Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e312e302f32342d3234203d3e203238333338.roa
File:                     3138392e34352e312e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          jOuGKbQe4bNRx2dzxyYsfRHWMDhdvthwRPxTbnuu3HQ=
Subject key identifier:   DE:AE:3E:64:47:4E:1D:51:76:81:BB:F7:A3:DE:34:FF:09:3B:26:99
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       3F7DBA47B7BC3B869D6EE48114430DF02F04BD16
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e312e302f32342d3234203d3e203238333338.roa
Signing time:             Wed 29 May 2024 18:17:17 +0000
ROA not before:           Wed 29 May 2024 18:12:17 +0000
ROA not after:            Wed 28 May 2025 18:17:17 +0000
asID:                     28338
IP address blocks:        189.45.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 19:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:7d:ba:47:b7:bc:3b:86:9d:6e:e4:81:14:43:0d:f0:2f:04:bd:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: May 29 18:12:17 2024 GMT
            Not After : May 28 18:17:17 2025 GMT
        Subject: CN=3082010A0282010100C23C9F38FCD963788BB6CD292B704E3B704AA9DD1ECA92D9F66B2859D861B813A9DBDFADC4BB0AA964967E55D6D794F1FB5B4803E310E445124AE53D4CF1AD8566FB7E3F1C87BD74269A129320309789A3DBE71688829595E9D5FB5B59FF6963F02A817F1EEF69A7BA20ECBDE0C94A0AB695E049ED857D74BEA579EFF5B616ACDF2FD413CB5B5295BAE4A1020C558E91EB2673395BBCD3B9DEC51E7C8703D28274EAD68D47A4D9472DCCC9A4D4CFEB7CC563BD70299218F24239F08C4BD066CFE500B5A3BA5FDA454E80CBED48C09292E6F21BA8B7ECE5722D28ECD56E60BAE94A0538B189BF975D39230585B0A2FD5C9F81DC49BCF5625861A87DBB30ADDE630203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3c:9f:38:fc:d9:63:78:8b:b6:cd:29:2b:70:
                    4e:3b:70:4a:a9:dd:1e:ca:92:d9:f6:6b:28:59:d8:
                    61:b8:13:a9:db:df:ad:c4:bb:0a:a9:64:96:7e:55:
                    d6:d7:94:f1:fb:5b:48:03:e3:10:e4:45:12:4a:e5:
                    3d:4c:f1:ad:85:66:fb:7e:3f:1c:87:bd:74:26:9a:
                    12:93:20:30:97:89:a3:db:e7:16:88:82:95:95:e9:
                    d5:fb:5b:59:ff:69:63:f0:2a:81:7f:1e:ef:69:a7:
                    ba:20:ec:bd:e0:c9:4a:0a:b6:95:e0:49:ed:85:7d:
                    74:be:a5:79:ef:f5:b6:16:ac:df:2f:d4:13:cb:5b:
                    52:95:ba:e4:a1:02:0c:55:8e:91:eb:26:73:39:5b:
                    bc:d3:b9:de:c5:1e:7c:87:03:d2:82:74:ea:d6:8d:
                    47:a4:d9:47:2d:cc:c9:a4:d4:cf:eb:7c:c5:63:bd:
                    70:29:92:18:f2:42:39:f0:8c:4b:d0:66:cf:e5:00:
                    b5:a3:ba:5f:da:45:4e:80:cb:ed:48:c0:92:92:e6:
                    f2:1b:a8:b7:ec:e5:72:2d:28:ec:d5:6e:60:ba:e9:
                    4a:05:38:b1:89:bf:97:5d:39:23:05:85:b0:a2:fd:
                    5c:9f:81:dc:49:bc:f5:62:58:61:a8:7d:bb:30:ad:
                    de:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:AE:3E:64:47:4E:1D:51:76:81:BB:F7:A3:DE:34:FF:09:3B:26:99
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e312e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:ab:67:83:8b:3c:0e:f3:77:0b:32:33:c4:b8:48:9f:2e:ae:
         fa:56:f0:d6:6b:72:d2:1e:8e:b5:87:ce:77:40:e9:28:d5:0b:
         c3:60:b3:b4:c0:5d:70:d9:25:41:03:ff:1d:46:45:f0:b0:a8:
         f1:c6:35:b5:c2:ac:50:d9:71:00:fd:e6:94:36:e8:da:d7:1a:
         33:81:ca:ad:9f:3a:cc:1d:73:2e:66:ca:db:56:b9:8b:aa:c4:
         1a:6a:86:36:a6:48:f8:d9:9f:c8:7b:c1:98:f4:1a:d2:f2:bb:
         19:5f:19:18:e2:ce:5a:fd:d2:ee:19:27:27:27:b6:e3:3c:59:
         24:4b:49:db:d2:f3:8a:d7:6a:19:38:b0:21:9c:f6:47:30:da:
         87:6a:73:9e:8e:32:f0:51:08:de:0a:4c:30:6f:ee:bb:d8:04:
         06:a0:5f:44:ca:1d:a9:88:61:f6:06:f2:86:fd:15:1a:99:f4:
         83:8e:2a:4a:fb:56:3b:5d:b4:8c:cd:fd:63:1e:b3:4d:b9:8b:
         8b:93:27:18:8a:dc:47:44:4a:61:8a:02:8a:7c:66:45:ff:c0:
         90:d9:92:e9:06:82:c0:7c:c9:d2:85:8f:22:6c:04:6d:21:69:
         70:81:33:a5:88:0b:60:5c:32:ee:5e:a6:d6:d8:d0:06:3f:62:
         1d:6c:3a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:45 2024 by rpki-client on console-fra.rpki-client.org