Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/1/3138392e38342e35382e302f32332d3233203d3e20323731373030.roa
File:                     3138392e38342e35382e302f32332d3233203d3e20323731373030.roa (raw, json)
Hash identifier:          QK8gag8CdbyoG95g5BmrvFHfOLUjv1TAD7a2K4nchmI=
Subject key identifier:   74:C1:BF:78:9A:90:E7:D5:0D:49:72:8B:EE:2F:68:29:16:B5:21:CC
Certificate issuer:       /CN=F8A856531D031C268A60E567AA8452F1F7F438A4
Certificate serial:       6336B5EFF6C0ED020A99A9A1044E05B36CC614D3
Authority key identifier: F8:A8:56:53:1D:03:1C:26:8A:60:E5:67:AA:84:52:F1:F7:F4:38:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8A856531D031C268A60E567AA8452F1F7F438A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/1/3138392e38342e35382e302f32332d3233203d3e20323731373030.roa
Signing time:             Thu 04 Apr 2024 08:14:25 +0000
ROA not before:           Thu 04 Apr 2024 08:09:25 +0000
ROA not after:            Thu 03 Apr 2025 08:14:25 +0000
asID:                     271700
IP address blocks:        189.84.58.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/1/F8A856531D031C268A60E567AA8452F1F7F438A4.crl
                          rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/1/F8A856531D031C268A60E567AA8452F1F7F438A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8A856531D031C268A60E567AA8452F1F7F438A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 May 2024 05:02:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:36:b5:ef:f6:c0:ed:02:0a:99:a9:a1:04:4e:05:b3:6c:c6:14:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8A856531D031C268A60E567AA8452F1F7F438A4
        Validity
            Not Before: Apr  4 08:09:25 2024 GMT
            Not After : Apr  3 08:14:25 2025 GMT
        Subject: CN=74C1BF789A90E7D50D49728BEE2F682916B521CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:90:4c:73:b3:72:96:cc:bc:59:39:31:c2:ee:
                    81:eb:bf:49:d8:d0:50:34:1c:5d:14:db:6f:e7:ad:
                    04:b8:ca:6f:87:8b:ec:4b:5f:9a:77:25:0b:3c:33:
                    f8:d3:74:e9:b2:71:81:4e:b7:7e:26:7b:83:cd:6c:
                    2d:df:94:00:29:2e:44:24:12:f3:32:b0:22:6b:b7:
                    15:73:72:c3:12:8c:7e:9a:e0:f4:fb:22:f7:cc:38:
                    bb:0b:84:a2:bd:c6:0f:9d:0a:6d:0e:ba:1e:cf:3c:
                    9a:32:b3:63:fb:be:67:4b:d5:1a:56:23:97:e9:86:
                    c6:8f:15:d2:36:00:d3:44:78:34:09:19:fb:0f:8f:
                    48:9e:a8:b5:93:4f:0d:a6:f6:23:c1:af:d9:95:1d:
                    c7:0d:60:17:1a:db:30:76:d9:35:7a:50:25:91:14:
                    55:0e:9f:00:33:fd:85:4c:6b:8b:09:27:12:76:6c:
                    d6:2b:ea:48:cc:8f:8c:48:87:dc:08:4f:79:69:fe:
                    50:41:88:48:d3:dc:68:5c:6c:cd:77:9c:16:d1:45:
                    53:25:66:5b:7b:33:6c:d9:64:4d:84:60:be:c8:75:
                    d5:b0:85:1e:d1:ea:2d:31:2a:bb:00:8c:9c:df:1d:
                    d3:f1:0d:52:60:1d:19:1a:11:d0:4e:67:0a:31:1a:
                    d8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C1:BF:78:9A:90:E7:D5:0D:49:72:8B:EE:2F:68:29:16:B5:21:CC
            X509v3 Authority Key Identifier:
                keyid:F8:A8:56:53:1D:03:1C:26:8A:60:E5:67:AA:84:52:F1:F7:F4:38:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/1/F8A856531D031C268A60E567AA8452F1F7F438A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8A856531D031C268A60E567AA8452F1F7F438A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/1/3138392e38342e35382e302f32332d3233203d3e20323731373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:81:b1:57:8a:b2:80:61:dd:a8:80:28:f0:27:ba:38:be:41:
         ca:22:75:24:5d:4c:ec:0d:48:4c:6c:ac:9c:0e:dd:9a:b4:86:
         99:e7:3f:35:99:b7:03:77:ba:2c:2f:be:04:06:36:00:64:66:
         a3:77:f0:63:11:23:8f:6a:91:71:bd:83:97:1b:43:7e:b4:1f:
         0a:1a:1c:d9:b6:88:10:75:39:c9:5f:33:bc:7e:cb:b3:69:89:
         11:3c:d5:fd:73:d5:41:03:ec:cd:69:e6:0a:e7:5b:f3:a2:77:
         3d:3a:0e:59:0e:df:89:36:3f:a2:16:24:56:22:e0:7f:80:f2:
         04:49:3a:56:89:43:42:f0:c8:b2:f2:56:f6:90:e8:c1:42:ab:
         23:b3:fa:6b:ca:bc:b5:35:49:72:3f:83:cb:3e:7a:f0:8d:5f:
         fd:41:b7:fa:e7:75:41:da:a9:43:c1:29:f7:6c:04:12:20:fa:
         26:39:36:84:54:39:37:ba:b7:bf:d1:71:61:92:46:b5:56:11:
         a1:33:cf:3b:99:c1:72:fb:06:46:cb:72:b8:e9:59:31:f6:8a:
         7d:9f:54:cc:4f:9e:45:73:3a:5b:32:b7:41:ee:75:57:e6:f7:
         3f:e1:c4:8b:c9:4e:a0:5b:45:17:93:f4:0c:b5:3a:4c:b8:fb:
         d5:6a:3c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 07:39:24 2024 by rpki-client on console-ams.rpki-client.org