Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/3138392e38392e38322e302f32332d3233203d3e20323632373439.roa
File:                     3138392e38392e38322e302f32332d3233203d3e20323632373439.roa (raw, json)
Hash identifier:          7As7DeQihBHtzm2scZsAuqH3WpQMzWwfBFXEI0HA8pE=
Subject key identifier:   11:15:DC:FC:F0:74:04:B3:DE:1F:22:3D:93:7C:01:B2:54:73:2A:8B
Certificate issuer:       /CN=9DAC040D005E337E60D8E70413DC135C767316A4
Certificate serial:       1551E5BC88C1205FEEB2DB892C7DD5E42A655A4A
Authority key identifier: 9D:AC:04:0D:00:5E:33:7E:60:D8:E7:04:13:DC:13:5C:76:73:16:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DAC040D005E337E60D8E70413DC135C767316A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/3138392e38392e38322e302f32332d3233203d3e20323632373439.roa
Signing time:             Thu 06 Mar 2025 07:00:20 +0000
ROA not before:           Thu 06 Mar 2025 06:55:20 +0000
ROA not after:            Thu 05 Mar 2026 07:00:20 +0000
asID:                     262749
IP address blocks:        189.89.82.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/9DAC040D005E337E60D8E70413DC135C767316A4.crl
                          rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/9DAC040D005E337E60D8E70413DC135C767316A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DAC040D005E337E60D8E70413DC135C767316A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 16:45:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:51:e5:bc:88:c1:20:5f:ee:b2:db:89:2c:7d:d5:e4:2a:65:5a:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DAC040D005E337E60D8E70413DC135C767316A4
        Validity
            Not Before: Mar  6 06:55:20 2025 GMT
            Not After : Mar  5 07:00:20 2026 GMT
        Subject: CN=1115DCFCF07404B3DE1F223D937C01B254732A8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:91:7a:5d:3d:55:36:f4:a4:6f:8a:42:f4:92:
                    12:94:04:b9:51:a7:1c:ee:fc:19:c5:d7:10:ab:62:
                    fc:6e:7c:1d:47:35:10:75:cf:a4:8b:8d:11:58:51:
                    cd:ef:21:2c:b0:f1:54:57:aa:9c:7c:66:d1:58:51:
                    0c:be:3b:7b:e4:83:b9:7d:6c:dd:1a:a9:85:56:75:
                    85:a7:0c:cc:1c:a0:dd:f4:80:21:de:d5:a1:dd:94:
                    9c:87:09:68:4f:df:d3:4e:71:16:09:19:e1:af:00:
                    5e:e6:93:9c:16:d1:c4:f7:54:11:62:2b:ba:81:d7:
                    2d:d3:f0:bf:90:17:7e:a1:1e:4f:a8:32:95:aa:ce:
                    50:00:4b:cf:75:14:3f:58:a7:70:d3:5c:f2:cc:02:
                    ed:a1:af:e2:a1:70:16:d0:00:b3:c7:07:eb:27:5d:
                    b2:3a:00:a6:78:6d:aa:09:ac:38:60:26:1e:20:06:
                    08:41:a9:27:ac:1c:20:92:6a:e7:e5:48:95:ec:d7:
                    12:f3:d4:d4:66:39:df:8d:16:b6:01:47:c7:75:5e:
                    30:24:c2:f5:79:7e:9f:19:e3:85:20:20:bd:14:b3:
                    38:5a:18:e7:a3:79:56:f9:24:7a:ad:7c:96:90:fe:
                    f3:ee:ad:90:f9:ff:48:2d:5b:98:bc:2c:f6:04:54:
                    74:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:15:DC:FC:F0:74:04:B3:DE:1F:22:3D:93:7C:01:B2:54:73:2A:8B
            X509v3 Authority Key Identifier:
                keyid:9D:AC:04:0D:00:5E:33:7E:60:D8:E7:04:13:DC:13:5C:76:73:16:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/9DAC040D005E337E60D8E70413DC135C767316A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DAC040D005E337E60D8E70413DC135C767316A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/3138392e38392e38322e302f32332d3233203d3e20323632373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:f7:b6:b5:57:20:54:fe:67:cd:08:02:65:ae:60:e3:55:b6:
         66:e6:d2:a0:ec:48:77:ac:72:e5:80:3f:25:8c:83:45:95:cb:
         0b:17:dd:f3:a5:ed:1f:4b:5b:30:0c:ec:32:d6:dc:2b:94:48:
         ff:70:e5:09:9a:8c:de:f5:31:6d:7c:3a:00:74:d5:59:a5:9c:
         4f:c0:1e:d6:6a:c7:31:16:ee:60:27:6f:f0:64:bd:aa:ce:35:
         4e:e5:56:cf:89:18:d9:fb:0d:ed:81:9b:ac:ab:a1:de:18:a2:
         e8:2f:94:1c:4a:ee:63:7a:8d:0e:f8:b6:a8:c7:61:ee:23:be:
         13:2f:c6:bc:57:a8:4c:23:2d:fb:9b:a1:11:5e:80:95:e9:f9:
         e3:03:38:c0:a6:45:b2:f0:8a:be:f9:a9:a5:37:1b:5f:0a:a7:
         78:4a:52:83:c7:ec:fa:10:9c:e3:dd:ec:56:6c:ad:7c:05:44:
         ce:62:b8:25:a1:2f:f6:1f:a6:9c:c6:48:eb:a2:b4:d5:f7:90:
         62:91:0a:7f:ca:bc:f4:f5:20:56:57:f9:43:33:88:a7:ba:2b:
         af:d8:91:19:1f:f7:fc:1c:58:8a:0d:43:46:93:5d:56:52:46:
         71:b2:73:69:b3:97:d1:d2:e6:48:cf:d6:19:ed:d1:b2:41:8c:
         9b:0a:62:6f
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUFVHlvIjBIF/ustuJLH3V5CplWkowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOURBQzA0MEQwMDVFMzM3RTYwRDhFNzA0MTNEQzEzNUM3
NjczMTZBNDAeFw0yNTAzMDYwNjU1MjBaFw0yNjAzMDUwNzAwMjBaMDMxMTAvBgNV
BAMTKDExMTVEQ0ZDRjA3NDA0QjNERTFGMjIzRDkzN0MwMUIyNTQ3MzJBOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjkXpdPVU29KRvikL0khKUBLlR
pxzu/BnF1xCrYvxufB1HNRB1z6SLjRFYUc3vISyw8VRXqpx8ZtFYUQy+O3vkg7l9
bN0aqYVWdYWnDMwcoN30gCHe1aHdlJyHCWhP39NOcRYJGeGvAF7mk5wW0cT3VBFi
K7qB1y3T8L+QF36hHk+oMpWqzlAAS891FD9Yp3DTXPLMAu2hr+KhcBbQALPHB+sn
XbI6AKZ4baoJrDhgJh4gBghBqSesHCCSauflSJXs1xLz1NRmOd+NFrYBR8d1XjAk
wvV5fp8Z44UgIL0UszhaGOejeVb5JHqtfJaQ/vPurZD5/0gtW5i8LPYEVHTdAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUERXc/PB0BLPeHyI9k3wBslRzKoswHwYDVR0j
BBgwFoAUnawEDQBeM35g2OcEE9wTXHZzFqQwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9GdHE4SnBGSnF0S3c4TnNid2hXUFdvam9mWHFjVGpidHBUd0JOUEVNYzNp
LzIvOURBQzA0MEQwMDVFMzM3RTYwRDhFNzA0MTNEQzEzNUM3NjczMTZBNC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS85REFDMDQwRDAwNUUzMzdFNjBE
OEU3MDQxM0RDMTM1Qzc2NzMxNkE0LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9G
dHE4SnBGSnF0S3c4TnNid2hXUFdvam9mWHFjVGpidHBUd0JOUEVNYzNpLzIvMzEz
ODM5MmUzODM5MmUzODMyMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjMyMzcz
NDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQBvVlSMA0GCSqGSIb3DQEBCwUAA4IBAQBx97a1VyBU/mfN
CAJlrmDjVbZm5tKg7Eh3rHLlgD8ljINFlcsLF93zpe0fS1swDOwy1twrlEj/cOUJ
moze9TFtfDoAdNVZpZxPwB7WascxFu5gJ2/wZL2qzjVO5VbPiRjZ+w3tgZusq6He
GKLoL5QcSu5jeo0O+Laox2HuI74TL8a8V6hMIy37m6ERXoCV6fnjAzjApkWy8Iq+
+amlNxtfCqd4SlKDx+z6EJzj3exWbK18BUTOYrgloS/2H6acxkjrorTV95BikQp/
yrz09SBWV/lDM4inuiuv2JEZH/f8HFiKDUNGk11WUkZxsnNps5fR0uZIz9YZ7dGy
QYybCmJv
-----END CERTIFICATE-----
Generated at Sat Apr 19 04:56:24 2025 by rpki-client