Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/3138392e38392e39322e302f32322d3232203d3e20323632373439.roa
File:                     3138392e38392e39322e302f32322d3232203d3e20323632373439.roa (raw, json)
Hash identifier:          mK1KQxAFSCU7IF38vZkoAqwYlPwaO4M3tXjNk9EpLIo=
Subject key identifier:   A6:47:BC:2A:97:9A:93:AF:EE:1B:81:3D:10:11:8D:87:0D:E5:4D:4C
Certificate issuer:       /CN=9DAC040D005E337E60D8E70413DC135C767316A4
Certificate serial:       296FF32BA89F80C9609901CEF765A90FA3BD6EFA
Authority key identifier: 9D:AC:04:0D:00:5E:33:7E:60:D8:E7:04:13:DC:13:5C:76:73:16:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DAC040D005E337E60D8E70413DC135C767316A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/3138392e38392e39322e302f32322d3232203d3e20323632373439.roa
Signing time:             Thu 06 Mar 2025 07:00:20 +0000
ROA not before:           Thu 06 Mar 2025 06:55:20 +0000
ROA not after:            Thu 05 Mar 2026 07:00:20 +0000
asID:                     262749
IP address blocks:        189.89.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/9DAC040D005E337E60D8E70413DC135C767316A4.crl
                          rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/9DAC040D005E337E60D8E70413DC135C767316A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DAC040D005E337E60D8E70413DC135C767316A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 00:09:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:6f:f3:2b:a8:9f:80:c9:60:99:01:ce:f7:65:a9:0f:a3:bd:6e:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DAC040D005E337E60D8E70413DC135C767316A4
        Validity
            Not Before: Mar  6 06:55:20 2025 GMT
            Not After : Mar  5 07:00:20 2026 GMT
        Subject: CN=A647BC2A979A93AFEE1B813D10118D870DE54D4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:53:20:7d:ff:eb:bb:1d:36:40:9a:5a:61:5e:
                    61:8d:87:4e:77:99:a5:bc:88:f7:f2:67:f8:eb:89:
                    12:0e:01:02:ae:a5:3b:1f:fb:4c:c4:16:41:c9:b7:
                    e1:5f:e7:be:7c:4e:6b:82:88:12:04:63:67:90:4f:
                    9a:7c:f8:5b:25:fc:7e:7c:68:a2:7b:90:73:14:8f:
                    cb:fa:5f:56:d6:16:3e:f5:37:6e:3a:4c:bf:6e:68:
                    c8:21:22:9b:0f:a9:a1:46:85:7d:06:70:8d:b1:5b:
                    23:f9:e7:96:58:cf:0c:d7:d3:f9:5b:38:19:2c:89:
                    91:c1:34:9f:cc:ce:69:03:2f:d2:85:b2:b0:41:26:
                    c7:aa:33:e5:a5:f5:b0:34:96:c7:09:d7:07:83:bd:
                    03:19:02:26:96:ca:ca:33:24:e2:23:dd:ff:89:6f:
                    df:c1:40:12:e6:98:03:7b:25:d9:cf:91:09:72:e2:
                    0c:36:4c:61:e1:81:51:c9:70:de:05:32:74:73:e1:
                    0f:4d:21:21:2c:49:a0:86:dd:59:0d:2e:86:c7:51:
                    d4:cc:1e:c9:e6:39:5b:7d:db:04:55:d6:bb:6e:cf:
                    0f:f8:6d:37:56:76:0a:18:8d:1e:19:fa:7d:60:5b:
                    66:c0:a8:fc:42:2a:fd:6d:8f:32:13:81:63:d3:f8:
                    60:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:47:BC:2A:97:9A:93:AF:EE:1B:81:3D:10:11:8D:87:0D:E5:4D:4C
            X509v3 Authority Key Identifier:
                keyid:9D:AC:04:0D:00:5E:33:7E:60:D8:E7:04:13:DC:13:5C:76:73:16:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/9DAC040D005E337E60D8E70413DC135C767316A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DAC040D005E337E60D8E70413DC135C767316A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/3138392e38392e39322e302f32322d3232203d3e20323632373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:70:d2:43:2b:d6:35:93:8e:ac:78:d0:a1:22:38:a5:f4:87:
         db:8a:42:19:44:28:d1:8b:8a:99:4d:08:00:ff:32:ed:b2:9e:
         39:69:47:04:29:bf:e6:d0:17:6f:9d:47:20:16:93:10:bc:ec:
         28:f5:12:9b:40:28:22:7d:e5:62:2a:e4:d9:89:4c:a7:1f:85:
         a0:cc:08:75:cf:1b:fa:02:fe:a1:97:31:22:25:2b:37:f9:f0:
         bc:2e:72:3e:34:19:49:90:17:85:8d:8c:eb:87:6d:50:25:02:
         25:11:f3:8d:1e:a6:ea:85:74:b8:b3:d5:a6:9c:96:b3:ee:06:
         e5:53:ec:eb:a8:95:8a:0a:6b:74:cd:f6:67:52:85:7f:1f:6e:
         27:5b:ee:1c:bc:7e:4c:f8:28:76:89:e1:a3:45:c3:d2:7d:f2:
         cb:14:56:2b:f7:17:2b:5e:bc:bc:4c:09:27:63:30:47:7e:dd:
         ab:cc:c6:20:c7:1d:06:81:1e:6a:ed:fc:96:ee:7a:8c:22:3e:
         4d:a4:48:b8:25:30:ab:23:2a:26:1e:56:a0:9f:71:33:3c:bb:
         a5:b2:33:3e:37:01:7f:25:72:67:53:97:ee:5f:27:91:dc:7d:
         a7:6b:39:2f:32:65:2a:d0:ff:11:00:17:46:af:c1:c2:bb:95:
         ab:cb:96:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:48:57 2025 by rpki-client