Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/3138392e38392e3234332e302f32342d3330203d3e203238313838.roa
File:                     3138392e38392e3234332e302f32342d3330203d3e203238313838.roa (raw, json)
Hash identifier:          HMZxk8vgq2vfR67iN+JC6meeYcBjrwab99f/dWL1+wQ=
Subject key identifier:   95:D1:EF:1E:F7:ED:DF:85:18:35:E5:95:7C:2E:F0:7F:31:4C:62:B3
Certificate issuer:       /CN=E38AC2CFB299715B3B6D5866C15CF353BE48A770
Certificate serial:       350D92C660D29AF70C94377ECE8C9A19F340C9D6
Authority key identifier: E3:8A:C2:CF:B2:99:71:5B:3B:6D:58:66:C1:5C:F3:53:BE:48:A7:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E38AC2CFB299715B3B6D5866C15CF353BE48A770.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/3138392e38392e3234332e302f32342d3330203d3e203238313838.roa
Signing time:             Wed 05 Feb 2025 22:59:12 +0000
ROA not before:           Wed 05 Feb 2025 22:54:12 +0000
ROA not after:            Wed 04 Feb 2026 22:59:12 +0000
asID:                     28188
IP address blocks:        189.89.243.0/24 maxlen: 30
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/E38AC2CFB299715B3B6D5866C15CF353BE48A770.crl
                          rsync://rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/E38AC2CFB299715B3B6D5866C15CF353BE48A770.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E38AC2CFB299715B3B6D5866C15CF353BE48A770.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 21:07:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:0d:92:c6:60:d2:9a:f7:0c:94:37:7e:ce:8c:9a:19:f3:40:c9:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E38AC2CFB299715B3B6D5866C15CF353BE48A770
        Validity
            Not Before: Feb  5 22:54:12 2025 GMT
            Not After : Feb  4 22:59:12 2026 GMT
        Subject: CN=95D1EF1EF7EDDF851835E5957C2EF07F314C62B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:89:b6:34:d3:ac:fb:4c:1a:84:f9:e1:bd:0b:
                    a5:99:94:a1:fb:ff:14:69:f8:14:ab:ce:69:b3:e1:
                    58:8c:0f:3c:0a:d2:c5:62:22:62:3b:4c:ce:77:67:
                    2e:c2:9b:49:87:d5:ce:69:97:4f:da:5b:07:c4:68:
                    ba:de:0d:8b:19:ef:7c:f7:76:48:15:88:90:98:2d:
                    3c:3e:70:52:9a:48:73:e2:0f:53:98:6a:50:f3:75:
                    e7:27:dc:cd:50:9d:ec:fd:eb:fe:63:0a:1e:ea:2e:
                    78:91:24:a6:bf:ec:1f:98:3f:9f:65:25:12:d9:e4:
                    a0:a0:4a:b7:5f:0a:c1:0f:d6:e8:36:15:ad:9b:d4:
                    25:c4:c1:34:88:e5:63:d5:b2:17:fd:b2:3e:8a:95:
                    42:6b:8e:3c:29:29:24:29:37:e3:96:0a:8e:b4:15:
                    f5:14:e6:a5:54:9e:40:9f:ae:20:86:fb:10:6e:9d:
                    81:ef:9b:9b:5c:f2:4a:3f:53:50:22:a8:1e:82:ca:
                    fb:65:21:8f:39:92:34:b8:d9:6b:34:ea:06:8f:11:
                    e0:a6:04:a5:40:f6:72:f4:c9:09:27:30:13:a2:b3:
                    b3:97:67:d0:21:38:bf:b5:2c:a3:2c:a6:24:95:3a:
                    5b:1a:93:39:08:58:cd:15:93:5d:4a:da:d2:0b:7b:
                    71:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:D1:EF:1E:F7:ED:DF:85:18:35:E5:95:7C:2E:F0:7F:31:4C:62:B3
            X509v3 Authority Key Identifier:
                keyid:E3:8A:C2:CF:B2:99:71:5B:3B:6D:58:66:C1:5C:F3:53:BE:48:A7:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/E38AC2CFB299715B3B6D5866C15CF353BE48A770.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E38AC2CFB299715B3B6D5866C15CF353BE48A770.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/3138392e38392e3234332e302f32342d3330203d3e203238313838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:bb:eb:00:c5:e9:31:01:a8:2c:e5:4a:12:40:df:78:da:de:
         e1:4c:88:02:49:a0:b8:e6:66:f6:0d:13:b6:e3:1e:19:7b:ae:
         4c:2d:0f:6d:c4:b2:0c:c2:91:5d:55:50:82:85:84:eb:b1:98:
         b0:55:0f:a0:be:01:fb:8c:3a:0b:d6:ba:eb:59:0f:10:83:c8:
         03:a4:6b:f8:f5:f8:db:c5:9d:a8:58:57:83:97:b4:82:54:d0:
         d6:09:23:8a:fc:e7:6c:f1:a0:26:96:c1:a0:d2:50:6b:7e:62:
         ae:d8:d4:ab:6b:3d:04:6a:70:43:38:66:62:53:25:fb:e5:dc:
         a0:26:a3:ae:65:14:eb:0c:83:42:ee:04:84:a5:3c:07:b5:d4:
         4c:74:8a:d4:55:47:96:ef:d2:14:ce:87:b9:dc:74:e8:8f:15:
         3a:6a:3f:b8:c6:29:e9:81:e2:bc:1f:17:33:88:12:ea:6e:eb:
         ff:e5:b5:c3:f5:6f:81:8b:02:7a:ca:61:eb:df:34:18:54:6f:
         cb:7f:73:53:5e:82:6f:09:a9:12:3c:59:03:7e:6d:54:f7:09:
         a6:e6:3c:c3:2d:06:62:c5:a7:d1:f9:6e:f8:84:e1:56:44:c1:
         de:17:3e:87:12:ff:5e:55:4d:6c:6b:e9:5f:bd:75:91:3a:62:
         21:62:a1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:42:50 2025 by rpki-client