Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/3138392e38392e39342e302f32342d3234203d3e20323632373439.roa
File:                     3138392e38392e39342e302f32342d3234203d3e20323632373439.roa (raw, json)
Hash identifier:          KqWqUryIJHUWCOZtx+NIDr3Nuh6Pkyo7QorswsPCNNM=
Subject key identifier:   E6:30:8C:4A:77:DD:60:FE:F7:08:61:67:30:47:34:37:24:0B:1D:31
Certificate issuer:       /CN=9DAC040D005E337E60D8E70413DC135C767316A4
Certificate serial:       420F9549B1F5D88B24C0180F3B58E919704FF68E
Authority key identifier: 9D:AC:04:0D:00:5E:33:7E:60:D8:E7:04:13:DC:13:5C:76:73:16:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DAC040D005E337E60D8E70413DC135C767316A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/3138392e38392e39342e302f32342d3234203d3e20323632373439.roa
Signing time:             Thu 04 Apr 2024 06:00:27 +0000
ROA not before:           Thu 04 Apr 2024 05:55:27 +0000
ROA not after:            Thu 03 Apr 2025 06:00:27 +0000
asID:                     262749
IP address blocks:        189.89.94.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/9DAC040D005E337E60D8E70413DC135C767316A4.crl
                          rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/9DAC040D005E337E60D8E70413DC135C767316A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DAC040D005E337E60D8E70413DC135C767316A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:42:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:0f:95:49:b1:f5:d8:8b:24:c0:18:0f:3b:58:e9:19:70:4f:f6:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DAC040D005E337E60D8E70413DC135C767316A4
        Validity
            Not Before: Apr  4 05:55:27 2024 GMT
            Not After : Apr  3 06:00:27 2025 GMT
        Subject: CN=E6308C4A77DD60FEF708616730473437240B1D31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:99:2b:55:af:e7:d3:89:41:c0:80:ee:9f:62:
                    e7:e0:5d:ea:05:2e:6a:a4:83:cf:82:d0:fc:6a:32:
                    42:c9:6f:e2:b8:34:22:a4:19:8b:44:a6:88:9b:46:
                    b3:a3:e3:09:18:66:bc:13:6d:74:b5:93:18:10:8c:
                    d5:ab:46:01:95:c5:7e:1d:3b:a3:f3:84:0a:c6:ab:
                    e3:6d:2d:06:2b:0e:19:d6:0a:d6:48:9f:46:d6:d1:
                    e0:b4:f6:44:e5:5f:e2:08:8f:39:2d:5a:a0:1d:f0:
                    f5:67:12:31:a3:98:ee:6f:98:e7:5d:2a:e2:99:a9:
                    a2:01:79:54:84:c0:42:a3:5f:0d:2d:e7:a9:9f:f4:
                    ba:2f:3c:b2:40:ee:3d:f7:35:ca:1e:a6:61:7e:66:
                    b5:af:df:dd:0c:8f:3f:bc:61:c5:2a:fb:0a:94:4d:
                    d7:10:64:6f:0e:76:1e:85:33:62:0c:c7:bc:ef:c4:
                    41:30:de:c4:cb:af:07:78:e2:87:a8:4a:7e:b0:f3:
                    d4:f5:9c:0f:ca:f4:0f:52:d9:9d:bf:ec:13:c2:c4:
                    00:3b:24:c8:9d:aa:e6:34:a8:ad:81:2d:d1:c9:2c:
                    af:a1:03:33:33:1c:54:aa:47:3d:f4:43:b9:a7:fb:
                    20:bc:84:8e:91:e5:7f:e0:a5:d4:1d:89:08:85:f4:
                    70:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:30:8C:4A:77:DD:60:FE:F7:08:61:67:30:47:34:37:24:0B:1D:31
            X509v3 Authority Key Identifier:
                keyid:9D:AC:04:0D:00:5E:33:7E:60:D8:E7:04:13:DC:13:5C:76:73:16:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/9DAC040D005E337E60D8E70413DC135C767316A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DAC040D005E337E60D8E70413DC135C767316A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/3138392e38392e39342e302f32342d3234203d3e20323632373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:31:10:40:bf:08:e6:27:cf:49:ca:75:0d:8e:fb:85:45:c7:
         af:33:c8:70:b3:21:77:be:42:c5:41:bc:d3:c1:45:fa:7d:1c:
         4b:be:cb:b4:f2:a6:0d:c3:12:ab:b7:a9:45:af:f2:9d:52:03:
         64:41:55:67:e0:82:bd:3f:e1:3d:0e:14:ab:dc:8f:ab:8c:78:
         a3:8e:d8:f9:a0:52:9d:a2:1c:50:90:f9:72:26:e1:1d:c5:05:
         01:5e:f5:34:97:b2:e5:29:5c:2c:dd:52:53:00:02:f3:9d:1b:
         fc:a7:26:fb:61:9d:ab:56:50:21:9d:5f:4c:cc:10:e7:b4:98:
         f3:17:e5:24:0c:d8:6c:93:ab:88:5e:eb:8f:d5:a3:10:51:83:
         ba:56:19:7b:c0:d8:c5:e6:a5:f8:61:07:59:c6:c7:85:69:39:
         7f:8f:7b:d3:7c:3f:ba:b7:98:fb:26:84:c5:de:ce:59:54:78:
         fc:7a:a6:eb:80:44:48:b1:38:a9:1f:62:4b:34:7c:99:82:82:
         e4:a0:85:2d:90:de:b8:46:d2:84:3e:af:46:8a:04:49:8e:06:
         fe:bf:d8:40:5a:ac:2a:46:5d:c1:7d:89:09:a4:a5:21:3f:05:
         11:04:8e:15:08:5c:bb:b0:fd:f3:15:e1:01:cd:e7:0c:26:84:
         4d:9a:c8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:02 2024 by rpki-client on console-fra.rpki-client.org