Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H73Dag9oyrGwW9yE8Cru1KBtoeefahJatbiyx4xH8wCo/0/3138392e33382e33322e302f32302d3234203d3e203238333039.roa
File:                     3138392e33382e33322e302f32302d3234203d3e203238333039.roa (raw, json)
Hash identifier:          9htZ/FrsfimiBtIRqe4S+q6Q8vdfYo+stxFxu6+6KXM=
Subject key identifier:   F5:22:2F:46:B8:E4:7E:37:DA:89:62:4B:38:F4:D1:E1:E5:4A:B1:D3
Certificate issuer:       /CN=69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123
Certificate serial:       3A4F868CB1F923FC5FC5A0F9107B6E5842FCAB2B
Authority key identifier: 69:DE:5A:D1:A5:B1:F9:78:84:D1:9D:C3:E9:EF:DA:3F:96:54:C1:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H73Dag9oyrGwW9yE8Cru1KBtoeefahJatbiyx4xH8wCo/0/3138392e33382e33322e302f32302d3234203d3e203238333039.roa
Signing time:             Thu 03 Apr 2025 13:12:28 +0000
ROA not before:           Thu 03 Apr 2025 13:07:28 +0000
ROA not after:            Thu 02 Apr 2026 13:12:28 +0000
asID:                     28309
IP address blocks:        189.38.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H73Dag9oyrGwW9yE8Cru1KBtoeefahJatbiyx4xH8wCo/0/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.crl
                          rsync://rpki-repo.registro.br/repo/H73Dag9oyrGwW9yE8Cru1KBtoeefahJatbiyx4xH8wCo/0/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 08:03:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:4f:86:8c:b1:f9:23:fc:5f:c5:a0:f9:10:7b:6e:58:42:fc:ab:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123
        Validity
            Not Before: Apr  3 13:07:28 2025 GMT
            Not After : Apr  2 13:12:28 2026 GMT
        Subject: CN=F5222F46B8E47E37DA89624B38F4D1E1E54AB1D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f3:3d:0e:7f:f7:e0:d3:34:50:64:0d:55:2a:
                    7d:10:25:68:82:5d:b3:59:6e:80:e9:af:e2:92:1b:
                    01:0f:ac:e3:5f:67:f9:1c:7f:43:70:db:51:cb:be:
                    0f:31:29:c6:55:2a:15:67:dd:54:23:aa:54:3d:a7:
                    02:a8:01:02:3f:63:de:9c:fe:39:a2:90:6f:cb:32:
                    6b:14:c2:7d:22:ee:68:a8:51:15:9c:76:a5:30:49:
                    40:9c:c4:de:65:36:5c:b1:b4:30:72:b6:f3:0c:c9:
                    cd:52:a5:f2:45:18:dd:1e:b3:c6:20:1c:8e:d9:93:
                    ef:9b:22:24:2c:ba:98:be:e0:89:8d:ed:f9:a8:87:
                    38:cc:31:92:af:77:eb:51:51:a4:61:e2:f3:19:bb:
                    03:70:8e:56:ea:9d:2d:b2:3a:a9:4c:62:43:ab:9d:
                    4e:48:20:5a:d3:19:5a:e5:02:d3:f2:2b:e8:a8:2f:
                    38:4c:66:e5:1d:c2:e4:6a:55:e9:d8:55:37:ae:2d:
                    75:4b:9a:79:c2:0f:f3:62:26:c4:88:d8:b2:e4:84:
                    73:bf:9c:87:62:be:a9:35:2e:01:32:f0:69:e4:c7:
                    1d:3a:54:f8:f7:40:ac:91:50:9a:83:cd:e6:b3:40:
                    8c:0a:ad:b1:27:7c:5f:17:5e:1d:db:78:2d:54:c7:
                    a2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:22:2F:46:B8:E4:7E:37:DA:89:62:4B:38:F4:D1:E1:E5:4A:B1:D3
            X509v3 Authority Key Identifier:
                keyid:69:DE:5A:D1:A5:B1:F9:78:84:D1:9D:C3:E9:EF:DA:3F:96:54:C1:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H73Dag9oyrGwW9yE8Cru1KBtoeefahJatbiyx4xH8wCo/0/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H73Dag9oyrGwW9yE8Cru1KBtoeefahJatbiyx4xH8wCo/0/3138392e33382e33322e302f32302d3234203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.38.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         75:c5:47:62:0f:6f:f7:cd:0f:1e:bf:5e:0c:27:02:eb:33:39:
         6b:1c:fc:50:f4:86:a1:19:d0:a7:20:33:b3:01:c8:e0:66:eb:
         51:d6:32:31:a7:c3:7e:e3:f3:25:4e:ff:fb:e3:07:8d:c5:76:
         fd:6a:df:ff:71:72:f6:e8:e0:19:b0:c8:bc:00:19:73:67:89:
         fa:0f:44:aa:99:21:f6:9d:35:b2:43:15:46:1e:73:89:f2:99:
         67:70:10:c7:5e:35:37:2a:d6:30:e4:4b:63:c0:c0:68:ff:4f:
         11:25:aa:c2:22:fb:84:15:80:06:77:62:0c:52:ae:49:7b:35:
         c0:01:75:c3:8f:92:2c:53:c4:fd:d6:b6:70:c3:56:31:d7:5b:
         7f:44:75:56:3c:01:7c:ae:b4:90:f9:e1:ce:c3:16:44:f9:3d:
         44:da:9f:73:26:1b:00:b2:42:b3:8e:e7:f3:a7:7e:25:e9:80:
         7b:ba:80:55:15:07:0e:c2:2c:35:62:3b:4d:44:fd:81:e5:d8:
         04:db:77:30:7d:3e:c3:d7:b1:c5:cd:d7:46:13:9b:ff:0d:95:
         f8:04:68:0a:c3:c3:84:81:03:8c:9f:6c:43:e6:f9:1c:de:8f:
         3b:b6:4f:8d:94:65:8e:10:81:11:9d:7d:d5:26:b7:e3:f1:47:
         86:8c:12:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:23:01 2025 by rpki-client