Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/3138392e38392e38342e302f32332d3233203d3e20323632373439.roa
File:                     3138392e38392e38342e302f32332d3233203d3e20323632373439.roa (raw, json)
Hash identifier:          hcWndGtqBD0Ly39LuRnumPPIRFTiVvVormKMhD7XEEI=
Subject key identifier:   01:72:18:06:2F:18:4E:E9:74:13:40:9A:8C:6B:5F:57:9B:28:FF:3B
Certificate issuer:       /CN=9DAC040D005E337E60D8E70413DC135C767316A4
Certificate serial:       7CE309C49FD47361D71F842F15ECAA02BE4A8CC2
Authority key identifier: 9D:AC:04:0D:00:5E:33:7E:60:D8:E7:04:13:DC:13:5C:76:73:16:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DAC040D005E337E60D8E70413DC135C767316A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/3138392e38392e38342e302f32332d3233203d3e20323632373439.roa
Signing time:             Thu 04 Apr 2024 06:00:27 +0000
ROA not before:           Thu 04 Apr 2024 05:55:27 +0000
ROA not after:            Thu 03 Apr 2025 06:00:27 +0000
asID:                     262749
IP address blocks:        189.89.84.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/9DAC040D005E337E60D8E70413DC135C767316A4.crl
                          rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/9DAC040D005E337E60D8E70413DC135C767316A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DAC040D005E337E60D8E70413DC135C767316A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:42:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:e3:09:c4:9f:d4:73:61:d7:1f:84:2f:15:ec:aa:02:be:4a:8c:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DAC040D005E337E60D8E70413DC135C767316A4
        Validity
            Not Before: Apr  4 05:55:27 2024 GMT
            Not After : Apr  3 06:00:27 2025 GMT
        Subject: CN=017218062F184EE97413409A8C6B5F579B28FF3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:29:bc:2a:dd:26:c5:8a:77:12:8b:f6:53:bb:
                    92:28:a5:af:82:fa:4b:d3:f5:74:a2:17:bc:72:52:
                    c0:ce:5c:7b:a5:55:b2:11:9f:b9:7f:c3:9e:00:c7:
                    78:3d:31:de:3b:0b:33:40:53:7f:ad:58:20:7a:ac:
                    44:c0:6e:70:4b:2e:ec:97:25:66:ec:bf:78:f1:83:
                    21:90:29:0a:5a:7a:fb:28:b1:9a:bd:15:36:43:72:
                    60:f7:70:8d:44:4e:d0:5b:e0:42:79:8f:6a:68:08:
                    4a:3a:04:87:01:06:53:09:15:8b:40:ed:bc:cf:1b:
                    e1:b1:7e:77:26:78:b9:2f:39:9b:14:ab:23:8a:0f:
                    a5:b9:7a:b0:c6:75:b7:89:5e:35:bb:e9:47:ff:39:
                    5b:23:ff:1a:dd:75:c3:60:bb:46:f7:8d:14:42:12:
                    96:be:ec:39:ce:90:a7:08:49:6a:89:84:2f:bf:f7:
                    3b:59:b0:d6:91:20:4c:24:2b:10:fe:42:57:eb:7c:
                    97:e3:f7:43:73:e1:2a:e9:e0:ff:67:98:8e:d1:b1:
                    fa:d8:6f:ca:1f:08:d3:1d:e3:a6:5a:c3:7e:99:ee:
                    e0:2f:a0:c6:34:f5:0c:89:83:46:7f:99:6f:83:6c:
                    88:4e:0d:b2:bd:a9:f4:81:a6:62:70:1e:4c:12:a2:
                    f1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:72:18:06:2F:18:4E:E9:74:13:40:9A:8C:6B:5F:57:9B:28:FF:3B
            X509v3 Authority Key Identifier:
                keyid:9D:AC:04:0D:00:5E:33:7E:60:D8:E7:04:13:DC:13:5C:76:73:16:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/9DAC040D005E337E60D8E70413DC135C767316A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DAC040D005E337E60D8E70413DC135C767316A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/3138392e38392e38342e302f32332d3233203d3e20323632373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:9c:28:dd:29:0d:32:d9:47:b6:a3:48:8f:aa:1e:be:66:31:
         3a:33:9a:ab:ac:95:c4:dd:2f:a8:92:bb:70:db:2c:a1:db:c1:
         08:06:25:0f:4a:0e:85:36:b9:b7:6f:b1:bf:72:f6:1e:b7:65:
         f3:06:56:9b:04:a8:99:66:81:c2:95:58:b9:9f:ce:c7:84:6c:
         3e:05:f4:22:9f:cd:66:6b:2c:4e:fb:b9:37:e5:e5:80:c8:4c:
         5d:6a:77:30:c7:cd:44:75:dc:e4:e3:2e:81:00:2d:95:20:8c:
         60:f3:91:ca:1c:c3:4c:8b:b4:1f:fc:4f:92:77:2e:6a:50:01:
         87:58:40:12:c4:0e:fd:55:17:38:e2:d2:b4:30:3b:f1:a3:af:
         7b:d6:e2:ad:fc:36:1c:4f:d0:4c:5d:d1:f1:f7:73:13:c1:45:
         d1:7e:3f:e0:d8:be:19:5b:14:ae:be:f2:ac:a4:a1:f0:a0:1f:
         25:45:a4:86:75:bf:27:e6:ad:52:a2:74:e7:6c:bb:53:20:48:
         58:2f:2a:a9:51:63:41:b7:c2:92:2f:18:12:79:e2:8c:d6:89:
         27:0e:93:78:76:fe:61:64:f3:e7:c7:cc:d2:53:0d:95:65:7c:
         5a:c1:93:e3:01:82:54:e3:10:58:26:56:75:32:8b:a3:15:71:
         33:06:e5:9b
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUfOMJxJ/Uc2HXH4QvFeyqAr5KjMIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOURBQzA0MEQwMDVFMzM3RTYwRDhFNzA0MTNEQzEzNUM3
NjczMTZBNDAeFw0yNDA0MDQwNTU1MjdaFw0yNTA0MDMwNjAwMjdaMDMxMTAvBgNV
BAMTKDAxNzIxODA2MkYxODRFRTk3NDEzNDA5QThDNkI1RjU3OUIyOEZGM0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJKbwq3SbFincSi/ZTu5Iopa+C
+kvT9XSiF7xyUsDOXHulVbIRn7l/w54Ax3g9Md47CzNAU3+tWCB6rETAbnBLLuyX
JWbsv3jxgyGQKQpaevsosZq9FTZDcmD3cI1ETtBb4EJ5j2poCEo6BIcBBlMJFYtA
7bzPG+GxfncmeLkvOZsUqyOKD6W5erDGdbeJXjW76Uf/OVsj/xrddcNgu0b3jRRC
Epa+7DnOkKcISWqJhC+/9ztZsNaRIEwkKxD+QlfrfJfj90Nz4Srp4P9nmI7RsfrY
b8ofCNMd46Zaw36Z7uAvoMY09QyJg0Z/mW+DbIhODbK9qfSBpmJwHkwSovGxAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUAXIYBi8YTul0E0CajGtfV5so/zswHwYDVR0j
BBgwFoAUnawEDQBeM35g2OcEE9wTXHZzFqQwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9GdHE4SnBGSnF0S3c4TnNid2hXUFdvam9mWHFjVGpidHBUd0JOUEVNYzNp
LzIvOURBQzA0MEQwMDVFMzM3RTYwRDhFNzA0MTNEQzEzNUM3NjczMTZBNC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS85REFDMDQwRDAwNUUzMzdFNjBE
OEU3MDQxM0RDMTM1Qzc2NzMxNkE0LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9G
dHE4SnBGSnF0S3c4TnNid2hXUFdvam9mWHFjVGpidHBUd0JOUEVNYzNpLzIvMzEz
ODM5MmUzODM5MmUzODM0MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjMyMzcz
NDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQBvVlUMA0GCSqGSIb3DQEBCwUAA4IBAQCNnCjdKQ0y2Ue2
o0iPqh6+ZjE6M5qrrJXE3S+okrtw2yyh28EIBiUPSg6FNrm3b7G/cvYet2XzBlab
BKiZZoHClVi5n87HhGw+BfQin81mayxO+7k35eWAyExdancwx81Eddzk4y6BAC2V
IIxg85HKHMNMi7Qf/E+Sdy5qUAGHWEASxA79VRc44tK0MDvxo6971uKt/DYcT9BM
XdHx93MTwUXRfj/g2L4ZWxSuvvKspKHwoB8lRaSGdb8n5q1SonTnbLtTIEhYLyqp
UWNBt8KSLxgSeeKM1oknDpN4dv5hZPPnx8zSUw2VZXxawZPjAYJU4xBYJlZ1Mouj
FXEzBuWb
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:02 2024 by rpki-client on console-fra.rpki-client.org