Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/3138392e38392e38342e302f32332d3233203d3e20323632373439.roa
File:                     3138392e38392e38342e302f32332d3233203d3e20323632373439.roa (raw, json)
Hash identifier:          VB+PskXbsv+1uT0S+K5nHbnKwVQ8nty0UI1BRFVOCoQ=
Subject key identifier:   17:EA:08:EF:FB:2E:5D:B5:55:2C:05:A6:20:41:4D:21:CE:31:34:22
Certificate issuer:       /CN=9DAC040D005E337E60D8E70413DC135C767316A4
Certificate serial:       6498071C077CCE5A41DB4B0C7E254C6B8CEEAABC
Authority key identifier: 9D:AC:04:0D:00:5E:33:7E:60:D8:E7:04:13:DC:13:5C:76:73:16:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DAC040D005E337E60D8E70413DC135C767316A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/3138392e38392e38342e302f32332d3233203d3e20323632373439.roa
Signing time:             Thu 06 Mar 2025 07:00:22 +0000
ROA not before:           Thu 06 Mar 2025 06:55:22 +0000
ROA not after:            Thu 05 Mar 2026 07:00:22 +0000
asID:                     262749
IP address blocks:        189.89.84.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/9DAC040D005E337E60D8E70413DC135C767316A4.crl
                          rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/9DAC040D005E337E60D8E70413DC135C767316A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DAC040D005E337E60D8E70413DC135C767316A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 11:46:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:98:07:1c:07:7c:ce:5a:41:db:4b:0c:7e:25:4c:6b:8c:ee:aa:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DAC040D005E337E60D8E70413DC135C767316A4
        Validity
            Not Before: Mar  6 06:55:22 2025 GMT
            Not After : Mar  5 07:00:22 2026 GMT
        Subject: CN=17EA08EFFB2E5DB5552C05A620414D21CE313422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6a:fb:d8:df:d8:25:07:f2:73:9b:73:d7:88:
                    10:e5:4b:dd:a9:9f:b3:8a:8e:19:5e:6c:46:d2:db:
                    ae:06:cb:2e:cf:b2:4f:9c:39:7d:01:d3:c4:05:8b:
                    6a:ff:ce:c5:85:ba:cc:3a:a2:a6:c3:6d:7e:16:4f:
                    a9:6a:0c:05:a2:92:87:e3:28:82:86:2c:17:db:31:
                    80:e6:35:5b:78:53:83:d1:78:75:61:c5:27:2d:43:
                    9b:40:30:14:fb:8f:21:3f:08:51:10:38:1e:5f:47:
                    8b:90:ca:5a:40:d8:05:d5:90:a9:fb:67:0f:70:0e:
                    5d:b2:1f:aa:b8:d2:73:c9:92:53:ee:31:38:00:cb:
                    df:33:8a:bb:9f:73:20:69:ed:e9:31:81:40:a1:38:
                    28:a3:6d:1b:25:14:a9:fe:a2:65:06:5b:58:99:a2:
                    0b:2d:4f:df:3a:fc:7e:cf:ed:9b:10:d2:bf:92:2b:
                    19:30:4e:10:0e:56:5b:c8:eb:0b:8a:d4:66:d8:12:
                    18:b6:bc:c6:2d:86:00:fe:a8:10:24:6e:f9:cc:8a:
                    28:88:46:99:c8:ea:09:e3:02:f9:80:9e:83:58:57:
                    ff:e1:d2:eb:12:8b:33:48:11:52:27:d2:ac:06:6e:
                    37:ac:ed:0a:d2:24:5e:e5:dd:0c:09:d0:24:d4:a2:
                    bd:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:EA:08:EF:FB:2E:5D:B5:55:2C:05:A6:20:41:4D:21:CE:31:34:22
            X509v3 Authority Key Identifier:
                keyid:9D:AC:04:0D:00:5E:33:7E:60:D8:E7:04:13:DC:13:5C:76:73:16:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/9DAC040D005E337E60D8E70413DC135C767316A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DAC040D005E337E60D8E70413DC135C767316A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/3138392e38392e38342e302f32332d3233203d3e20323632373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:68:f9:86:19:bd:0e:4e:2a:67:64:c8:5b:2a:4d:d2:5c:94:
         8d:a5:8b:60:6e:6b:e3:db:45:8e:e7:7f:fc:18:2e:7d:89:e0:
         95:fe:7e:3b:6a:87:6b:c0:03:d3:00:bc:bb:6c:4d:6c:1e:44:
         2b:af:75:5d:e5:b8:76:06:de:86:93:0f:a4:de:11:31:8b:30:
         53:f5:09:53:a0:b9:e2:e7:73:1b:74:cf:cb:5b:be:48:65:63:
         a9:8b:3d:60:b7:b1:ec:11:f7:81:97:a2:60:0c:4a:11:af:be:
         9e:55:3c:a6:be:05:e1:52:f1:de:af:95:a7:cd:0e:ad:ff:76:
         a4:92:63:cf:2e:65:e7:9e:eb:a8:d8:bc:48:8c:5f:88:67:41:
         2d:ce:15:78:14:e1:50:c2:8a:57:f9:5d:cd:f6:63:6d:8e:6f:
         f0:6c:20:59:61:50:00:fa:e7:bb:55:98:29:b9:ff:09:0d:01:
         2d:a6:d2:2a:a9:37:18:d1:38:89:ff:9d:af:bd:ed:62:47:dc:
         94:77:38:7c:a8:16:67:88:b4:3e:bf:dc:d7:a9:ca:3a:67:37:
         0e:1c:ab:45:5a:7c:0d:f4:93:ff:84:65:a9:0f:12:75:ed:92:
         d3:d6:c8:84:9c:20:38:0f:ee:a7:27:87:80:1b:3d:c8:40:7c:
         4f:6e:3f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 14:27:20 2025 by rpki-client