Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138392e39302e3230382e302f32302d3332203d3e20323632373733.roa
File:                     3138392e39302e3230382e302f32302d3332203d3e20323632373733.roa (raw, json)
Hash identifier:          zYS2KKaQzUguIrMLUQaBAChTiWhfHV/jMvSzpAhGy7Q=
Subject key identifier:   C6:C0:18:21:51:B6:90:62:A0:C8:81:A5:88:89:5E:45:11:7D:99:67
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       33C7112C18862763D470B2D5269D67386EE49CEB
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138392e39302e3230382e302f32302d3332203d3e20323632373733.roa
Signing time:             Wed 16 Oct 2024 04:50:58 +0000
ROA not before:           Wed 16 Oct 2024 04:45:58 +0000
ROA not after:            Wed 15 Oct 2025 04:50:58 +0000
asID:                     262773
IP address blocks:        189.90.208.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:c7:11:2c:18:86:27:63:d4:70:b2:d5:26:9d:67:38:6e:e4:9c:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Oct 16 04:45:58 2024 GMT
            Not After : Oct 15 04:50:58 2025 GMT
        Subject: CN=C6C0182151B69062A0C881A588895E45117D9967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:65:da:46:7a:b1:d3:f5:36:c7:30:84:96:4a:
                    d8:6e:66:18:64:f3:e9:c7:d7:2b:1f:af:63:8e:8e:
                    70:46:37:6e:f9:9c:5f:5d:b6:af:38:56:69:25:a6:
                    b6:6e:04:0f:42:65:32:48:6e:67:3f:4b:db:91:d7:
                    48:14:d9:4b:0f:30:ae:73:75:52:d5:2e:b5:9b:0b:
                    37:ee:02:b9:3e:b9:76:de:11:a3:95:b6:8a:3a:31:
                    eb:5c:a2:57:7b:10:7d:f9:9c:f4:21:17:c5:b1:c6:
                    b8:8b:c7:5e:bb:5b:30:61:f6:da:16:f0:68:2e:b2:
                    00:b8:23:c7:90:5b:13:86:49:94:5b:6c:d7:f1:11:
                    f5:b5:62:51:d5:6b:34:82:4a:f1:0e:0d:0b:67:8c:
                    e2:e7:03:ed:95:70:af:72:00:e9:d7:a0:97:ea:bb:
                    c9:27:f1:b4:5a:1f:f1:06:a1:41:de:07:f1:cb:0d:
                    33:e5:6a:02:30:31:cb:7a:12:03:b4:3c:7e:53:36:
                    86:2c:76:78:6e:df:5f:64:a9:9b:54:ea:5d:4d:cf:
                    ce:ca:e0:5b:fd:82:b3:50:07:f3:11:f1:21:f8:b0:
                    62:e4:44:98:eb:50:cc:7c:93:f5:2c:d0:13:6e:18:
                    65:e6:0d:50:cf:5b:c8:1e:a0:fd:b3:00:28:74:0b:
                    4f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:C0:18:21:51:B6:90:62:A0:C8:81:A5:88:89:5E:45:11:7D:99:67
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138392e39302e3230382e302f32302d3332203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         65:72:f6:ab:ef:cc:eb:bf:26:26:97:e9:66:da:5e:8a:ac:f7:
         7c:26:0c:26:bb:8a:3b:f4:14:47:0e:70:8f:fc:ba:eb:37:d6:
         c3:87:51:3c:5c:26:06:f5:03:74:c8:a5:bd:53:11:03:1f:cd:
         6a:4b:6e:2e:c8:b3:2d:ea:4e:a9:b7:75:4d:3a:31:cd:0a:0f:
         01:1d:93:27:b2:fe:5a:11:60:fd:d4:18:37:29:6c:7f:c5:ff:
         43:62:6f:c0:55:da:a5:68:51:1a:78:c0:c7:30:e8:80:d9:a1:
         ce:b7:c0:bb:dc:97:1c:16:f4:88:20:00:68:a1:97:c6:72:94:
         1b:30:0f:80:8d:a4:26:d9:d1:33:bf:59:85:c6:2e:7a:4f:84:
         53:80:d6:ef:55:f6:aa:b2:04:b3:b4:67:ce:da:85:3c:ca:71:
         6b:54:65:09:d0:85:6b:f5:82:4a:49:b7:ca:c7:29:b3:24:ad:
         c5:e7:7c:9f:67:da:04:a2:f7:df:1c:d1:84:50:fd:e5:33:8a:
         94:bc:eb:a9:a5:06:f3:72:53:06:57:0b:b4:8f:cb:c9:4c:0c:
         21:a6:d0:a5:cb:5b:bf:02:58:68:53:2d:4a:bf:03:32:51:12:
         b7:84:9c:c0:8b:a5:78:55:27:f2:f8:11:7e:c8:35:51:3d:ec:
         f4:95:d7:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:20 2024 by rpki-client on console-fra.rpki-client.org