Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/3138392e38392e39302e302f32332d3233203d3e20323632373439.roa
File:                     3138392e38392e39302e302f32332d3233203d3e20323632373439.roa (raw, json)
Hash identifier:          84gLHt+JOAS+VvOJjaqbxhvajyXJ45bfv6lqREeFM1A=
Subject key identifier:   90:F1:8E:E8:3E:C5:94:DD:6B:22:42:24:FA:39:C8:F3:2D:C4:FA:BE
Certificate issuer:       /CN=9DAC040D005E337E60D8E70413DC135C767316A4
Certificate serial:       1E0FE5ADB944D16B654B7AC982E51F6D3DBA8C55
Authority key identifier: 9D:AC:04:0D:00:5E:33:7E:60:D8:E7:04:13:DC:13:5C:76:73:16:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DAC040D005E337E60D8E70413DC135C767316A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/3138392e38392e39302e302f32332d3233203d3e20323632373439.roa
Signing time:             Thu 06 Mar 2025 07:00:18 +0000
ROA not before:           Thu 06 Mar 2025 06:55:18 +0000
ROA not after:            Thu 05 Mar 2026 07:00:18 +0000
asID:                     262749
IP address blocks:        189.89.90.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/9DAC040D005E337E60D8E70413DC135C767316A4.crl
                          rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/9DAC040D005E337E60D8E70413DC135C767316A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DAC040D005E337E60D8E70413DC135C767316A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 11:46:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:0f:e5:ad:b9:44:d1:6b:65:4b:7a:c9:82:e5:1f:6d:3d:ba:8c:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DAC040D005E337E60D8E70413DC135C767316A4
        Validity
            Not Before: Mar  6 06:55:18 2025 GMT
            Not After : Mar  5 07:00:18 2026 GMT
        Subject: CN=90F18EE83EC594DD6B224224FA39C8F32DC4FABE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b1:8e:96:47:a4:3a:af:29:29:26:d6:d9:94:
                    4a:8d:d4:37:dd:54:db:4c:7a:b6:6e:42:9e:8d:04:
                    f4:36:4a:07:be:ea:88:3f:f4:86:51:e9:16:b1:af:
                    17:d1:34:cf:19:ec:b2:d1:09:77:ed:b8:27:47:36:
                    eb:db:b5:c5:a9:e3:5f:e8:8d:96:35:dc:06:db:5f:
                    d1:f6:8d:8b:a2:61:75:fe:d3:ce:35:05:3d:24:5d:
                    3c:7f:13:80:db:80:c5:12:76:26:a0:d4:7e:8e:d9:
                    6e:f4:5e:3d:b3:04:56:cb:ce:27:48:b4:ce:d0:cc:
                    0d:4b:70:cb:c3:f6:8c:c9:99:88:bd:0c:97:94:c2:
                    56:2b:a0:c2:b4:6c:a0:aa:8f:6d:69:5d:9e:cc:c1:
                    23:1e:1d:62:31:93:d3:e6:6c:e2:0d:c9:b0:d9:45:
                    88:12:20:9b:6a:4f:1a:62:f6:e5:b4:26:79:11:a3:
                    a9:b5:22:3e:36:59:20:45:00:b6:15:24:3a:b5:49:
                    31:78:3d:db:ab:cc:08:88:9e:85:87:3f:9d:2f:4b:
                    ac:3f:f0:88:01:96:56:79:9c:9a:e1:a5:a6:1d:9d:
                    09:7e:d0:68:c5:b2:f7:20:9a:ff:d2:4d:b1:c3:49:
                    ef:31:da:73:13:39:31:3d:27:0f:9e:2e:cd:c5:74:
                    ea:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:F1:8E:E8:3E:C5:94:DD:6B:22:42:24:FA:39:C8:F3:2D:C4:FA:BE
            X509v3 Authority Key Identifier:
                keyid:9D:AC:04:0D:00:5E:33:7E:60:D8:E7:04:13:DC:13:5C:76:73:16:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/9DAC040D005E337E60D8E70413DC135C767316A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DAC040D005E337E60D8E70413DC135C767316A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/3138392e38392e39302e302f32332d3233203d3e20323632373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:25:87:f4:9f:a2:6a:c4:a4:58:0d:cf:9f:d4:6d:c2:63:43:
         5f:d6:5c:c9:65:b8:e6:e6:d0:67:2c:71:36:26:d0:ab:f0:7e:
         14:59:e1:e9:73:89:84:8e:ce:57:94:46:c2:9c:73:86:64:45:
         60:2f:e9:3a:a9:5e:1a:1b:42:5d:e6:db:f5:b2:2c:ad:34:70:
         3d:42:37:2d:a0:4e:47:88:3f:4e:fb:36:3d:da:6f:ab:28:79:
         bc:b2:87:78:55:6c:fa:10:db:e4:ea:59:29:d5:05:1c:c4:1b:
         8e:8e:df:b8:d2:9c:51:2b:e8:32:db:da:12:a9:db:a8:8d:8c:
         3d:bc:86:f9:a6:52:04:b3:b5:8c:32:17:7c:ec:66:af:ad:52:
         3a:fd:73:52:47:db:83:50:36:4c:96:f5:8a:48:5e:fb:56:72:
         02:87:cd:38:ac:95:ce:31:c9:65:0f:1c:8e:69:a0:2e:e8:23:
         01:16:2b:03:ab:d9:bd:45:be:d9:37:e9:7f:d1:31:84:99:40:
         b1:d0:3d:e6:54:45:15:99:c4:ad:9f:81:5b:3e:7d:3b:02:c5:
         ef:1d:05:61:a6:4b:ea:7b:06:c9:bf:8a:38:fa:8d:00:78:36:
         82:d0:16:ca:e2:34:bf:10:de:2e:f5:b4:1f:a0:b0:5f:86:f7:
         06:a5:3d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:02:53 2025 by rpki-client