:4c:9d:5b:c6:55:77:22:87:b8:cd:
                    3b:88:91:d4:ca:46:62:ef:6d:34:07:97:e8:bd:e6:
                    e2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:81:F5:DD:A5:AF:B1:C0:79:94:ED:84:12:0B:49:D3:04:F3:6F:F4
            X509v3 Authority Key Identifier:
                keyid:F2:C6:E0:58:7F:D7:F7:00:11:34:7A:9B:93:67:9A:11:1A:9A:7F:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37302e302f32342d3234203d3e203238313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:5e:4e:a6:41:76:e5:50:91:67:15:c6:2f:4e:6c:3a:cc:01:
         5f:b3:e0:26:fc:4c:f2:9e:c5:42:1b:b8:0b:c1:cf:a2:3a:bd:
         13:a4:66:6b:e2:41:e2:29:dd:c1:99:dd:6f:4b:fd:e1:16:b3:
         bb:c0:35:ae:ac:8b:99:34:ae:ca:ac:dd:05:87:db:aa:c5:a1:
         c8:ee:2b:70:16:03:87:5d:85:12:52:59:5c:c4:26:19:f6:14:
         37:78:81:9f:b0:43:e4:30:13:b9:9e:e9:c1:83:b5:f8:14:2b:
         8a:4d:42:55:7f:23:11:74:e4:44:79:54:1c:ad:da:9c:d8:57:
         d3:03:72:3b:3f:72:62:75:0a:5d:96:85:14:85:3a:58:e8:3d:
         f8:2b:5e:da:a9:58:7c:1b:fd:60:c7:0d:f5:dd:0b:c0:54:7b:
         dd:76:8a:2b:db:53:c7:43:02:e3:32:dd:97:ef:7d:0a:63:d6:
         0b:96:7d:0b:3e:ad:af:ca:41:6d:ca:dd:1f:42:9e:f9:13:29:
         e1:b2:ac:81:db:76:fb:82:6f:d4:ba:92:ee:ba:bf:66:37:60:
         e8:dd:21:2e:63:0b:f8:b0:0c:30:59:db:ce:89:9f:01:e6:68:
         33:f1:0c:d7:66:f1:c5:4a:e0:16:f3:8f:7a:69:a2:e5:c3:ce:
         64:47:f4:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:00:03 2025 by rpki-client