Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3138392e33392e3139322e302f32302d3234203d3e20323632363639.roa
File:                     3138392e33392e3139322e302f32302d3234203d3e20323632363639.roa (raw, json)
Hash identifier:          FbLqX4ZVJHv6hx7LLdzQnOc6qM+GZWULtPiSCsaf/D0=
Subject key identifier:   6A:F8:F1:7A:8B:89:7E:5A:A0:5C:A5:85:D2:9D:5E:6F:75:4A:77:EA
Certificate issuer:       /CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Certificate serial:       184D92BD58E170EAF302CBA6AA5DAA81AED655B1
Authority key identifier: AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3138392e33392e3139322e302f32302d3234203d3e20323632363639.roa
Signing time:             Sat 02 Aug 2025 12:59:28 +0000
ROA not before:           Sat 02 Aug 2025 12:54:28 +0000
ROA not after:            Sat 01 Aug 2026 12:59:28 +0000
asID:                     262669
IP address blocks:        189.39.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
                          rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 10:20:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:4d:92:bd:58:e1:70:ea:f3:02:cb:a6:aa:5d:aa:81:ae:d6:55:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
        Validity
            Not Before: Aug  2 12:54:28 2025 GMT
            Not After : Aug  1 12:59:28 2026 GMT
        Subject: CN=6AF8F17A8B897E5AA05CA585D29D5E6F754A77EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:95:60:17:7a:ed:4c:e7:0a:db:a6:99:3a:c9:
                    a4:5b:e4:93:16:8a:96:5e:a8:5b:2e:d8:24:e7:c4:
                    90:ea:42:b9:a7:35:1b:4a:6e:90:4d:44:a6:37:57:
                    48:e3:f4:b2:07:11:9d:d4:89:74:16:03:b5:44:60:
                    58:57:50:db:ed:6a:4c:0e:2c:33:cc:1e:fd:fe:70:
                    68:71:c5:38:da:f7:3b:c4:96:f2:f2:45:0d:6f:38:
                    cc:13:9c:80:ae:db:ff:45:f2:b6:8e:97:1e:0a:96:
                    92:0c:98:f4:d3:85:11:a5:31:40:20:53:f5:90:d2:
                    0c:2d:99:75:2b:4c:a1:b8:50:c7:2b:96:6f:bb:48:
                    36:09:de:18:2e:0d:52:2b:7b:fb:18:6a:2f:3d:1a:
                    57:f6:ec:0a:c8:d1:87:db:2e:70:47:9d:59:09:f0:
                    84:45:bb:fe:46:b1:5b:ae:2b:59:69:0b:8f:89:04:
                    3d:45:60:59:b3:8a:a7:b5:91:2e:e0:96:87:8e:23:
                    0f:18:c1:ea:a6:d6:5c:8c:1b:c6:1c:d8:6e:89:97:
                    f3:9c:d5:2d:78:9b:aa:43:22:3c:ed:7d:e4:11:91:
                    4f:50:ce:68:c0:51:fa:08:30:88:5a:87:ad:5d:f6:
                    b9:75:78:ca:31:d3:8f:e3:55:bb:70:04:c5:e6:90:
                    be:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F8:F1:7A:8B:89:7E:5A:A0:5C:A5:85:D2:9D:5E:6F:75:4A:77:EA
            X509v3 Authority Key Identifier:
                keyid:AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3138392e33392e3139322e302f32302d3234203d3e20323632363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.39.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         61:58:5c:b7:04:03:a5:62:c1:20:71:dd:45:4c:24:ae:d4:65:
         a2:1a:ca:9b:0a:3b:f4:8f:6a:b4:be:76:71:df:44:91:1c:7c:
         4d:76:0c:70:28:a8:50:31:f9:ba:06:64:4d:9a:42:32:04:b3:
         a3:88:f8:c0:6b:0c:a9:3c:75:d0:f1:71:5e:56:ed:a3:c3:44:
         32:df:1c:9e:dc:8a:46:9f:03:44:c3:91:f1:f9:e7:b9:7b:10:
         3f:2e:b9:2b:f3:43:43:f2:b7:35:c3:63:4f:df:ff:d3:67:5c:
         66:23:7a:d0:b1:aa:bf:e0:9b:36:b7:5c:1f:c3:2f:2b:4e:79:
         64:de:73:8b:9f:69:78:d7:f9:a5:bd:85:ff:32:8e:9a:b1:68:
         aa:b1:95:bd:b4:dd:c7:02:89:ae:ac:b5:0f:60:82:b7:5d:78:
         2e:d4:a7:d5:6a:62:72:24:60:11:92:05:b6:59:8c:95:3c:3c:
         cb:0f:96:75:9c:12:f3:50:92:e3:fe:97:fc:25:3b:e8:ed:ff:
         0e:49:39:50:4d:da:fd:55:ba:80:89:b3:a7:a6:3e:b8:81:46:
         68:4c:db:b9:cb:d3:b3:0b:93:18:c0:7b:02:54:e6:e3:c3:aa:
         4e:04:f8:4f:83:18:76:43:e9:ba:71:f1:66:a1:b9:2c:d2:e8:
         35:16:aa:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:10:50 2025 by rpki-client