Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/3138392e38392e38382e302f32332d3233203d3e20323632373439.roa
File:                     3138392e38392e38382e302f32332d3233203d3e20323632373439.roa (raw, json)
Hash identifier:          qaq8H5HTV5Ti201dmW55Mcj6lf9vIapqYRbIkXQdHoM=
Subject key identifier:   38:AF:1F:0B:C7:B7:78:9B:89:1D:19:64:5A:56:8D:B7:3E:A9:CF:4E
Certificate issuer:       /CN=9DAC040D005E337E60D8E70413DC135C767316A4
Certificate serial:       19218FD147789D3F2B7DF5F2249BE3AE549465E0
Authority key identifier: 9D:AC:04:0D:00:5E:33:7E:60:D8:E7:04:13:DC:13:5C:76:73:16:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DAC040D005E337E60D8E70413DC135C767316A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/3138392e38392e38382e302f32332d3233203d3e20323632373439.roa
Signing time:             Thu 06 Mar 2025 07:00:20 +0000
ROA not before:           Thu 06 Mar 2025 06:55:20 +0000
ROA not after:            Thu 05 Mar 2026 07:00:20 +0000
asID:                     262749
IP address blocks:        189.89.88.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/9DAC040D005E337E60D8E70413DC135C767316A4.crl
                          rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/9DAC040D005E337E60D8E70413DC135C767316A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DAC040D005E337E60D8E70413DC135C767316A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 00:09:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:21:8f:d1:47:78:9d:3f:2b:7d:f5:f2:24:9b:e3:ae:54:94:65:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DAC040D005E337E60D8E70413DC135C767316A4
        Validity
            Not Before: Mar  6 06:55:20 2025 GMT
            Not After : Mar  5 07:00:20 2026 GMT
        Subject: CN=38AF1F0BC7B7789B891D19645A568DB73EA9CF4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b8:77:b9:30:4e:31:89:ce:70:42:ec:88:79:
                    f2:19:34:18:88:d5:83:7b:52:15:23:78:14:ce:48:
                    0b:22:2f:36:5e:1a:85:05:a9:9e:6b:a3:fa:5a:e7:
                    b3:52:b4:d9:54:1c:5a:4c:59:f7:f3:e7:9d:f2:08:
                    fe:32:01:16:5c:43:52:b0:e8:c2:82:fe:07:c5:68:
                    27:4c:08:fa:6c:cf:c5:0a:f7:62:93:48:27:bb:4c:
                    ae:a4:3c:57:46:2e:cc:15:f0:83:80:84:80:4b:91:
                    fc:42:e7:3e:fa:7e:be:c0:5b:2b:3d:3a:d8:b6:ff:
                    c5:a5:a1:aa:d7:bf:3f:8b:bc:a1:76:66:fe:33:28:
                    ef:56:02:7a:70:93:61:66:d5:f4:c4:fc:ff:7e:38:
                    96:2d:7e:bf:26:42:4b:06:fb:33:7b:60:b7:81:da:
                    19:e3:92:eb:99:f2:cf:2d:c0:ff:02:0c:a8:71:ed:
                    1f:a9:63:3f:9f:8d:f3:19:08:74:ef:97:32:db:78:
                    ca:f1:98:2b:97:95:9d:fc:a3:b8:b1:82:95:7b:10:
                    2d:2b:c9:27:3d:81:a9:e0:81:89:21:ce:88:92:a7:
                    4c:cc:97:1a:46:c1:9a:90:14:2c:0f:bf:27:0f:cd:
                    b6:ab:23:e4:7f:a5:f2:10:39:8f:57:8f:b7:55:b9:
                    23:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:AF:1F:0B:C7:B7:78:9B:89:1D:19:64:5A:56:8D:B7:3E:A9:CF:4E
            X509v3 Authority Key Identifier:
                keyid:9D:AC:04:0D:00:5E:33:7E:60:D8:E7:04:13:DC:13:5C:76:73:16:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/9DAC040D005E337E60D8E70413DC135C767316A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DAC040D005E337E60D8E70413DC135C767316A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/3138392e38392e38382e302f32332d3233203d3e20323632373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:38:88:22:cc:9f:8c:e7:d6:df:2e:ea:da:d7:b8:17:21:e5:
         b2:12:53:0f:e9:f5:5f:ba:01:72:8b:85:95:4e:69:7a:35:f7:
         01:43:8c:d2:8a:50:92:51:93:67:0c:6d:25:a0:da:18:b2:2d:
         b4:c2:0a:c5:2f:c6:91:4c:de:cc:c5:f7:cb:47:a8:83:b8:59:
         3b:ea:9b:ed:2f:17:17:d3:9d:56:12:a7:47:65:3b:84:54:d6:
         17:65:ae:0e:d5:96:83:c9:15:31:6a:c2:40:ab:b3:9a:8e:ac:
         a8:2b:de:b8:96:8b:4d:72:4e:f0:07:ca:82:f3:27:7a:f3:b6:
         d7:7b:a7:27:94:a9:68:82:1b:bb:91:6f:03:d8:91:82:30:62:
         1f:ce:9b:32:bb:9f:f8:be:29:70:99:d3:42:d1:67:0b:eb:e2:
         f5:3e:0f:41:ab:37:15:26:7f:2c:d2:41:5f:3d:95:11:ec:3d:
         e9:62:cf:4c:7b:75:d1:a3:58:cd:23:52:3b:14:9a:95:3a:59:
         25:ae:16:7f:af:2f:b6:50:9d:75:b9:f6:69:bb:43:14:9c:5c:
         76:d2:e4:ae:03:c3:f6:ec:b0:92:fc:d3:b7:c4:96:0f:2f:c8:
         94:31:12:32:27:8d:d2:2f:07:13:ba:cc:56:66:c0:fc:be:9f:
         8a:9f:89:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:49:10 2025 by rpki-client