Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138392e38342e36362e302f32342d3234203d3e20323633323630.roa
File:                     3138392e38342e36362e302f32342d3234203d3e20323633323630.roa (raw, json)
Hash identifier:          IKPNhr/RfwWgZVRHZk8GQ17LDBRByjep/V7gEoBMRrk=
Subject key identifier:   29:EF:AA:EC:0C:C9:39:FB:9A:6C:DA:8A:0C:9B:74:AC:BB:E0:8D:8F
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       47B13235B70D886FF2852BA531D30126F8C90FF2
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138392e38342e36362e302f32342d3234203d3e20323633323630.roa
Signing time:             Wed 02 Jul 2025 14:46:02 +0000
ROA not before:           Wed 02 Jul 2025 14:41:02 +0000
ROA not after:            Wed 01 Jul 2026 14:46:02 +0000
asID:                     263260
IP address blocks:        189.84.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Jul 2025 19:44:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:b1:32:35:b7:0d:88:6f:f2:85:2b:a5:31:d3:01:26:f8:c9:0f:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Jul  2 14:41:02 2025 GMT
            Not After : Jul  1 14:46:02 2026 GMT
        Subject: CN=29EFAAEC0CC939FB9A6CDA8A0C9B74ACBBE08D8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:bc:7f:ad:2f:cd:cc:21:27:36:4c:84:39:4b:
                    08:f7:7f:ce:ef:67:ae:d2:3b:1c:69:f4:5b:06:76:
                    53:63:0f:d4:a4:a0:ce:e3:b4:54:14:25:73:46:fd:
                    f6:28:9a:23:f5:a0:fc:92:5d:5b:d4:74:d0:bd:18:
                    95:89:42:b8:a9:65:06:fa:f6:da:ce:dd:b6:5c:dc:
                    eb:fc:f5:47:70:13:b7:b5:2a:cb:bc:44:cb:1a:aa:
                    0b:c6:c2:a8:77:06:9c:36:73:b5:52:80:cb:d9:e0:
                    9d:06:a3:ec:60:17:dd:f8:5b:27:43:59:6b:c5:e6:
                    8e:51:ef:f9:9d:6d:60:55:82:ec:6e:e1:15:6d:4b:
                    57:fa:d4:86:0d:25:a4:e0:8f:8c:d8:42:0a:04:a8:
                    6d:79:33:43:6a:77:00:61:dd:e4:a2:7a:26:83:82:
                    b9:49:84:49:b4:32:0d:b2:6c:7d:68:4f:44:9a:3e:
                    dc:c2:bc:56:49:3d:c0:be:5c:35:ed:21:fd:83:31:
                    bd:72:63:f4:bf:2b:66:72:ea:ac:00:43:f4:7c:19:
                    f1:48:58:48:01:37:9d:ed:47:f9:4b:a1:3c:02:a4:
                    79:ad:ce:bf:cc:ed:ee:8d:87:01:10:d5:2f:3f:61:
                    ab:36:b3:08:03:98:af:a5:5c:be:68:c8:44:77:aa:
                    a9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:EF:AA:EC:0C:C9:39:FB:9A:6C:DA:8A:0C:9B:74:AC:BB:E0:8D:8F
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138392e38342e36362e302f32342d3234203d3e20323633323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:fb:8e:3f:13:93:dc:1b:cd:9e:0f:c8:2a:27:89:91:b1:9b:
         d5:48:60:20:52:e0:56:a3:52:03:84:0b:c8:b9:77:d0:06:51:
         2a:c0:2f:a5:f9:d8:49:f9:22:b7:76:6b:e2:d8:a1:65:36:d6:
         d5:e5:7c:28:bb:40:3e:80:3a:4e:75:ff:2a:65:95:37:b7:36:
         2c:6f:87:9c:33:1c:8f:28:d1:fb:65:36:97:ff:68:bf:c0:0b:
         24:06:f9:cf:80:8f:e6:7a:dc:b3:a9:da:84:63:a6:d2:81:f8:
         45:de:56:76:95:8b:52:0e:91:82:6c:55:ba:28:ae:54:9d:eb:
         13:ca:e3:92:f5:6a:29:56:dd:c1:6d:be:b2:2d:8a:cb:7f:52:
         7f:d5:3e:d3:5d:52:ce:64:67:aa:1f:eb:aa:25:ac:3c:24:21:
         13:5a:f6:82:92:14:37:98:32:51:98:e9:99:49:f5:d5:03:4d:
         d7:87:72:13:83:72:29:a1:75:31:b2:9a:72:9f:0b:65:45:c1:
         1e:a7:34:12:27:65:e3:2a:2d:a9:61:bb:4e:89:bf:35:92:70:
         95:49:eb:2c:a2:65:6a:f2:75:39:a3:a8:87:2f:fe:7d:c9:44:
         14:4d:c1:6f:70:e4:3a:e0:4d:88:7c:d5:aa:2c:27:a7:c8:73:
         bc:42:ac:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 21:34:37 2025 by rpki-client