Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/3138392e38392e38382e302f32332d3233203d3e20323632373439.roa
File:                     3138392e38392e38382e302f32332d3233203d3e20323632373439.roa (raw, json)
Hash identifier:          3R0xIlfq3HJ/9cgb/q7k7S4Wd84XBc5D0k/91atSYEA=
Subject key identifier:   7D:F9:59:90:55:1F:D0:46:1F:AA:6C:90:FD:8B:0C:9C:96:98:36:BB
Certificate issuer:       /CN=9DAC040D005E337E60D8E70413DC135C767316A4
Certificate serial:       4BFEB0AD55E5D310B80078F6FC7E237270C1E439
Authority key identifier: 9D:AC:04:0D:00:5E:33:7E:60:D8:E7:04:13:DC:13:5C:76:73:16:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DAC040D005E337E60D8E70413DC135C767316A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/3138392e38392e38382e302f32332d3233203d3e20323632373439.roa
Signing time:             Thu 04 Apr 2024 06:00:26 +0000
ROA not before:           Thu 04 Apr 2024 05:55:26 +0000
ROA not after:            Thu 03 Apr 2025 06:00:26 +0000
asID:                     262749
IP address blocks:        189.89.88.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/9DAC040D005E337E60D8E70413DC135C767316A4.crl
                          rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/9DAC040D005E337E60D8E70413DC135C767316A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DAC040D005E337E60D8E70413DC135C767316A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:42:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:fe:b0:ad:55:e5:d3:10:b8:00:78:f6:fc:7e:23:72:70:c1:e4:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DAC040D005E337E60D8E70413DC135C767316A4
        Validity
            Not Before: Apr  4 05:55:26 2024 GMT
            Not After : Apr  3 06:00:26 2025 GMT
        Subject: CN=7DF95990551FD0461FAA6C90FD8B0C9C969836BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ec:f8:1d:eb:ea:76:5d:a1:e2:3f:47:31:95:
                    7e:8e:26:df:3b:c9:1b:ee:93:88:55:84:d4:19:e6:
                    fd:0f:92:e8:66:b2:44:13:51:8a:86:b4:00:2a:9e:
                    a3:c8:f5:92:46:8d:fc:8e:ce:f7:6b:25:b4:c0:d7:
                    68:72:b2:9b:99:76:2d:43:52:0b:06:4b:7d:d4:4a:
                    3d:5b:94:b7:6e:04:9b:08:1d:be:2d:e7:45:22:12:
                    27:39:3a:ec:db:d9:6c:82:16:7c:1e:59:be:c4:1d:
                    34:88:b2:48:11:7c:9c:c3:19:1c:07:3c:05:de:15:
                    6b:45:f6:d6:d1:42:31:8b:d0:d1:b4:63:fa:bf:6e:
                    ae:bf:2f:7b:ba:92:b8:ed:57:61:0f:46:4f:77:c1:
                    92:74:38:2f:bb:f1:d3:95:3e:91:f9:4a:bf:45:38:
                    04:e9:99:bc:90:2f:5c:23:79:27:c8:da:64:21:c9:
                    a8:5e:3d:f5:fb:e3:47:34:41:b9:a2:2a:ae:88:56:
                    93:66:a3:7e:40:a3:b5:cd:bd:5a:bc:5b:09:26:04:
                    0b:6e:9e:28:d5:72:c7:31:f9:00:84:de:64:c2:58:
                    c8:c8:14:20:62:66:bb:4b:a4:11:9f:06:6a:f7:f8:
                    20:80:a6:d6:b2:83:01:e9:1c:10:9a:14:37:81:39:
                    b9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:F9:59:90:55:1F:D0:46:1F:AA:6C:90:FD:8B:0C:9C:96:98:36:BB
            X509v3 Authority Key Identifier:
                keyid:9D:AC:04:0D:00:5E:33:7E:60:D8:E7:04:13:DC:13:5C:76:73:16:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/9DAC040D005E337E60D8E70413DC135C767316A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DAC040D005E337E60D8E70413DC135C767316A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/3138392e38392e38382e302f32332d3233203d3e20323632373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:71:a0:f0:8f:dc:bd:f9:0d:30:4a:d5:d0:d9:c2:13:aa:0c:
         8b:73:7e:14:2a:d6:31:2e:e2:14:ff:1b:ed:49:9a:e0:71:1e:
         d8:98:3c:7f:1d:fe:a9:56:40:0a:36:05:be:4c:9c:6f:73:49:
         88:f0:4d:64:e2:5a:4a:16:ff:d2:67:0b:1c:32:3a:55:29:36:
         bf:d4:33:eb:9f:50:3e:ab:d6:fd:13:b3:c0:66:69:96:05:49:
         60:64:ca:25:cc:6d:47:7e:ff:e4:8b:78:e8:d6:13:71:2c:55:
         08:f1:0e:ce:b9:41:b0:cc:ef:67:97:7b:66:d1:58:6b:52:a3:
         a9:f3:55:d6:84:f9:d6:75:a8:d3:ed:dd:00:c4:21:6d:c3:25:
         d7:8e:93:76:cd:97:82:e1:3c:06:d0:43:37:1b:6a:89:8f:a3:
         79:3e:b2:2c:4e:e1:82:fd:16:c7:f1:06:be:59:1b:36:a1:29:
         41:68:af:05:26:e8:44:4b:4b:7a:3b:3d:dd:d2:5c:d9:a7:ff:
         2d:ae:32:6d:c7:04:c0:c2:3f:29:a5:b3:2a:f1:bd:58:68:68:
         0d:58:fd:90:8b:b7:53:6d:ed:75:ee:fd:28:ce:db:8c:8d:c8:
         d8:12:81:f3:49:43:9c:72:c9:7b:a3:93:dd:ad:c7:71:42:bc:
         4d:41:5d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:52 2024 by rpki-client on console-ams.rpki-client.org