Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e302e302f32302d3332203d3e203238313832.roa
File:                     3138392e38392e302e302f32302d3332203d3e203238313832.roa (raw, json)
Hash identifier:          4SPFnh+XCGJKInP3mULl0houLbQpurE5t6g9emEF24I=
Subject key identifier:   4C:57:8A:10:28:9E:C3:D9:79:3C:03:ED:97:0B:50:D4:60:99:5E:47
Certificate issuer:       /CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
Certificate serial:       7A081D5479BB746C78E584C66B0F2480104F3C8F
Authority key identifier: 68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e302e302f32302d3332203d3e203238313832.roa
Signing time:             Wed 17 Apr 2024 13:10:37 +0000
ROA not before:           Wed 17 Apr 2024 13:05:37 +0000
ROA not after:            Wed 16 Apr 2025 13:10:37 +0000
asID:                     28182
IP address blocks:        189.89.0.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.crl
                          rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 04:42:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:08:1d:54:79:bb:74:6c:78:e5:84:c6:6b:0f:24:80:10:4f:3c:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
        Validity
            Not Before: Apr 17 13:05:37 2024 GMT
            Not After : Apr 16 13:10:37 2025 GMT
        Subject: CN=4C578A10289EC3D9793C03ED970B50D460995E47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c9:bf:95:c5:c4:e2:c4:7b:d7:05:35:19:16:
                    9c:9d:48:1b:79:a6:bc:0e:36:60:b7:1e:1f:e4:f3:
                    d5:3b:67:8e:17:ef:98:2f:03:e0:99:23:09:d5:8e:
                    92:b4:54:91:5a:55:8c:9f:e2:4c:89:ad:1f:8e:79:
                    4d:f6:99:12:64:eb:9a:82:df:03:46:a4:03:08:8f:
                    cf:f2:0c:dc:19:42:78:03:b5:03:13:56:be:b1:c2:
                    9c:17:a8:23:27:d2:b6:68:a1:55:48:f3:fe:2e:33:
                    72:a7:7e:38:e4:b1:2f:19:3f:43:46:f1:ee:a9:85:
                    2f:0e:9e:74:55:2c:63:be:23:2a:18:63:55:7e:f5:
                    c3:24:c2:98:2a:30:a4:0f:a2:f5:4a:20:29:f1:e1:
                    42:a5:b8:50:9d:8f:6e:f9:c5:65:0c:e4:7d:12:83:
                    7f:e2:99:cc:ef:cc:3e:92:2a:3e:0d:7b:f6:77:ee:
                    b1:ef:d6:5b:c6:ce:ed:e1:26:c7:1a:28:49:b9:09:
                    99:f0:2e:7d:b5:88:50:4a:cf:34:e1:ff:38:91:53:
                    c6:a6:27:e0:c5:d4:9a:7c:cd:9d:5a:18:9f:04:4d:
                    02:80:65:81:44:42:6a:6a:8a:10:94:41:90:57:a5:
                    bf:f3:80:04:b7:0d:c6:c6:4c:5c:59:75:88:93:45:
                    58:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:57:8A:10:28:9E:C3:D9:79:3C:03:ED:97:0B:50:D4:60:99:5E:47
            X509v3 Authority Key Identifier:
                keyid:68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e302e302f32302d3332203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         bf:2a:92:7c:f8:ae:f2:51:f3:d1:d8:84:92:bc:e9:8d:80:e7:
         78:89:81:ea:c5:d6:89:f9:e7:5e:d0:f7:0c:20:59:4c:38:0e:
         d7:ab:0f:84:4b:50:07:9e:d3:5b:1e:23:f2:0f:78:ef:79:cd:
         58:97:d4:69:3a:70:04:4d:e4:c3:57:1e:4a:e3:ca:2c:c5:f4:
         c5:8c:68:8b:d3:59:62:ea:6d:60:9f:9b:ab:18:64:32:c7:8d:
         15:52:a3:53:e9:70:f2:f9:0d:a6:5d:63:07:c8:90:27:5b:4d:
         f4:5e:ff:c5:5c:fc:49:4b:b4:73:7e:2e:91:89:aa:08:fe:e3:
         69:ff:12:06:4c:89:0b:a1:1d:eb:93:d9:b8:7e:c7:e4:23:29:
         94:14:4e:f3:c9:ba:7e:4e:b4:6a:ef:93:5c:8f:fe:eb:32:95:
         89:1c:52:5b:05:7b:aa:f3:5e:5a:54:ef:f6:c5:d8:e2:7e:30:
         ba:08:d7:31:42:ba:f1:1c:b9:9d:1b:b7:53:cb:44:fd:e3:c3:
         0e:89:d3:73:43:1d:63:52:4f:8f:98:60:c2:fb:1d:30:3b:75:
         c2:2f:9e:21:63:f1:25:88:94:31:c4:85:3f:0f:f7:96:3d:e4:
         fb:93:e1:74:39:e7:f0:1b:70:9a:52:40:5d:7c:bc:50:9c:e1:
         22:7e:1a:02
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUeggdVHm7dGx45YTGaw8kgBBPPI8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjhFM0YwQzdCRTRGQTAxNzUyNENFMjI0NEU0QUE4MzYz
NDQ2RkQwRDAeFw0yNDA0MTcxMzA1MzdaFw0yNTA0MTYxMzEwMzdaMDMxMTAvBgNV
BAMTKDRDNTc4QTEwMjg5RUMzRDk3OTNDMDNFRDk3MEI1MEQ0NjA5OTVFNDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfyb+VxcTixHvXBTUZFpydSBt5
prwONmC3Hh/k89U7Z44X75gvA+CZIwnVjpK0VJFaVYyf4kyJrR+OeU32mRJk65qC
3wNGpAMIj8/yDNwZQngDtQMTVr6xwpwXqCMn0rZooVVI8/4uM3KnfjjksS8ZP0NG
8e6phS8OnnRVLGO+IyoYY1V+9cMkwpgqMKQPovVKICnx4UKluFCdj275xWUM5H0S
g3/imczvzD6SKj4Ne/Z37rHv1lvGzu3hJscaKEm5CZnwLn21iFBKzzTh/ziRU8am
J+DF1Jp8zZ1aGJ8ETQKAZYFEQmpqihCUQZBXpb/zgAS3DcbGTFxZdYiTRVhfAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUTFeKECiew9l5PAPtlwtQ1GCZXkcwHwYDVR0j
BBgwFoAUaOPwx75PoBdSTOIkTkqoNjRG/Q0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3Vqejg5dUE1VThIZ3UyNlM3ZEdqYXdhS3dWS2o0V3RFUkY0NlJDbXJw
NnovMC82OEUzRjBDN0JFNEZBMDE3NTI0Q0UyMjQ0RTRBQTgzNjM0NDZGRDBELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4RTNGMEM3QkU0RkEwMTc1
MjRDRTIyNDRFNEFBODM2MzQ0NkZEMEQuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d1ano4OXVBNVU4SGd1MjZTN2RHamF3YUt3VktqNFd0RVJGNDZSQ21ycDZ6LzAv
MzEzODM5MmUzODM5MmUzMDJlMzAyZjMyMzAyZDMzMzIyMDNkM2UyMDMyMzgzMTM4
MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAS9WQAwDQYJKoZIhvcNAQELBQADggEBAL8qknz4rvJR89HY
hJK86Y2A53iJgerF1on5517Q9wwgWUw4DterD4RLUAee01seI/IPeO95zViX1Gk6
cARN5MNXHkrjyizF9MWMaIvTWWLqbWCfm6sYZDLHjRVSo1PpcPL5DaZdYwfIkCdb
TfRe/8Vc/ElLtHN+LpGJqgj+42n/EgZMiQuhHeuT2bh+x+QjKZQUTvPJun5OtGrv
k1yP/usylYkcUlsFe6rzXlpU7/bF2OJ+MLoI1zFCuvEcuZ0bt1PLRP3jww6J03ND
HWNST4+YYML7HTA7dcIvniFj8SWIlDHEhT8P95Y95PuT4XQ55/AbcJpSQF18vFCc
4SJ+GgI=
-----END CERTIFICATE-----
Generated at Fri Jun 28 05:28:10 2024 by rpki-client on console-ams.rpki-client.org