Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138392e38342e37302e302f32342d3234203d3e20323633323630.roa
File:                     3138392e38342e37302e302f32342d3234203d3e20323633323630.roa (raw, json)
Hash identifier:          qARoilXNyxZhTug8z1AKeyvkku6Uu+lAWWx2aubCok4=
Subject key identifier:   9B:42:17:E2:53:9A:94:5F:ED:62:65:D4:A0:6C:7F:37:E5:50:C7:1E
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       7381904BEA2EDDAB372945F9FDABA0623F33E54B
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138392e38342e37302e302f32342d3234203d3e20323633323630.roa
Signing time:             Wed 02 Jul 2025 14:46:01 +0000
ROA not before:           Wed 02 Jul 2025 14:41:01 +0000
ROA not after:            Wed 01 Jul 2026 14:46:01 +0000
asID:                     263260
IP address blocks:        189.84.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Jul 2025 19:44:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:81:90:4b:ea:2e:dd:ab:37:29:45:f9:fd:ab:a0:62:3f:33:e5:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Jul  2 14:41:01 2025 GMT
            Not After : Jul  1 14:46:01 2026 GMT
        Subject: CN=9B4217E2539A945FED6265D4A06C7F37E550C71E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:80:82:1b:3c:ee:c0:0b:7c:f8:ed:de:d3:8d:
                    38:b2:e0:8a:fa:3b:c1:af:66:33:f6:d0:54:f5:87:
                    15:19:a5:25:f1:03:92:44:10:b4:c8:de:0c:29:82:
                    0a:a0:56:e9:83:4f:19:f7:48:98:d2:29:48:cb:cf:
                    2d:0b:7d:ba:cc:c8:03:91:f5:32:d1:14:42:13:96:
                    3d:37:db:12:5d:df:c5:46:03:cf:af:49:cd:6d:a6:
                    ac:7f:aa:ba:89:df:aa:93:b1:05:3b:fd:ff:72:98:
                    fb:4d:f7:f6:5a:05:83:56:e0:bb:be:2d:aa:ca:49:
                    16:59:11:4f:26:e3:cf:a3:02:81:62:43:2a:34:ae:
                    29:8b:e2:c1:cc:ac:8c:87:42:45:43:12:5b:b6:aa:
                    b4:e0:5d:dc:af:8c:d3:2d:00:a0:29:88:61:90:c9:
                    80:8b:3d:3c:57:c9:5e:a9:49:9d:70:95:a1:08:0b:
                    03:6d:21:9b:0e:6e:b6:b3:85:be:51:b4:e2:bb:6a:
                    fe:8a:f9:e9:d1:22:d5:ae:79:67:43:bc:0f:41:d2:
                    a3:e1:67:e2:71:10:6b:ff:ab:fe:f2:dc:a5:b9:06:
                    73:42:db:d7:89:43:b5:be:21:41:bc:5b:c5:da:8f:
                    54:15:58:cc:27:c9:57:a2:c7:93:d0:11:fa:7b:d4:
                    74:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:42:17:E2:53:9A:94:5F:ED:62:65:D4:A0:6C:7F:37:E5:50:C7:1E
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138392e38342e37302e302f32342d3234203d3e20323633323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:bc:6b:37:31:25:2e:ec:cc:5f:c6:77:af:4e:48:53:2b:93:
         30:f0:17:f7:a4:ab:38:fe:51:63:a6:a1:33:83:07:dc:cb:ce:
         1a:f2:9c:f5:9f:a2:d3:2e:3c:6e:92:f2:aa:12:03:ba:b2:49:
         7b:45:4c:47:7c:44:a5:5c:68:4a:ae:19:cd:73:8e:22:79:e0:
         c0:70:cd:e0:5d:39:0d:1b:3d:3e:c5:59:83:b5:a4:bf:01:8b:
         4e:70:01:d7:25:01:f5:af:fa:6f:0d:1e:b8:e8:d2:6a:5e:80:
         05:a0:bd:f4:08:20:e6:ee:b7:94:12:f0:7a:94:7b:14:2e:0b:
         4a:37:11:13:57:0b:37:d3:48:48:d8:13:28:4a:52:1f:88:cc:
         f0:14:fe:b3:bf:73:bd:fa:21:52:cc:83:c1:31:40:20:1c:43:
         5a:e0:96:1f:c2:60:14:32:cd:b5:3e:d2:70:31:ab:c3:e8:64:
         1d:fe:b6:75:df:5c:70:f7:b7:85:e3:49:1f:63:23:0b:19:22:
         8a:69:df:fe:d8:43:1b:bd:f1:42:d6:11:b0:4d:9d:01:5b:10:
         ca:4c:4b:77:b7:99:1c:bd:bc:3e:62:7d:d6:10:ef:a6:57:73:
         a0:34:fc:b3:17:e3:a8:9e:07:64:87:00:7b:74:e5:ab:41:ec:
         e1:a7:de:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 21:42:54 2025 by rpki-client