Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/3138392e38392e39312e302f32342d3234203d3e20323632373439.roa
File:                     3138392e38392e39312e302f32342d3234203d3e20323632373439.roa (raw, json)
Hash identifier:          LcLhuRM4fQH0vnEWSHWUmh8lwIhSU4Qqm7kq/CG/vMc=
Subject key identifier:   39:1D:C1:CF:CC:77:06:A9:CD:AC:70:C0:7F:20:EA:95:EC:F2:96:70
Certificate issuer:       /CN=9DAC040D005E337E60D8E70413DC135C767316A4
Certificate serial:       0B52ECD6522F74057674D3E6F538F0DE1411B24D
Authority key identifier: 9D:AC:04:0D:00:5E:33:7E:60:D8:E7:04:13:DC:13:5C:76:73:16:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DAC040D005E337E60D8E70413DC135C767316A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/3138392e38392e39312e302f32342d3234203d3e20323632373439.roa
Signing time:             Thu 04 Apr 2024 06:00:25 +0000
ROA not before:           Thu 04 Apr 2024 05:55:25 +0000
ROA not after:            Thu 03 Apr 2025 06:00:25 +0000
asID:                     262749
IP address blocks:        189.89.91.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/9DAC040D005E337E60D8E70413DC135C767316A4.crl
                          rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/9DAC040D005E337E60D8E70413DC135C767316A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DAC040D005E337E60D8E70413DC135C767316A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:42:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:52:ec:d6:52:2f:74:05:76:74:d3:e6:f5:38:f0:de:14:11:b2:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DAC040D005E337E60D8E70413DC135C767316A4
        Validity
            Not Before: Apr  4 05:55:25 2024 GMT
            Not After : Apr  3 06:00:25 2025 GMT
        Subject: CN=391DC1CFCC7706A9CDAC70C07F20EA95ECF29670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6f:55:61:06:44:d1:00:a7:19:bf:f8:95:15:
                    84:3c:bd:e0:ee:bb:80:46:ff:1c:82:cc:4c:91:58:
                    a5:07:67:9a:d0:63:53:5a:05:37:c9:92:16:87:1f:
                    45:e8:a1:c9:2b:ac:3b:66:bc:18:df:c0:2c:8f:69:
                    b2:61:7b:c6:fe:bd:34:18:fb:a2:9e:a6:f7:85:85:
                    74:3f:8f:e2:b4:7a:c7:be:9a:5f:f9:67:88:06:c2:
                    91:b5:71:44:72:b7:2e:75:ff:f9:80:dc:8d:b1:d7:
                    f4:47:02:ab:26:2d:fc:e7:bd:d6:0f:54:47:9a:68:
                    10:97:a2:d0:0b:67:57:08:18:22:0a:66:22:3e:f1:
                    87:ac:4c:c6:c0:ab:53:70:9a:fb:b9:cc:d7:02:de:
                    54:7d:c7:48:30:af:ae:cc:bf:9b:51:31:23:aa:44:
                    82:73:96:a1:fb:17:bb:4c:44:08:bf:3f:6a:1e:1f:
                    0b:a1:d3:d0:9e:05:82:e5:e2:a7:4a:1e:4a:f4:89:
                    51:d5:a9:56:80:4f:8c:5d:18:71:80:45:c5:b6:5a:
                    99:99:1b:3f:4b:09:4c:ea:10:4f:31:47:33:03:da:
                    1e:ce:b5:af:de:8e:9b:bd:6a:4f:70:43:38:a6:9f:
                    d7:7b:58:1b:d1:59:b3:9f:df:c7:dd:97:9b:50:99:
                    a4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:1D:C1:CF:CC:77:06:A9:CD:AC:70:C0:7F:20:EA:95:EC:F2:96:70
            X509v3 Authority Key Identifier:
                keyid:9D:AC:04:0D:00:5E:33:7E:60:D8:E7:04:13:DC:13:5C:76:73:16:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/9DAC040D005E337E60D8E70413DC135C767316A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DAC040D005E337E60D8E70413DC135C767316A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/3138392e38392e39312e302f32342d3234203d3e20323632373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:e5:a0:28:9d:63:88:f8:1c:60:b3:69:29:b0:f1:5e:70:8c:
         4d:59:69:dd:19:8e:50:ac:8d:ec:57:59:17:51:a6:3c:bf:e6:
         0f:27:95:76:45:0b:0f:68:5a:e5:b2:c9:b9:7c:8b:ab:c9:e5:
         ff:85:30:79:48:45:95:2a:66:50:7e:c1:be:ce:01:43:db:23:
         5a:54:eb:ce:f2:48:0d:32:c1:be:97:fa:af:84:91:a6:12:be:
         ea:81:84:b0:9a:c7:9c:b9:0d:72:12:9a:9f:91:4e:7e:f5:f7:
         44:8e:84:5c:ba:53:59:8e:33:2c:7d:a4:52:63:e9:3b:f4:42:
         48:e6:e3:fe:41:f2:0a:9e:19:93:27:29:77:5a:5d:b5:d6:33:
         53:14:13:bb:42:a7:2e:23:b1:ae:5f:ad:0c:1d:83:b8:4d:c5:
         2b:4b:9d:25:b0:b4:02:60:f6:c4:30:78:29:7a:9f:ed:fd:75:
         fd:cf:1c:e2:c1:c1:64:06:bc:ca:55:0f:81:81:a9:07:d7:ff:
         d8:1a:84:ed:93:7f:1d:b1:58:fa:79:92:cf:7b:94:bf:0a:97:
         92:47:6c:d2:79:3d:99:21:c9:23:3d:d4:40:ed:9e:95:5f:1b:
         47:04:14:ef:59:13:fd:24:5c:36:d9:33:55:1b:83:24:66:99:
         66:b1:f3:2b
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUC1Ls1lIvdAV2dNPm9Tjw3hQRsk0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOURBQzA0MEQwMDVFMzM3RTYwRDhFNzA0MTNEQzEzNUM3
NjczMTZBNDAeFw0yNDA0MDQwNTU1MjVaFw0yNTA0MDMwNjAwMjVaMDMxMTAvBgNV
BAMTKDM5MURDMUNGQ0M3NzA2QTlDREFDNzBDMDdGMjBFQTk1RUNGMjk2NzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGb1VhBkTRAKcZv/iVFYQ8veDu
u4BG/xyCzEyRWKUHZ5rQY1NaBTfJkhaHH0XoockrrDtmvBjfwCyPabJhe8b+vTQY
+6KepveFhXQ/j+K0ese+ml/5Z4gGwpG1cURyty51//mA3I2x1/RHAqsmLfznvdYP
VEeaaBCXotALZ1cIGCIKZiI+8YesTMbAq1Nwmvu5zNcC3lR9x0gwr67Mv5tRMSOq
RIJzlqH7F7tMRAi/P2oeHwuh09CeBYLl4qdKHkr0iVHVqVaAT4xdGHGARcW2WpmZ
Gz9LCUzqEE8xRzMD2h7Ota/ejpu9ak9wQzimn9d7WBvRWbOf38fdl5tQmaQNAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUOR3Bz8x3BqnNrHDAfyDqlezylnAwHwYDVR0j
BBgwFoAUnawEDQBeM35g2OcEE9wTXHZzFqQwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9GdHE4SnBGSnF0S3c4TnNid2hXUFdvam9mWHFjVGpidHBUd0JOUEVNYzNp
LzIvOURBQzA0MEQwMDVFMzM3RTYwRDhFNzA0MTNEQzEzNUM3NjczMTZBNC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS85REFDMDQwRDAwNUUzMzdFNjBE
OEU3MDQxM0RDMTM1Qzc2NzMxNkE0LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9G
dHE4SnBGSnF0S3c4TnNid2hXUFdvam9mWHFjVGpidHBUd0JOUEVNYzNpLzIvMzEz
ODM5MmUzODM5MmUzOTMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzcz
NDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQAvVlbMA0GCSqGSIb3DQEBCwUAA4IBAQBh5aAonWOI+Bxg
s2kpsPFecIxNWWndGY5QrI3sV1kXUaY8v+YPJ5V2RQsPaFrlssm5fIuryeX/hTB5
SEWVKmZQfsG+zgFD2yNaVOvO8kgNMsG+l/qvhJGmEr7qgYSwmsecuQ1yEpqfkU5+
9fdEjoRculNZjjMsfaRSY+k79EJI5uP+QfIKnhmTJyl3Wl211jNTFBO7QqcuI7Gu
X60MHYO4TcUrS50lsLQCYPbEMHgpep/t/XX9zxziwcFkBrzKVQ+BgakH1//YGoTt
k38dsVj6eZLPe5S/CpeSR2zSeT2ZIckjPdRA7Z6VXxtHBBTvWRP9JFw22TNVG4Mk
ZplmsfMr
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:52 2024 by rpki-client on console-ams.rpki-client.org