Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/3138392e38392e38302e302f32332d3233203d3e20323632373439.roa
File:                     3138392e38392e38302e302f32332d3233203d3e20323632373439.roa (raw, json)
Hash identifier:          aWsniZMo67OGDT0Jielc1ifBoafmHahMk+vsQpnba7E=
Subject key identifier:   87:9D:0B:CC:51:BD:93:A9:C0:0A:E6:57:38:84:5F:EB:0F:E3:75:C7
Certificate issuer:       /CN=9DAC040D005E337E60D8E70413DC135C767316A4
Certificate serial:       17BFB0434F27FF43E68D756B20BEA0A72431D8AF
Authority key identifier: 9D:AC:04:0D:00:5E:33:7E:60:D8:E7:04:13:DC:13:5C:76:73:16:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DAC040D005E337E60D8E70413DC135C767316A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/3138392e38392e38302e302f32332d3233203d3e20323632373439.roa
Signing time:             Thu 06 Mar 2025 07:00:20 +0000
ROA not before:           Thu 06 Mar 2025 06:55:20 +0000
ROA not after:            Thu 05 Mar 2026 07:00:20 +0000
asID:                     262749
IP address blocks:        189.89.80.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/9DAC040D005E337E60D8E70413DC135C767316A4.crl
                          rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/9DAC040D005E337E60D8E70413DC135C767316A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DAC040D005E337E60D8E70413DC135C767316A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 13:13:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:bf:b0:43:4f:27:ff:43:e6:8d:75:6b:20:be:a0:a7:24:31:d8:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DAC040D005E337E60D8E70413DC135C767316A4
        Validity
            Not Before: Mar  6 06:55:20 2025 GMT
            Not After : Mar  5 07:00:20 2026 GMT
        Subject: CN=879D0BCC51BD93A9C00AE65738845FEB0FE375C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:aa:49:4c:67:89:43:f2:9e:6e:90:d2:07:fa:
                    6f:73:81:38:d5:b5:b3:b3:da:a5:0c:3e:de:91:d5:
                    0c:68:95:35:21:c4:1d:cb:a4:10:89:72:77:d2:84:
                    2b:62:5c:bd:61:3a:d3:fc:cf:34:cc:57:7c:4e:f3:
                    80:c2:7f:27:bd:a6:8c:60:24:3d:be:21:e0:67:a4:
                    d7:dd:7a:8a:a2:99:6f:05:3e:9d:bd:1e:6d:61:df:
                    92:b9:a1:1b:6c:7f:b8:fd:d7:18:42:d8:c2:7a:50:
                    44:99:8f:8f:8f:39:7e:98:ea:66:1c:8b:5e:00:3c:
                    ba:67:cd:41:4d:2b:2c:b9:be:41:b4:80:38:77:1b:
                    fa:f7:b0:b1:ee:33:86:9e:bc:76:aa:81:03:1e:01:
                    7e:42:df:5c:60:71:f9:2f:eb:f6:b7:61:04:d8:26:
                    91:7e:da:cb:48:f8:2c:f4:ec:ac:10:92:c1:98:55:
                    36:61:33:22:a9:01:0c:da:c8:a4:8c:1c:20:da:a4:
                    82:39:8b:f1:86:25:c3:11:33:48:60:c6:ae:87:31:
                    5b:75:1b:d4:a1:53:87:94:ca:38:b4:3b:0b:7c:3f:
                    23:c4:e3:ff:c8:b0:1f:65:88:a5:c8:3c:17:c5:97:
                    15:86:cb:e1:ed:08:5e:81:60:cb:bd:0c:7f:18:1a:
                    95:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:9D:0B:CC:51:BD:93:A9:C0:0A:E6:57:38:84:5F:EB:0F:E3:75:C7
            X509v3 Authority Key Identifier:
                keyid:9D:AC:04:0D:00:5E:33:7E:60:D8:E7:04:13:DC:13:5C:76:73:16:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/9DAC040D005E337E60D8E70413DC135C767316A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DAC040D005E337E60D8E70413DC135C767316A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/3138392e38392e38302e302f32332d3233203d3e20323632373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:2e:5d:4c:1a:c5:99:d3:0a:36:ff:9c:78:a9:d0:74:89:b3:
         4a:ad:84:42:59:ec:04:41:ca:0b:4a:b4:ed:23:02:c8:e3:89:
         d9:b9:d5:e4:38:3a:9e:d1:e9:cb:2a:eb:43:6d:85:5a:0b:40:
         1b:19:51:73:85:8f:c3:53:d0:a8:ca:28:ba:b9:83:45:44:28:
         5e:20:99:76:12:bd:46:85:fe:9e:96:16:5d:bf:d7:12:4b:8d:
         c1:b2:8b:a3:f4:56:a4:ca:6a:82:7f:7f:94:2e:06:cc:dc:e6:
         e5:4f:8c:1b:da:45:c8:3e:42:05:fe:5d:8d:0b:e2:2c:d1:3a:
         eb:d0:22:80:13:89:f9:7c:df:a1:d1:70:24:eb:0a:ec:4c:e0:
         7f:15:f5:9b:15:0e:7f:a2:09:67:c7:f4:8d:43:1c:0f:fa:4b:
         ce:40:0d:2f:02:f6:25:c3:c9:6e:3e:70:25:58:8b:0f:72:c4:
         35:ec:a3:dc:19:f6:94:8d:54:37:19:c7:a1:d5:bc:02:64:12:
         02:4d:5c:ce:63:0f:53:c0:ce:45:19:62:26:bb:ab:ba:02:e8:
         7b:93:9e:9f:80:69:a3:ba:ab:aa:8e:94:6e:27:ad:95:c1:6e:
         60:1a:1e:10:df:60:19:dd:21:d2:9d:8d:6c:1f:16:9c:41:41:
         b9:30:1c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:05:02 2025 by rpki-client on console.sobornost.net