Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/3138392e38392e38382e302f32322d3232203d3e20323632373439.roa
File:                     3138392e38392e38382e302f32322d3232203d3e20323632373439.roa (raw, json)
Hash identifier:          mOYTeXGzPhVVfz3FprjmuJWkR7+la8v5nkGwkrXwQ0s=
Subject key identifier:   CF:0B:1F:F6:DF:E7:EF:2B:E2:F7:96:3D:3C:49:A5:9D:97:35:6F:24
Certificate issuer:       /CN=9DAC040D005E337E60D8E70413DC135C767316A4
Certificate serial:       1F8DB94993681DF5044EAB4CF1592CE519B85F49
Authority key identifier: 9D:AC:04:0D:00:5E:33:7E:60:D8:E7:04:13:DC:13:5C:76:73:16:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DAC040D005E337E60D8E70413DC135C767316A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/3138392e38392e38382e302f32322d3232203d3e20323632373439.roa
Signing time:             Thu 04 Apr 2024 06:00:24 +0000
ROA not before:           Thu 04 Apr 2024 05:55:24 +0000
ROA not after:            Thu 03 Apr 2025 06:00:24 +0000
asID:                     262749
IP address blocks:        189.89.88.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/9DAC040D005E337E60D8E70413DC135C767316A4.crl
                          rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/9DAC040D005E337E60D8E70413DC135C767316A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DAC040D005E337E60D8E70413DC135C767316A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:42:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:8d:b9:49:93:68:1d:f5:04:4e:ab:4c:f1:59:2c:e5:19:b8:5f:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DAC040D005E337E60D8E70413DC135C767316A4
        Validity
            Not Before: Apr  4 05:55:24 2024 GMT
            Not After : Apr  3 06:00:24 2025 GMT
        Subject: CN=CF0B1FF6DFE7EF2BE2F7963D3C49A59D97356F24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:43:6d:38:e7:ce:38:f3:9f:70:0d:a1:4e:c3:
                    3a:4a:14:d9:d8:fd:bc:9b:2a:12:60:c1:f2:5f:5b:
                    85:33:b8:15:7f:ee:08:97:5d:de:ff:af:86:8c:4a:
                    af:ac:cd:21:5e:cc:c5:d3:b1:a8:4d:36:66:c3:d1:
                    62:bb:3c:fb:69:cb:d7:17:9d:71:e4:9a:c9:05:2b:
                    fe:0a:51:25:43:59:65:71:0a:f6:52:15:a8:17:f0:
                    e8:c6:53:a7:ce:7e:2e:d3:88:4a:fc:4e:0c:0c:89:
                    f1:b3:f8:ea:fc:84:f9:07:06:b2:df:5d:99:94:5c:
                    1d:82:4c:c4:80:47:0d:d3:dc:26:97:2d:9a:62:85:
                    b6:cf:c9:8c:0a:b9:54:d1:ed:9c:1b:06:3e:27:6d:
                    70:48:8e:44:8f:52:8b:fd:5b:84:a2:7b:9b:d8:cc:
                    c0:c5:04:42:1a:dc:8d:93:d5:ab:87:32:08:8f:a4:
                    99:9d:20:2a:df:c7:2a:51:ef:60:09:41:b7:0b:8e:
                    e8:f8:7c:8f:ce:62:b5:5b:5c:0b:66:8c:39:50:c8:
                    98:c9:e7:06:c5:e3:07:b3:03:82:8d:d1:60:cd:de:
                    21:4a:14:cf:9b:cd:bb:17:e2:58:fa:45:8b:b7:bb:
                    ea:c1:a0:e6:ec:45:5d:fe:ed:0f:b0:f1:10:a5:34:
                    49:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:0B:1F:F6:DF:E7:EF:2B:E2:F7:96:3D:3C:49:A5:9D:97:35:6F:24
            X509v3 Authority Key Identifier:
                keyid:9D:AC:04:0D:00:5E:33:7E:60:D8:E7:04:13:DC:13:5C:76:73:16:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/9DAC040D005E337E60D8E70413DC135C767316A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DAC040D005E337E60D8E70413DC135C767316A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/3138392e38392e38382e302f32322d3232203d3e20323632373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:21:ad:c4:55:7e:0e:51:54:4b:7d:82:c4:40:95:e4:5b:fd:
         99:55:d8:de:88:46:b5:78:0f:7d:dc:ea:f6:4e:87:5c:1a:6b:
         37:ab:74:4f:33:ab:0d:c1:0b:dd:05:57:d1:d4:e4:60:ee:c4:
         34:f1:b6:69:32:88:49:69:d7:6f:23:ad:46:f3:b1:88:de:99:
         c7:47:ef:70:ba:bb:1b:00:9e:00:9e:a1:ee:c9:13:72:b4:86:
         91:95:02:33:60:a8:20:f7:f5:2d:ad:0e:8a:33:c4:8f:0a:7c:
         2b:2d:61:bc:5f:7d:56:92:12:a9:a9:f1:65:b8:32:86:5b:eb:
         9d:76:ef:54:0e:b5:92:c4:5a:38:7e:69:f5:62:28:b4:66:36:
         f4:1d:b8:0e:b3:e3:d6:24:85:0b:e5:23:b1:df:4c:e1:ce:bf:
         9a:ac:3d:cf:fb:4a:b1:af:fe:3d:e4:f0:e0:52:00:50:e4:78:
         97:02:d1:45:6a:1e:f0:b2:71:62:7c:32:96:99:86:6b:f9:6d:
         d3:1a:5d:b2:e2:cc:be:c3:30:25:f9:28:70:a8:6b:92:5d:1b:
         be:10:5d:f5:71:27:75:42:93:05:0e:f8:65:1f:bd:e7:7b:c0:
         bb:8b:67:ce:d4:bf:20:1b:fc:1c:97:c3:f8:62:59:00:d9:19:
         b0:86:b9:c7
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUH425SZNoHfUETqtM8Vks5Rm4X0kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOURBQzA0MEQwMDVFMzM3RTYwRDhFNzA0MTNEQzEzNUM3
NjczMTZBNDAeFw0yNDA0MDQwNTU1MjRaFw0yNTA0MDMwNjAwMjRaMDMxMTAvBgNV
BAMTKENGMEIxRkY2REZFN0VGMkJFMkY3OTYzRDNDNDlBNTlEOTczNTZGMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIQ2045844859wDaFOwzpKFNnY
/bybKhJgwfJfW4UzuBV/7giXXd7/r4aMSq+szSFezMXTsahNNmbD0WK7PPtpy9cX
nXHkmskFK/4KUSVDWWVxCvZSFagX8OjGU6fOfi7TiEr8TgwMifGz+Or8hPkHBrLf
XZmUXB2CTMSARw3T3CaXLZpihbbPyYwKuVTR7ZwbBj4nbXBIjkSPUov9W4Sie5vY
zMDFBEIa3I2T1auHMgiPpJmdICrfxypR72AJQbcLjuj4fI/OYrVbXAtmjDlQyJjJ
5wbF4wezA4KN0WDN3iFKFM+bzbsX4lj6RYu3u+rBoObsRV3+7Q+w8RClNEkPAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUzwsf9t/n7yvi95Y9PEmlnZc1byQwHwYDVR0j
BBgwFoAUnawEDQBeM35g2OcEE9wTXHZzFqQwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9GdHE4SnBGSnF0S3c4TnNid2hXUFdvam9mWHFjVGpidHBUd0JOUEVNYzNp
LzIvOURBQzA0MEQwMDVFMzM3RTYwRDhFNzA0MTNEQzEzNUM3NjczMTZBNC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS85REFDMDQwRDAwNUUzMzdFNjBE
OEU3MDQxM0RDMTM1Qzc2NzMxNkE0LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9G
dHE4SnBGSnF0S3c4TnNid2hXUFdvam9mWHFjVGpidHBUd0JOUEVNYzNpLzIvMzEz
ODM5MmUzODM5MmUzODM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjMyMzcz
NDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQCvVlYMA0GCSqGSIb3DQEBCwUAA4IBAQBQIa3EVX4OUVRL
fYLEQJXkW/2ZVdjeiEa1eA993Or2TodcGms3q3RPM6sNwQvdBVfR1ORg7sQ08bZp
MohJaddvI61G87GI3pnHR+9wursbAJ4AnqHuyRNytIaRlQIzYKgg9/UtrQ6KM8SP
CnwrLWG8X31WkhKpqfFluDKGW+uddu9UDrWSxFo4fmn1Yii0Zjb0HbgOs+PWJIUL
5SOx30zhzr+arD3P+0qxr/495PDgUgBQ5HiXAtFFah7wsnFifDKWmYZr+W3TGl2y
4sy+wzAl+ShwqGuSXRu+EF31cSd1QpMFDvhlH73ne8C7i2fO1L8gG/wcl8P4YlkA
2RmwhrnH
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:02 2024 by rpki-client on console-fra.rpki-client.org