Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3138392e39322e302e302f31342d3234203d3e203232303835.roa
File:                     3138392e39322e302e302f31342d3234203d3e203232303835.roa (raw, json)
Hash identifier:          3yZqiZKkzyqUDibLmlNz24Novrr3ED4SqTus+NUp9Ew=
Subject key identifier:   CD:A7:0B:A2:31:06:D7:B1:20:93:73:79:E8:5D:F6:8A:4D:4E:91:24
Certificate issuer:       /CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
Certificate serial:       2D55C8B6A098ED315404152C92EF6E953097A6EB
Authority key identifier: D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3138392e39322e302e302f31342d3234203d3e203232303835.roa
Signing time:             Tue 16 Jul 2024 14:27:24 +0000
ROA not before:           Tue 16 Jul 2024 14:22:24 +0000
ROA not after:            Tue 15 Jul 2025 14:27:24 +0000
asID:                     22085
IP address blocks:        189.92.0.0/14 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl
                          rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 02:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:55:c8:b6:a0:98:ed:31:54:04:15:2c:92:ef:6e:95:30:97:a6:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
        Validity
            Not Before: Jul 16 14:22:24 2024 GMT
            Not After : Jul 15 14:27:24 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:17:95:c6:e6:27:1d:81:bb:0a:66:c7:5c:73:
                    bc:a9:b6:68:22:b0:c4:47:1f:09:28:9b:9e:79:74:
                    e3:a4:d7:f7:43:94:37:e3:6a:7b:9e:3a:68:76:06:
                    6b:7a:49:40:69:56:70:5b:60:ae:75:06:ff:93:aa:
                    4d:0a:c3:50:d4:51:e2:b3:30:bf:a2:8b:7a:37:6d:
                    44:50:95:a2:47:d1:e3:4a:af:54:09:cc:2a:1c:e4:
                    87:1e:09:6f:8f:18:2f:7b:7e:d9:db:07:62:8a:af:
                    8b:d5:71:16:09:29:b5:44:df:2a:41:d5:44:bb:05:
                    25:4a:34:ce:53:83:65:0b:bf:27:21:c5:e8:ed:37:
                    a0:7f:d9:94:0c:55:e6:94:2f:d2:e8:3a:8e:19:d6:
                    7b:50:ad:3b:8c:44:05:3a:d0:9c:cb:ad:26:30:48:
                    d3:f6:86:33:a8:45:7d:ed:46:9b:dc:68:08:3a:a2:
                    d2:51:0f:01:57:88:81:07:2a:bc:f1:9c:d1:3d:13:
                    56:06:d6:36:01:8a:64:62:ff:ce:73:00:ca:0c:3c:
                    2d:c7:4f:15:aa:13:e3:e5:64:3c:f9:f9:89:4b:09:
                    5e:97:5a:ba:9c:17:b7:d6:8c:58:c4:eb:ef:e1:a5:
                    ae:7c:10:f3:4c:0d:b1:33:d9:0f:9d:26:3d:48:9f:
                    28:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:A7:0B:A2:31:06:D7:B1:20:93:73:79:E8:5D:F6:8A:4D:4E:91:24
            X509v3 Authority Key Identifier:
                keyid:D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3138392e39322e302e302f31342d3234203d3e203232303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.92.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         04:31:1e:ab:7b:21:f1:63:16:48:f3:cd:0c:fb:1d:63:f9:59:
         2b:d0:3f:94:ca:89:74:45:ef:fe:df:9e:ee:d5:af:37:85:46:
         8f:e5:a4:3b:e5:8e:71:9d:24:53:cb:d1:58:c3:c0:6b:e9:24:
         da:d1:ab:82:13:68:4d:90:78:25:42:25:5c:fb:6f:d6:07:5d:
         3c:e5:2c:44:f6:73:1f:31:50:d7:a7:30:14:94:33:a4:fd:6a:
         7d:1f:d1:e3:cf:7c:be:56:38:dd:6d:6e:de:4f:fa:03:98:1e:
         74:27:9a:6d:18:d4:3c:a3:21:4b:67:4e:0d:0a:d5:61:b1:ec:
         ac:82:29:f6:8a:89:ab:15:a7:53:9e:12:77:f6:52:1c:7f:be:
         82:f9:3f:73:b5:f6:b2:98:99:74:33:59:76:a5:b4:89:85:6e:
         05:f6:67:90:9b:93:f9:47:1e:e8:55:22:6b:3d:1c:8b:8b:97:
         6c:c8:9e:0e:da:17:66:cc:7b:f3:a8:ea:28:c1:57:c4:8d:0f:
         ad:63:47:fb:d3:ba:01:fd:16:c0:af:d3:4d:cf:0e:78:95:95:
         ab:06:83:a7:9d:d0:1c:f3:0d:da:f8:ee:e5:b3:e0:0a:ff:fa:
         72:cc:2b:d6:be:63:de:b8:b8:9c:54:a0:1a:60:bf:7e:0c:23:
         44:fc:47:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:09 2024 by rpki-client on console-fra.rpki-client.org