Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/3138392e38392e39322e302f32322d3232203d3e20323632373439.roa
File:                     3138392e38392e39322e302f32322d3232203d3e20323632373439.roa (raw, json)
Hash identifier:          5+8Q5S1WY8aFs8g4gjvYD/m/jORkYwluW0Cy384jY50=
Subject key identifier:   98:CB:1B:0D:26:48:E0:CB:DA:25:37:0A:33:5C:DE:D6:FD:F1:D9:4F
Certificate issuer:       /CN=9DAC040D005E337E60D8E70413DC135C767316A4
Certificate serial:       2105395B734439058598F2962F1BA661D881E388
Authority key identifier: 9D:AC:04:0D:00:5E:33:7E:60:D8:E7:04:13:DC:13:5C:76:73:16:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DAC040D005E337E60D8E70413DC135C767316A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/3138392e38392e39322e302f32322d3232203d3e20323632373439.roa
Signing time:             Thu 04 Apr 2024 06:00:25 +0000
ROA not before:           Thu 04 Apr 2024 05:55:25 +0000
ROA not after:            Thu 03 Apr 2025 06:00:25 +0000
asID:                     262749
IP address blocks:        189.89.92.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/9DAC040D005E337E60D8E70413DC135C767316A4.crl
                          rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/9DAC040D005E337E60D8E70413DC135C767316A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DAC040D005E337E60D8E70413DC135C767316A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:42:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:05:39:5b:73:44:39:05:85:98:f2:96:2f:1b:a6:61:d8:81:e3:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DAC040D005E337E60D8E70413DC135C767316A4
        Validity
            Not Before: Apr  4 05:55:25 2024 GMT
            Not After : Apr  3 06:00:25 2025 GMT
        Subject: CN=98CB1B0D2648E0CBDA25370A335CDED6FDF1D94F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:87:5f:59:13:a9:c3:54:2e:8f:05:5d:30:65:
                    a7:87:f0:7c:b9:0e:ed:a2:b3:e7:8f:01:f3:bf:f0:
                    df:1e:44:7a:94:49:3c:ec:f2:41:15:34:10:c4:ae:
                    93:4f:f3:a6:e4:b6:75:77:0f:2c:7a:c3:cc:99:e5:
                    d2:f1:17:08:45:60:ae:1a:f5:43:f9:84:73:22:11:
                    14:93:90:1a:7c:39:51:88:5a:17:d2:62:5f:3e:f5:
                    50:c9:07:f7:6a:58:08:86:58:db:48:92:b5:59:8e:
                    47:f9:0b:6a:5b:ec:56:88:32:57:5a:5f:1c:d8:36:
                    ee:2b:be:7f:f1:dc:4b:6d:f7:94:21:02:e6:75:3c:
                    dc:81:55:43:2c:fe:a7:23:9b:ea:ea:92:36:c5:a7:
                    6b:64:eb:4d:d2:f3:11:90:8e:50:a1:c8:54:a2:dd:
                    c6:a8:34:53:ca:03:f4:f8:e0:63:83:a3:1b:03:05:
                    00:b2:fb:9b:0c:dd:5f:18:b2:15:58:ae:ac:db:5b:
                    c7:d0:e8:89:78:2a:50:7a:9c:a2:3e:4b:ca:32:45:
                    c0:87:91:03:62:b4:17:20:fc:aa:35:6d:d5:48:ce:
                    87:fa:e1:d3:e6:80:e6:dd:d6:44:28:f1:09:88:06:
                    25:a1:6c:89:a6:3d:b7:6d:0a:6a:7e:0c:6c:0d:fb:
                    43:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:CB:1B:0D:26:48:E0:CB:DA:25:37:0A:33:5C:DE:D6:FD:F1:D9:4F
            X509v3 Authority Key Identifier:
                keyid:9D:AC:04:0D:00:5E:33:7E:60:D8:E7:04:13:DC:13:5C:76:73:16:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/9DAC040D005E337E60D8E70413DC135C767316A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DAC040D005E337E60D8E70413DC135C767316A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/3138392e38392e39322e302f32322d3232203d3e20323632373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:a4:67:7d:94:29:46:f6:6f:9c:65:f3:7e:e3:02:19:56:7e:
         17:b2:c4:c2:ed:89:f2:29:fe:82:0a:fe:49:4a:17:ac:ce:5f:
         78:58:b4:4c:0c:95:04:3f:7f:6d:3c:7e:39:60:86:0c:f2:29:
         62:32:a2:71:e5:d9:c9:18:e5:0b:4f:34:91:42:5b:e4:ea:70:
         89:b7:cc:e0:31:c3:66:bd:63:90:7c:51:a8:1c:10:2a:e2:e0:
         b7:ee:e2:7c:b9:56:8c:fc:f3:3b:b7:64:78:7f:d2:c0:77:73:
         02:ab:95:de:d0:4e:60:66:61:50:c4:79:17:f7:3a:7a:89:ca:
         e9:35:fb:85:db:ea:7a:c3:24:5a:cd:c8:d1:29:d1:16:aa:7e:
         25:75:f5:cd:67:23:12:9b:65:f9:c9:25:fa:8e:eb:e4:ab:03:
         b0:38:4a:20:e6:0f:4b:0e:d1:0e:f7:d1:2e:34:0b:70:5a:c5:
         4d:30:25:0e:b7:37:f2:cb:0f:e4:f9:b9:6b:22:81:2b:85:8b:
         e9:3f:f6:86:56:4d:d0:56:49:66:f0:2f:c8:88:d0:c8:e5:d4:
         4f:74:eb:96:97:08:b3:43:84:a3:44:f4:31:1a:86:32:8a:a6:
         29:ac:cc:64:92:6f:4c:f4:04:25:a0:49:6c:aa:16:94:4d:81:
         72:7b:16:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:52 2024 by rpki-client on console-ams.rpki-client.org