Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/3138392e38392e38302e302f32332d3233203d3e20323632373439.roa
File:                     3138392e38392e38302e302f32332d3233203d3e20323632373439.roa (raw, json)
Hash identifier:          c0sPk2l1esJ/ncZCfh+SLlE/TlndE6RVzJoHM4v9IcI=
Subject key identifier:   58:73:6D:20:CC:B6:6B:44:E3:0B:2E:36:B7:FC:07:38:28:EF:4A:FF
Certificate issuer:       /CN=9DAC040D005E337E60D8E70413DC135C767316A4
Certificate serial:       41F721F9D7E693422E3032726F97EAF0C9A62FE4
Authority key identifier: 9D:AC:04:0D:00:5E:33:7E:60:D8:E7:04:13:DC:13:5C:76:73:16:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DAC040D005E337E60D8E70413DC135C767316A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/3138392e38392e38302e302f32332d3233203d3e20323632373439.roa
Signing time:             Thu 04 Apr 2024 06:00:25 +0000
ROA not before:           Thu 04 Apr 2024 05:55:25 +0000
ROA not after:            Thu 03 Apr 2025 06:00:25 +0000
asID:                     262749
IP address blocks:        189.89.80.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/9DAC040D005E337E60D8E70413DC135C767316A4.crl
                          rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/9DAC040D005E337E60D8E70413DC135C767316A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DAC040D005E337E60D8E70413DC135C767316A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:42:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:f7:21:f9:d7:e6:93:42:2e:30:32:72:6f:97:ea:f0:c9:a6:2f:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DAC040D005E337E60D8E70413DC135C767316A4
        Validity
            Not Before: Apr  4 05:55:25 2024 GMT
            Not After : Apr  3 06:00:25 2025 GMT
        Subject: CN=58736D20CCB66B44E30B2E36B7FC073828EF4AFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f6:f3:fc:1d:77:7b:9c:d6:b9:92:cd:74:3f:
                    6a:b4:00:b5:49:9b:48:97:f3:86:80:44:29:4c:7a:
                    25:5a:be:c2:35:d5:1e:94:4a:a2:07:49:e8:cb:64:
                    65:55:e7:d0:c7:e8:7b:b8:e6:4d:cc:cc:89:18:e3:
                    b7:d7:22:a7:91:b0:92:85:8c:72:97:53:ea:d3:3c:
                    23:e9:31:e9:f0:ef:38:d7:20:65:ae:c4:4b:f0:ad:
                    d7:1b:15:79:2f:bd:f1:24:f3:ef:0c:24:d6:fe:a1:
                    50:24:98:ff:74:3f:89:61:62:d1:fd:f8:e0:78:52:
                    b4:74:3a:47:14:1a:38:c3:8d:40:1a:59:fc:40:da:
                    53:ee:6e:e9:cd:78:b8:a0:81:69:c8:8a:40:c9:ba:
                    1b:df:fa:98:55:8b:46:5d:5c:75:07:f0:86:a8:ac:
                    9e:14:fe:30:35:73:b7:40:a6:93:1c:67:30:9f:eb:
                    88:a6:aa:55:2c:4b:82:f0:10:0c:67:6e:4c:b2:be:
                    27:bc:b3:bb:62:f4:63:90:18:fe:4e:45:5d:27:29:
                    ca:8a:1e:f4:74:5a:e0:f6:0c:b4:e8:1a:be:e0:97:
                    2c:c5:60:52:00:a4:cd:7d:a7:97:ec:5d:a5:6e:6b:
                    8d:b1:ac:ad:4d:f4:4e:8d:91:f4:77:36:51:68:5e:
                    31:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:73:6D:20:CC:B6:6B:44:E3:0B:2E:36:B7:FC:07:38:28:EF:4A:FF
            X509v3 Authority Key Identifier:
                keyid:9D:AC:04:0D:00:5E:33:7E:60:D8:E7:04:13:DC:13:5C:76:73:16:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/9DAC040D005E337E60D8E70413DC135C767316A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DAC040D005E337E60D8E70413DC135C767316A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/3138392e38392e38302e302f32332d3233203d3e20323632373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:14:f8:c2:b4:80:5a:48:9d:20:5d:26:48:60:5e:ed:a1:b4:
         d2:f9:c0:e4:9e:b0:da:b8:ff:7c:8e:92:1e:c7:24:4f:1a:77:
         b5:f7:f4:c6:b6:cc:dc:ac:34:dd:d5:dc:22:2b:98:59:9c:31:
         d5:14:3d:dd:20:99:ce:e5:27:32:30:92:68:f8:1b:25:4b:45:
         69:e0:d7:ec:c6:f5:c3:8d:ef:79:c8:80:a9:f0:31:e5:9a:a8:
         7d:d6:99:35:bc:d1:ad:b5:7d:96:96:8a:6a:8f:6e:80:6d:da:
         a4:a7:52:a4:a2:37:a2:84:01:a2:18:32:5c:66:f6:b2:da:52:
         d8:cd:1a:76:20:4e:fb:3c:6a:1b:01:b9:e7:9b:d8:49:b9:ae:
         7e:75:e0:45:6f:64:b1:54:0c:bc:85:ba:69:ee:23:dd:5f:65:
         0b:8a:54:65:9d:ff:db:3e:9f:5d:97:4e:b7:a9:f7:89:18:2f:
         5b:2d:42:e4:c8:a9:3a:53:44:5d:59:b3:37:f2:2e:6f:ce:17:
         a6:b9:72:c3:ca:3c:02:76:59:74:31:ed:ff:85:da:5a:88:4b:
         d5:69:46:3b:55:4e:f8:75:fd:58:d7:c9:4f:6a:c8:7c:3a:cb:
         d6:1b:fa:26:5c:33:23:de:ab:75:44:af:a5:6d:97:76:68:71:
         9f:3b:8b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:02 2024 by rpki-client on console-fra.rpki-client.org