Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37362e302f32332d3233203d3e203238313834.roa
File:                     3138392e38392e37362e302f32332d3233203d3e203238313834.roa (raw, json)
Hash identifier:          5H9xNeWGzAiW3bvUKzNxmjKUMrIypXTgfL4KMyM5ejc=
Subject key identifier:   50:CD:7A:EB:17:78:49:3F:3B:7C:DD:B5:B6:A3:B5:F2:FE:A7:34:DD
Certificate issuer:       /CN=F2C6E0587FD7F70011347A9B93679A111A9A7FB9
Certificate serial:       7A87293C28B8AE8204A521BACFAE8FEBBBF45273
Authority key identifier: F2:C6:E0:58:7F:D7:F7:00:11:34:7A:9B:93:67:9A:11:1A:9A:7F:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37362e302f32332d3233203d3e203238313834.roa
Signing time:             Mon 17 Mar 2025 14:16:03 +0000
ROA not before:           Mon 17 Mar 2025 14:11:03 +0000
ROA not after:            Mon 16 Mar 2026 14:16:03 +0000
asID:                     28184
IP address blocks:        189.89.76.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.crl
                          rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 03:56:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:87:29:3c:28:b8:ae:82:04:a5:21:ba:cf:ae:8f:eb:bb:f4:52:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2C6E0587FD7F70011347A9B93679A111A9A7FB9
        Validity
            Not Before: Mar 17 14:11:03 2025 GMT
            Not After : Mar 16 14:16:03 2026 GMT
        Subject: CN=50CD7AEB1778493F3B7CDDB5B6A3B5F2FEA734DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a0:9f:1a:f2:67:9a:30:bb:ff:f0:26:0e:4e:
                    0b:89:df:c6:88:15:73:b7:96:6a:ee:95:6e:14:7b:
                    76:d2:69:92:2f:db:cf:e2:59:68:d0:2b:25:39:fa:
                    c7:d2:88:1e:e3:1c:5e:3f:17:1c:6d:9c:af:f0:92:
                    ec:b9:f4:9c:fd:59:a1:fb:c8:36:cb:37:01:c0:42:
                    2e:10:0a:48:74:89:16:43:6b:80:f3:e5:7f:82:24:
                    e5:c5:e2:e3:28:c5:71:0f:44:da:61:c2:f3:71:a3:
                    2e:4d:05:ce:05:85:ff:98:3f:a5:66:b9:0f:17:d6:
                    4e:a9:01:9d:2b:d4:64:66:b1:1d:36:0c:f0:29:af:
                    5c:fc:7f:4c:28:f4:62:b7:29:3d:b6:bc:df:6b:d9:
                    78:f9:32:d8:29:e9:24:32:fc:c9:91:fd:5a:75:73:
                    99:c3:81:1e:a1:a4:e4:ee:b1:c8:ae:02:05:30:26:
                    bc:c7:98:58:27:0a:0d:55:df:c8:e1:a4:cd:bc:ea:
                    45:51:c6:83:d3:48:2a:e4:78:6d:a2:d7:03:11:18:
                    9e:d7:da:3e:fc:e4:76:fc:ce:d7:78:a8:db:54:a3:
                    a6:8b:74:ba:cc:f4:f8:ff:0f:7a:f9:b5:f1:99:16:
                    44:6c:47:c6:88:9d:30:9b:36:18:b8:be:8a:66:9e:
                    be:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:CD:7A:EB:17:78:49:3F:3B:7C:DD:B5:B6:A3:B5:F2:FE:A7:34:DD
            X509v3 Authority Key Identifier:
                keyid:F2:C6:E0:58:7F:D7:F7:00:11:34:7A:9B:93:67:9A:11:1A:9A:7F:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37362e302f32332d3233203d3e203238313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:41:5f:c1:44:b3:57:d3:15:9f:b5:51:62:22:49:99:41:68:
         8a:ef:ed:05:18:3f:35:36:13:38:a4:44:d9:89:95:a4:8e:ec:
         df:00:dd:5b:0c:12:61:34:0e:0b:69:ec:a4:40:60:8f:1a:0b:
         e1:bc:b9:47:6a:f4:35:a9:54:dd:07:0c:25:8e:19:41:f1:f4:
         f1:45:24:43:19:48:60:0e:4a:ff:0c:6e:5e:e9:4b:bb:d5:5e:
         d6:31:5a:00:c0:4d:7d:6d:f6:8d:9e:a1:14:b3:28:a7:c7:a8:
         fc:05:45:0b:25:12:92:c6:62:e1:a0:e6:54:14:a7:e5:e5:6e:
         80:86:78:51:90:ca:61:34:bf:60:f8:8f:96:1b:51:b2:92:72:
         69:d3:e1:68:5d:92:d9:1b:b7:bd:08:df:b5:9a:58:ba:4d:6c:
         6e:60:52:18:9c:7b:d1:47:7c:f1:e3:b4:ed:3a:fd:8d:3f:85:
         e9:63:56:43:b3:d3:49:da:cf:e2:fd:df:9d:fa:2a:38:e7:b3:
         34:b8:19:ea:2e:b5:68:b6:ca:9e:1e:e7:19:ee:09:9d:63:66:
         e6:9e:0c:f1:37:0a:74:8b:52:5e:b1:ff:25:de:dd:d0:b3:48:
         ed:9d:e6:ce:f0:e7:38:73:14:da:2d:c6:e8:53:3a:d6:76:74:
         74:1c:68:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:33:57 2025 by rpki-client