Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e31302e302f32342d3234203d3e203238333338.roa
File:                     3138392e34352e31302e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          GkAGLh3znpiPmthM+YcwdIzD6PLq+qdNGuNhnNbTBVU=
Subject key identifier:   A5:00:45:FC:15:34:03:E6:E5:8E:7E:F5:71:B3:AA:C6:0F:36:0A:47
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       7869FC520F407BC234E80440E84E5D2A3D29AC22
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e31302e302f32342d3234203d3e203238333338.roa
Signing time:             Wed 29 May 2024 18:17:13 +0000
ROA not before:           Wed 29 May 2024 18:12:13 +0000
ROA not after:            Wed 28 May 2025 18:17:13 +0000
asID:                     28338
IP address blocks:        189.45.10.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 18:50:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:69:fc:52:0f:40:7b:c2:34:e8:04:40:e8:4e:5d:2a:3d:29:ac:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: May 29 18:12:13 2024 GMT
            Not After : May 28 18:17:13 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ce:d9:2b:35:37:bc:6f:d7:07:18:1e:c1:06:
                    15:75:53:55:3e:5b:55:ee:5f:31:1d:2f:1c:3a:2d:
                    12:d5:e9:83:f7:24:7a:ee:21:f5:c5:e0:f8:0c:d6:
                    9c:53:06:4c:49:c2:7e:3d:5d:96:fb:d2:6a:2f:70:
                    1e:b8:5e:fd:31:eb:4e:81:66:39:69:0e:85:b2:da:
                    53:88:c0:e9:ba:d5:e0:bd:dd:d1:90:56:cd:43:a3:
                    35:55:b8:04:32:80:bb:56:8a:af:0b:1e:56:19:cd:
                    fa:61:ae:6f:05:e8:28:c0:aa:17:c9:65:ab:1a:22:
                    c7:34:0b:b0:49:61:61:0c:76:11:ef:5d:b0:67:76:
                    42:66:2a:a8:84:f6:4b:3f:94:a7:34:55:5e:e0:ad:
                    bd:55:68:7f:31:7f:b8:3e:7a:fa:5d:cc:8a:93:74:
                    97:bb:98:36:cc:c1:e2:67:31:b6:e6:82:50:1f:ba:
                    1e:e0:ab:6e:ea:3e:c5:62:31:57:4d:37:3d:2b:3a:
                    54:cb:31:4d:f3:85:eb:9c:a3:58:9c:39:0c:71:b4:
                    d6:04:16:9b:f8:c5:bc:b5:01:de:10:fa:14:5a:88:
                    d7:67:0b:97:4c:7d:64:81:69:a8:39:da:4a:6f:d4:
                    66:0b:aa:2f:b8:5b:99:e7:73:b5:3f:b7:1b:32:5c:
                    09:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:00:45:FC:15:34:03:E6:E5:8E:7E:F5:71:B3:AA:C6:0F:36:0A:47
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e31302e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:f8:09:9b:1e:ca:85:89:58:a5:b3:32:12:54:3e:5a:90:d4:
         a6:5f:ef:72:3b:99:c6:6e:74:89:3b:71:63:b3:08:1e:a7:3f:
         59:69:c8:9b:7f:36:13:ab:77:75:78:f3:20:63:c1:f8:7c:ea:
         5c:bf:5a:d2:b4:ee:4b:6c:83:bb:df:3e:4f:26:2a:75:68:de:
         83:d1:65:b0:bb:27:5a:b4:2f:1e:56:26:5b:30:06:5e:c1:b0:
         57:c7:2f:fe:42:f4:f3:b3:f5:32:27:f3:7e:5a:dc:d5:c3:6b:
         eb:36:0b:e7:7a:80:1d:fc:52:74:71:1d:a5:d3:25:4f:af:3b:
         d5:aa:5e:9e:59:f1:6f:db:58:3d:7a:7b:77:e9:46:10:c1:d2:
         03:9c:65:f4:bd:b2:ec:eb:70:b0:bd:8d:63:81:e9:98:7a:13:
         44:ba:13:43:d5:28:e5:ba:59:8a:db:80:2b:a0:98:d1:0c:d8:
         43:7c:93:f8:53:db:0d:de:99:df:52:04:cd:e5:00:20:ce:ee:
         03:27:1a:cd:c6:33:65:97:55:97:39:1b:08:3a:71:fc:45:4b:
         18:0e:b5:39:01:1d:0d:ab:d4:52:8f:c2:e3:c5:b8:be:fe:96:
         47:1a:78:46:cb:e1:de:85:d9:29:12:e1:ae:d6:79:4f:1f:49:
         af:33:af:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 21:05:05 2024 by rpki-client on console-ams.rpki-client.org