Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e31322e302f32342d3234203d3e203238333338.roa
File:                     3138392e34352e31322e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          EU5//mEoA5SlFpfUV75cwBz9+ap2MFJpT91/IHPmwvs=
Subject key identifier:   19:DA:BC:A0:DF:4E:B4:99:93:ED:F4:00:55:D3:A1:41:02:0B:9E:27
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       1089D729068D4C51C86A88BAE3D1B49EA7F1C12A
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e31322e302f32342d3234203d3e203238333338.roa
Signing time:             Wed 29 May 2024 18:17:17 +0000
ROA not before:           Wed 29 May 2024 18:12:17 +0000
ROA not after:            Wed 28 May 2025 18:17:17 +0000
asID:                     28338
IP address blocks:        189.45.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 19:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:89:d7:29:06:8d:4c:51:c8:6a:88:ba:e3:d1:b4:9e:a7:f1:c1:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: May 29 18:12:17 2024 GMT
            Not After : May 28 18:17:17 2025 GMT
        Subject: CN=3082010A0282010100B3520F000ED7A48205B857047F1B1B04907CA08F2392E28F861BEA0A9AEDC68FB2291002AD815A698E10B7513AF5D5768B6B0DA48CD49281620E5E796CC21FCA7DA141009D296EB56C389E9B3EF26996E59B999A4B0F5C22BC5D2693352FB9F11A69BCDEDDE2BFB35379C76D7BF02CB0FA0AED4082D94C6DCB6AD3C61786418B1D72EC730E112693605DFB1C26D2505430B4B3119B3F01634B3639CEA5D53CEEC192EFBAE7ACC75BEF72ECAFD22F75E4B3E1F5991F52A6DF2A1A4649B4B68041D3E5753D9BB11B73B2B3D64DFEB2CBF61B471595490E7D3053C644576AF9C3C1215BFF06FE4A44D8E387D418EB09AB747C1C4823780BF3D5FD4D1A3903CE5BF90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:52:0f:00:0e:d7:a4:82:05:b8:57:04:7f:1b:
                    1b:04:90:7c:a0:8f:23:92:e2:8f:86:1b:ea:0a:9a:
                    ed:c6:8f:b2:29:10:02:ad:81:5a:69:8e:10:b7:51:
                    3a:f5:d5:76:8b:6b:0d:a4:8c:d4:92:81:62:0e:5e:
                    79:6c:c2:1f:ca:7d:a1:41:00:9d:29:6e:b5:6c:38:
                    9e:9b:3e:f2:69:96:e5:9b:99:9a:4b:0f:5c:22:bc:
                    5d:26:93:35:2f:b9:f1:1a:69:bc:de:dd:e2:bf:b3:
                    53:79:c7:6d:7b:f0:2c:b0:fa:0a:ed:40:82:d9:4c:
                    6d:cb:6a:d3:c6:17:86:41:8b:1d:72:ec:73:0e:11:
                    26:93:60:5d:fb:1c:26:d2:50:54:30:b4:b3:11:9b:
                    3f:01:63:4b:36:39:ce:a5:d5:3c:ee:c1:92:ef:ba:
                    e7:ac:c7:5b:ef:72:ec:af:d2:2f:75:e4:b3:e1:f5:
                    99:1f:52:a6:df:2a:1a:46:49:b4:b6:80:41:d3:e5:
                    75:3d:9b:b1:1b:73:b2:b3:d6:4d:fe:b2:cb:f6:1b:
                    47:15:95:49:0e:7d:30:53:c6:44:57:6a:f9:c3:c1:
                    21:5b:ff:06:fe:4a:44:d8:e3:87:d4:18:eb:09:ab:
                    74:7c:1c:48:23:78:0b:f3:d5:fd:4d:1a:39:03:ce:
                    5b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:DA:BC:A0:DF:4E:B4:99:93:ED:F4:00:55:D3:A1:41:02:0B:9E:27
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e31322e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:25:50:50:11:b0:26:cc:c2:a5:0f:0f:5d:88:ca:8f:df:1d:
         1b:49:cc:76:0c:1d:d8:91:65:0f:24:17:64:91:59:82:99:e6:
         a4:36:56:a1:ea:92:c1:5a:f4:ab:12:85:2c:b8:09:a8:0a:71:
         f2:bb:f5:df:b6:b9:52:a8:21:af:b1:33:6f:19:9f:1c:84:81:
         4b:a6:6e:0d:4e:45:11:bc:53:9c:76:b5:c4:fa:0f:4e:67:d4:
         b7:8a:14:66:bd:2e:1b:50:f9:d0:06:53:5f:fb:f2:ce:16:63:
         c9:f1:f4:7e:5b:2d:d3:b3:10:80:33:ce:51:f2:9a:87:60:6d:
         2f:63:1e:f5:81:a9:f9:d0:7d:b1:c4:13:4d:fc:7b:6e:29:ef:
         34:c0:73:54:69:54:24:03:5f:9e:48:3f:49:1a:bd:c1:b6:ce:
         54:f6:35:37:36:15:ea:24:e5:c5:ad:0c:64:73:89:da:c0:83:
         75:50:a5:5c:cf:96:aa:68:9f:eb:10:8a:9f:f4:e8:f0:e1:b5:
         75:dd:fa:37:c8:c4:17:38:b6:4d:b9:50:d6:0a:1e:77:ab:6b:
         cf:34:88:5d:81:f3:9a:b9:5a:a4:97:c6:67:0f:e7:47:f3:6d:
         b4:bd:60:c9:04:2d:9a:33:15:81:aa:7c:9e:a8:26:6b:cc:f3:
         7a:83:c5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 20:53:02 2024 by rpki-client on console-ams.rpki-client.org