Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138392e38342e37332e302f32342d3234203d3e20323633323630.roa
File:                     3138392e38342e37332e302f32342d3234203d3e20323633323630.roa (raw, json)
Hash identifier:          cbil3cMYIYeM231N9jMyYDFjQ6F/EAJSz2MYdrmJhPE=
Subject key identifier:   24:C3:3A:81:4F:25:97:18:34:BF:E0:14:AD:98:E9:79:34:FE:88:8F
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       3AC19D19CE1D4AFBE20BE9BCBDF290289C3A0B32
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138392e38342e37332e302f32342d3234203d3e20323633323630.roa
Signing time:             Wed 02 Jul 2025 14:46:02 +0000
ROA not before:           Wed 02 Jul 2025 14:41:02 +0000
ROA not after:            Wed 01 Jul 2026 14:46:02 +0000
asID:                     263260
IP address blocks:        189.84.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Jul 2025 19:44:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:c1:9d:19:ce:1d:4a:fb:e2:0b:e9:bc:bd:f2:90:28:9c:3a:0b:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Jul  2 14:41:02 2025 GMT
            Not After : Jul  1 14:46:02 2026 GMT
        Subject: CN=24C33A814F25971834BFE014AD98E97934FE888F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e9:35:dd:05:56:84:d6:ca:f9:b2:8c:e1:90:
                    6c:fd:e7:fc:66:1c:fd:b8:40:14:bb:90:ef:13:cb:
                    99:9d:54:4d:08:29:41:b0:8f:de:17:5e:09:30:9b:
                    c8:52:a4:59:53:c4:f3:ae:36:a8:90:d6:17:7d:33:
                    ad:98:92:31:cc:14:6e:90:5e:7b:be:d3:4e:d6:25:
                    fb:9b:4c:ba:7d:68:ff:1a:5c:bb:31:57:75:88:5c:
                    91:93:29:21:08:b2:63:fe:6f:0a:81:a5:4c:70:13:
                    37:13:52:c5:bc:a5:e4:51:e4:c2:f3:02:83:48:b1:
                    8c:eb:c4:62:4f:52:5c:c1:15:6d:0d:2c:0b:fe:49:
                    d7:7f:67:6c:26:32:d1:27:0d:38:bb:e7:81:5a:c8:
                    9b:0d:22:48:e0:27:e3:1e:1e:15:53:7a:62:4f:38:
                    ef:79:e2:0e:57:ce:25:8b:bb:90:10:2c:7e:9c:c4:
                    d2:11:98:71:66:9a:42:fb:39:0b:f9:cf:4f:f9:23:
                    0b:71:76:87:64:9e:6d:e6:5d:8d:42:8c:79:b9:f6:
                    5a:db:84:20:ec:16:16:26:ef:b5:b7:22:66:f2:eb:
                    bb:70:28:c3:9e:73:81:75:db:ae:79:77:d4:83:55:
                    88:44:a2:3c:3e:1b:f0:20:2c:b7:78:42:51:55:fb:
                    98:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:C3:3A:81:4F:25:97:18:34:BF:E0:14:AD:98:E9:79:34:FE:88:8F
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138392e38342e37332e302f32342d3234203d3e20323633323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:71:5a:56:94:b6:a3:6d:2c:d8:b3:78:7e:b1:8f:7b:1c:c6:
         ba:d7:f2:1a:84:03:1c:ef:9e:1b:9b:9a:99:91:c0:6a:b8:9e:
         a0:06:0a:6c:3f:d9:f6:dc:64:bd:22:af:f6:d3:8b:4b:4f:32:
         66:ca:64:18:87:f1:9c:10:6d:bc:3f:bf:06:65:96:c1:77:d7:
         e2:ce:d5:ec:0e:a6:4a:9a:c5:64:bd:4a:d8:1a:53:8d:cc:a0:
         b8:af:7c:0c:dc:40:f0:53:74:73:dd:c9:40:7c:ff:cb:26:b3:
         50:7e:df:f3:57:c0:c8:c6:c9:1b:26:25:6a:dd:19:08:50:2a:
         a6:e6:78:73:7f:39:dc:3e:9c:35:6a:58:10:5b:8a:57:06:d4:
         bd:f1:0e:6c:ad:a4:46:7f:28:23:f5:d5:31:21:22:58:da:4a:
         bd:c0:f8:24:e5:24:e7:59:37:f5:24:e9:7b:4e:1c:dc:86:ed:
         38:4c:30:3b:8b:c3:e4:25:15:48:9f:93:14:b1:0b:8f:72:b7:
         56:bf:ea:c1:90:40:0f:3d:f5:e2:87:7c:83:cb:38:cc:aa:54:
         c1:96:d1:c1:0b:e3:da:9e:d6:0a:73:a6:d1:b4:22:a9:c1:09:
         29:42:43:58:e5:df:49:ad:cb:0a:6e:08:cd:a5:30:76:e8:24:
         2c:fc:a7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 21:37:24 2025 by rpki-client