Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/3138392e38392e39352e302f32342d3234203d3e20323632373439.roa
File:                     3138392e38392e39352e302f32342d3234203d3e20323632373439.roa (raw, json)
Hash identifier:          OEI+qQvDSHi85LDFtl8ALefS3dpP35FMmc7Emok8tWc=
Subject key identifier:   8E:11:A7:E3:6F:BC:A9:5D:6D:EA:86:4A:1B:84:FA:DE:82:CD:7F:54
Certificate issuer:       /CN=9DAC040D005E337E60D8E70413DC135C767316A4
Certificate serial:       0B100FBDBB3842C0E8826C1185D48E896DFD3E34
Authority key identifier: 9D:AC:04:0D:00:5E:33:7E:60:D8:E7:04:13:DC:13:5C:76:73:16:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DAC040D005E337E60D8E70413DC135C767316A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/3138392e38392e39352e302f32342d3234203d3e20323632373439.roa
Signing time:             Thu 04 Apr 2024 06:00:26 +0000
ROA not before:           Thu 04 Apr 2024 05:55:26 +0000
ROA not after:            Thu 03 Apr 2025 06:00:26 +0000
asID:                     262749
IP address blocks:        189.89.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/9DAC040D005E337E60D8E70413DC135C767316A4.crl
                          rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/9DAC040D005E337E60D8E70413DC135C767316A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DAC040D005E337E60D8E70413DC135C767316A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:42:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:10:0f:bd:bb:38:42:c0:e8:82:6c:11:85:d4:8e:89:6d:fd:3e:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DAC040D005E337E60D8E70413DC135C767316A4
        Validity
            Not Before: Apr  4 05:55:26 2024 GMT
            Not After : Apr  3 06:00:26 2025 GMT
        Subject: CN=8E11A7E36FBCA95D6DEA864A1B84FADE82CD7F54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:94:fb:c9:7c:29:d2:4c:ab:36:b8:5c:5d:51:
                    69:0c:a2:af:08:14:bc:d6:ae:2a:53:db:cf:76:9c:
                    54:a3:54:b6:9f:37:e4:82:76:d6:18:ba:58:d8:16:
                    54:fe:4b:17:39:1e:a3:b1:93:53:ca:f0:96:50:1c:
                    17:df:2b:0a:21:4f:2b:a5:41:71:dc:3c:fb:6f:e7:
                    98:09:f7:fa:29:86:b7:42:c1:da:70:42:28:6a:5f:
                    43:1a:a9:23:f5:e8:30:06:cc:41:a1:69:f1:ce:20:
                    2f:a2:d7:bf:8f:4b:b2:96:e8:5c:6a:87:8e:f0:80:
                    ee:cb:fb:a9:91:9d:67:71:bb:6e:bd:32:99:88:18:
                    e2:09:73:4a:95:cc:9b:ae:17:41:b6:98:67:60:dd:
                    13:eb:4f:b3:9c:0d:7a:1f:05:6c:4d:99:bc:f0:8d:
                    e4:62:ea:94:e2:6b:25:50:63:bd:96:cb:9c:4e:90:
                    c3:40:5e:33:96:10:ab:93:53:87:93:1a:29:66:78:
                    e0:7d:34:5d:31:e7:12:89:f7:ab:ca:ed:50:15:c9:
                    c4:97:5f:6c:6b:9a:4a:c0:f1:5d:12:c6:cb:61:64:
                    47:71:c2:36:38:95:72:4c:06:31:17:28:05:4b:8c:
                    4a:1d:3b:73:55:b3:48:6a:e8:71:68:8d:1e:f7:22:
                    8b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:11:A7:E3:6F:BC:A9:5D:6D:EA:86:4A:1B:84:FA:DE:82:CD:7F:54
            X509v3 Authority Key Identifier:
                keyid:9D:AC:04:0D:00:5E:33:7E:60:D8:E7:04:13:DC:13:5C:76:73:16:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/9DAC040D005E337E60D8E70413DC135C767316A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DAC040D005E337E60D8E70413DC135C767316A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/3138392e38392e39352e302f32342d3234203d3e20323632373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:72:5a:64:e4:d8:9d:59:96:3a:06:2f:0f:f9:e9:14:9f:6f:
         9e:1a:a3:a4:74:1f:bb:aa:25:b2:cf:a3:05:a2:06:c6:84:ba:
         2d:32:e8:80:72:07:fc:76:31:0d:3d:e5:51:f0:c4:68:ff:04:
         af:2f:c1:42:f5:ce:c2:df:7b:05:02:7c:f2:fc:d7:41:d1:cf:
         6b:06:14:dd:92:cb:54:53:4b:43:3e:69:2b:19:e7:e8:8b:fe:
         30:02:87:a7:ba:06:00:b9:31:92:2e:e4:60:c2:2b:09:06:ac:
         c3:e3:e5:66:d8:70:62:75:49:6c:35:c1:17:1d:4d:a9:ae:bf:
         43:5f:ea:20:b0:7e:d4:0d:d6:8d:bc:49:75:c1:54:0b:b1:8e:
         4b:3a:3c:3c:dd:57:50:06:06:70:36:1d:ab:1e:e1:6b:39:49:
         f2:fc:eb:f3:5b:21:fd:62:67:a5:3f:a5:70:c3:56:41:2d:b0:
         3b:0f:50:b0:5f:b0:4b:84:2f:16:c6:70:2b:fe:da:05:08:05:
         d8:bb:0c:bd:5f:39:b4:16:95:a0:2b:44:de:67:58:9d:73:35:
         c4:34:6c:8b:16:c9:c3:77:07:0b:34:ba:73:06:d2:9d:c2:ce:
         25:80:e4:ce:01:61:78:e3:f4:98:cf:e3:16:cf:ef:5c:4c:04:
         39:34:49:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:52 2024 by rpki-client on console-ams.rpki-client.org