Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138392e38342e37352e302f32342d3234203d3e20323633323630.roa
File:                     3138392e38342e37352e302f32342d3234203d3e20323633323630.roa (raw, json)
Hash identifier:          iAHJ59cyBPdLMSEXHnbBkUB6eqACp90+u4/oPRF0GEs=
Subject key identifier:   9B:9F:BD:29:88:B2:7E:3B:15:A9:37:0E:4F:2D:D3:7C:FB:31:72:3B
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       4220A46EC63ACE25D7DA8AC6019437AC34A38111
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138392e38342e37352e302f32342d3234203d3e20323633323630.roa
Signing time:             Wed 02 Jul 2025 14:46:01 +0000
ROA not before:           Wed 02 Jul 2025 14:41:01 +0000
ROA not after:            Wed 01 Jul 2026 14:46:01 +0000
asID:                     263260
IP address blocks:        189.84.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Jul 2025 19:44:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:20:a4:6e:c6:3a:ce:25:d7:da:8a:c6:01:94:37:ac:34:a3:81:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Jul  2 14:41:01 2025 GMT
            Not After : Jul  1 14:46:01 2026 GMT
        Subject: CN=9B9FBD2988B27E3B15A9370E4F2DD37CFB31723B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:67:a1:be:b6:f2:b9:53:06:d3:ee:4e:8d:a9:
                    4f:d9:c3:7e:43:92:b2:fe:00:dc:f3:7b:1c:f7:37:
                    67:ec:98:85:06:9d:85:b5:21:63:2c:b7:2a:87:02:
                    a7:60:91:ee:f0:2b:b7:a1:a2:d9:66:c0:0c:19:4d:
                    3e:7a:b7:31:f3:f6:03:33:21:e1:8a:e3:fb:ec:c1:
                    01:b5:ba:6b:09:56:8a:18:ee:01:3c:3e:e6:21:b6:
                    58:f2:c7:5f:40:cc:e4:7a:ad:39:c5:37:6b:7a:91:
                    c9:50:06:a2:49:8a:cc:ad:6f:2b:58:dc:c1:e5:4d:
                    5f:33:22:d8:eb:31:80:da:70:be:4c:82:a4:e6:64:
                    a9:06:e2:f2:c5:e7:c1:be:ef:4a:9d:28:2e:1e:4e:
                    4b:86:b6:03:17:4d:96:27:2c:bf:1f:3b:8d:94:15:
                    c5:46:f9:0f:44:27:3a:3a:a7:df:1a:29:66:71:8d:
                    47:bd:e7:d8:b1:67:20:f1:d2:06:c9:56:47:a5:f2:
                    fb:d8:cd:9c:5a:70:4f:31:30:2f:4b:21:82:85:80:
                    7f:90:e5:4a:a4:07:fc:89:50:2c:e6:7f:26:65:45:
                    a5:5a:31:fb:d1:99:54:17:e8:da:7c:50:4c:10:ad:
                    77:92:75:b8:ef:e0:61:2e:79:4d:c7:b2:0e:e0:06:
                    6f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:9F:BD:29:88:B2:7E:3B:15:A9:37:0E:4F:2D:D3:7C:FB:31:72:3B
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138392e38342e37352e302f32342d3234203d3e20323633323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:08:22:43:0c:de:c2:e5:3d:a8:a9:ad:cb:b2:ff:d5:8a:bc:
         61:79:dc:7b:c9:6e:99:94:e9:73:c0:0c:e2:a7:89:04:47:5c:
         6d:25:f2:9f:3f:b5:e7:23:eb:3d:18:1d:ec:0b:01:2a:56:e6:
         85:c4:41:e7:0c:62:ee:ac:74:8b:28:1a:f2:24:57:27:d8:24:
         cd:c7:5e:8b:d7:88:8b:89:21:ec:db:c6:96:07:51:86:e1:09:
         c7:6e:8f:ab:69:c1:c4:cf:40:06:4e:5e:56:d9:62:a9:e1:4e:
         47:4f:d9:d8:8d:9a:ae:7d:57:8c:9d:a3:a5:51:22:9a:c9:a6:
         28:78:26:63:0b:65:d9:32:55:74:27:30:88:02:f6:57:4d:c2:
         34:fa:21:f6:82:74:ca:1b:9a:99:82:8a:e9:01:14:8a:1a:9e:
         2c:80:a8:d5:d9:cd:cd:78:6e:11:96:a2:79:5d:6a:db:87:73:
         f1:8f:e8:fe:1d:7c:a5:26:e5:c9:c0:a3:24:81:78:64:6a:29:
         c8:eb:05:0f:9e:84:13:c7:f9:65:88:61:d9:6e:83:d8:1e:a0:
         cd:2f:e4:ee:92:04:62:9f:19:a4:e2:3d:e9:cd:3d:30:dc:1e:
         76:fb:d5:e5:ff:1c:c5:84:78:6c:07:2e:ae:f2:76:2c:bf:91:
         bb:0f:4e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 21:40:47 2025 by rpki-client