Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37372e302f32342d3234203d3e203238313834.roa
File:                     3138392e38392e37372e302f32342d3234203d3e203238313834.roa (raw, json)
Hash identifier:          SFS4vSIyNFOJexpIq6bOj4QbZzLIQbhGz1PMQ0LKMBU=
Subject key identifier:   EB:E7:66:12:15:DC:9B:F0:CF:48:19:C3:A5:7F:BC:82:34:A9:D9:64
Certificate issuer:       /CN=F2C6E0587FD7F70011347A9B93679A111A9A7FB9
Certificate serial:       010BE5F038D24930DD02BF6B70A5AD3D7C1AE3DE
Authority key identifier: F2:C6:E0:58:7F:D7:F7:00:11:34:7A:9B:93:67:9A:11:1A:9A:7F:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37372e302f32342d3234203d3e203238313834.roa
Signing time:             Wed 04 Dec 2024 17:35:37 +0000
ROA not before:           Wed 04 Dec 2024 17:30:37 +0000
ROA not after:            Wed 03 Dec 2025 17:35:37 +0000
asID:                     28184
IP address blocks:        189.89.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.crl
                          rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 03:56:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0b:e5:f0:38:d2:49:30:dd:02:bf:6b:70:a5:ad:3d:7c:1a:e3:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2C6E0587FD7F70011347A9B93679A111A9A7FB9
        Validity
            Not Before: Dec  4 17:30:37 2024 GMT
            Not After : Dec  3 17:35:37 2025 GMT
        Subject: CN=EBE7661215DC9BF0CF4819C3A57FBC8234A9D964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:56:3b:86:ed:82:a1:75:3d:35:a2:65:00:2e:
                    11:44:d0:e2:f4:02:a6:25:a5:d0:98:e4:83:b1:c7:
                    7c:e8:f2:e0:b1:b4:9c:2b:99:65:2b:5f:82:52:82:
                    10:33:cc:81:90:66:d5:79:c2:a5:1f:0f:94:b6:38:
                    14:23:aa:c6:b7:a0:f9:ea:97:48:c1:d5:c1:cf:15:
                    fe:81:d4:37:35:25:1d:d9:bc:1c:20:b0:81:db:26:
                    ce:bf:3e:bd:98:85:a4:4d:23:e0:e0:b2:2f:03:f8:
                    ca:27:b1:cf:95:52:65:58:9c:f4:0a:05:95:6e:ba:
                    7e:a6:93:65:db:27:e4:66:8d:cf:23:4a:9f:7a:23:
                    6e:18:76:a4:f5:84:09:ee:25:f1:05:0e:89:ab:6e:
                    04:67:98:c3:4e:27:29:c7:f7:0c:c5:8a:31:4b:c8:
                    d3:fc:d4:70:e9:25:c8:e4:66:73:61:98:1b:f0:4f:
                    23:04:83:a5:99:e0:3a:44:9f:3c:93:1f:ea:e9:92:
                    50:74:4f:cf:15:d1:6b:26:f1:e7:ed:c4:2a:6f:d6:
                    e6:61:8a:5e:64:fb:2c:e5:94:c1:57:f4:2a:b2:f5:
                    5c:8f:fd:4d:bb:c9:0d:49:2e:54:95:e4:e5:e4:22:
                    8a:51:4e:54:81:36:5c:a8:18:40:a6:50:1c:2b:d2:
                    d2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:E7:66:12:15:DC:9B:F0:CF:48:19:C3:A5:7F:BC:82:34:A9:D9:64
            X509v3 Authority Key Identifier:
                keyid:F2:C6:E0:58:7F:D7:F7:00:11:34:7A:9B:93:67:9A:11:1A:9A:7F:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37372e302f32342d3234203d3e203238313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:2d:43:b1:76:df:83:3d:c6:34:f6:ca:43:ec:f5:7e:84:95:
         75:43:22:4b:d6:88:8b:17:1d:f4:ea:38:e6:bc:60:0d:c9:db:
         6e:b6:39:48:51:03:3e:2b:74:7c:fd:88:dc:03:ae:42:20:69:
         91:1f:2a:bb:64:73:a1:c6:c3:c0:0f:ed:7e:3b:65:30:4e:5b:
         f3:55:a9:90:dd:05:2e:ca:9e:33:42:08:eb:89:76:de:45:07:
         3d:d6:d3:e7:fc:98:db:24:72:cb:4c:2f:1f:02:6a:18:d3:48:
         41:0e:83:ed:c3:59:ac:93:3e:34:48:9f:5f:19:14:bb:21:ec:
         0a:ef:63:8e:59:2b:e2:b6:94:1f:cd:6e:94:77:8a:2b:73:7a:
         a6:1b:ce:6a:8d:73:0b:66:87:ac:3d:ff:13:c7:24:4d:06:43:
         90:4c:c0:ab:ab:53:c7:f0:3c:9f:9f:d9:74:0b:c8:ae:d6:d2:
         24:50:47:d1:ef:b7:49:7f:75:c0:3c:ee:41:82:24:c0:33:84:
         c4:b2:da:80:11:45:b2:ab:3e:f8:d2:3d:1d:c6:2a:55:15:1e:
         ab:90:b8:51:26:be:93:48:92:8c:a9:23:e7:ed:20:6c:3b:17:
         ba:c3:70:0a:e5:c0:7c:b0:2f:9b:78:1c:e0:2c:57:63:2a:ee:
         0d:3b:46:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:38:50 2025 by rpki-client