Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/3138392e38392e38382e302f32322d3232203d3e20323632373439.roa
File:                     3138392e38392e38382e302f32322d3232203d3e20323632373439.roa (raw, json)
Hash identifier:          Z56D/QngI5H74d3Bk7FeMm+bwWiqkZhXEBr90V4itvg=
Subject key identifier:   45:15:3A:33:E8:E7:60:45:AE:64:B1:DA:FB:93:9A:A1:B9:16:E6:F6
Certificate issuer:       /CN=9DAC040D005E337E60D8E70413DC135C767316A4
Certificate serial:       45E09615C2170768B30C5851A4FADFA967AA4F3E
Authority key identifier: 9D:AC:04:0D:00:5E:33:7E:60:D8:E7:04:13:DC:13:5C:76:73:16:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DAC040D005E337E60D8E70413DC135C767316A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/3138392e38392e38382e302f32322d3232203d3e20323632373439.roa
Signing time:             Thu 06 Mar 2025 07:00:19 +0000
ROA not before:           Thu 06 Mar 2025 06:55:19 +0000
ROA not after:            Thu 05 Mar 2026 07:00:19 +0000
asID:                     262749
IP address blocks:        189.89.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/9DAC040D005E337E60D8E70413DC135C767316A4.crl
                          rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/9DAC040D005E337E60D8E70413DC135C767316A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DAC040D005E337E60D8E70413DC135C767316A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 11:46:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:e0:96:15:c2:17:07:68:b3:0c:58:51:a4:fa:df:a9:67:aa:4f:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DAC040D005E337E60D8E70413DC135C767316A4
        Validity
            Not Before: Mar  6 06:55:19 2025 GMT
            Not After : Mar  5 07:00:19 2026 GMT
        Subject: CN=45153A33E8E76045AE64B1DAFB939AA1B916E6F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e9:41:b0:68:2a:fc:1b:ef:a7:41:91:2c:56:
                    e7:0a:6b:28:6e:07:4e:06:4c:32:c9:52:34:93:8e:
                    4b:d2:dd:66:27:e8:4f:49:f1:6f:bf:e0:1a:8f:80:
                    40:a5:49:ef:f7:3d:57:48:a0:34:e7:27:c2:f0:b4:
                    3e:26:04:be:5f:df:b5:b9:ba:16:3f:9f:b2:b4:9b:
                    0c:2f:e7:36:70:97:b5:2f:27:b9:22:64:16:75:e5:
                    da:d1:17:0e:03:29:98:95:61:b9:aa:2c:19:e1:f0:
                    38:6f:9d:3c:40:1b:1b:21:8d:42:0b:0d:04:32:74:
                    b2:d7:ad:41:eb:ef:9e:d6:fa:03:c2:a5:16:1d:4c:
                    10:7d:e2:60:09:5f:e0:4c:5d:87:4f:94:0c:25:9c:
                    4c:34:47:04:a6:8f:a0:3b:f4:c8:e0:9f:c1:69:bb:
                    8c:ac:10:cb:ab:ab:6b:dc:6d:65:65:7c:c9:6c:21:
                    fe:6f:ed:4a:47:87:8d:c6:51:b6:08:5c:04:28:61:
                    ad:49:5f:f1:4e:c5:36:a3:39:b7:49:ff:18:dc:f4:
                    8b:ca:30:b3:7c:28:81:25:08:3e:e2:e8:a9:85:21:
                    51:b1:4f:37:7e:32:4e:d0:2c:6d:85:21:09:78:fc:
                    c1:e5:9b:39:25:d9:4c:f2:fd:1e:9b:04:79:01:0b:
                    95:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:15:3A:33:E8:E7:60:45:AE:64:B1:DA:FB:93:9A:A1:B9:16:E6:F6
            X509v3 Authority Key Identifier:
                keyid:9D:AC:04:0D:00:5E:33:7E:60:D8:E7:04:13:DC:13:5C:76:73:16:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/9DAC040D005E337E60D8E70413DC135C767316A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DAC040D005E337E60D8E70413DC135C767316A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/3138392e38392e38382e302f32322d3232203d3e20323632373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:3a:2e:f6:d9:7a:83:2e:30:35:69:01:0b:c7:87:4a:91:bc:
         b5:b3:d3:71:95:93:d1:8a:6a:1c:0f:37:d1:29:66:28:b8:35:
         27:50:75:4e:e1:cd:69:77:4e:92:ba:7d:76:05:f1:f1:25:0f:
         60:16:47:4c:73:f7:1f:29:55:4e:1f:81:b3:bb:53:10:fe:d9:
         b0:1c:63:78:cb:22:93:ec:d0:67:41:ef:94:02:5b:a6:27:87:
         41:43:5e:47:fd:39:8d:cf:54:86:cc:3f:97:6d:24:cc:79:b2:
         d5:bb:d3:c1:86:bf:83:e2:ec:8a:3a:04:6e:e2:43:80:4e:00:
         36:81:25:50:0b:ca:9b:d0:62:21:fb:2d:bc:07:c8:64:9c:b2:
         5a:2b:3c:df:95:52:e2:6b:34:20:89:d8:14:91:bc:0b:45:9c:
         e8:24:37:4b:f9:b1:bb:37:c3:eb:bc:a7:71:ef:51:2d:13:32:
         2a:f6:fe:35:14:18:33:98:fd:5a:27:c7:ba:a9:d1:00:34:55:
         77:6f:01:6c:1e:c3:f2:7d:32:24:8d:86:8d:e8:fa:bd:4d:45:
         16:2a:c5:6e:a7:78:67:24:0e:e5:f3:81:30:5f:e1:95:2d:a4:
         2a:0f:b4:b0:9e:76:8f:52:5a:48:9e:98:c4:e6:71:92:4c:b9:
         9b:83:2f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 02:49:59 2025 by rpki-client