Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e31342e302f32342d3234203d3e203238333338.roa
File:                     3138392e34352e31342e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          w1pOm7g1SU5w/bdEfCIlevkZc/DlOg3sBbP1MtTIlz0=
Subject key identifier:   5B:C7:28:22:25:80:83:38:18:EA:62:56:08:72:2D:51:BF:27:EC:AB
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       5A80740E7122F5AF1F6E1A7092444097C7B4ED9B
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e31342e302f32342d3234203d3e203238333338.roa
Signing time:             Wed 29 May 2024 18:17:17 +0000
ROA not before:           Wed 29 May 2024 18:12:17 +0000
ROA not after:            Wed 28 May 2025 18:17:17 +0000
asID:                     28338
IP address blocks:        189.45.14.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 19:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:80:74:0e:71:22:f5:af:1f:6e:1a:70:92:44:40:97:c7:b4:ed:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: May 29 18:12:17 2024 GMT
            Not After : May 28 18:17:17 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a2:60:fa:ef:3e:10:1a:9f:29:66:fd:59:40:
                    34:88:b4:64:1c:e8:c5:58:6b:fe:e2:ec:21:12:61:
                    bf:e6:f7:c3:5a:8f:7c:6a:fc:8f:1f:fb:ec:a3:44:
                    1f:40:8d:00:2a:01:d8:c7:15:31:93:a1:56:a4:96:
                    21:58:58:0b:14:8f:da:e1:5c:c9:ac:8f:4c:32:7b:
                    b5:b0:a4:73:58:6e:41:66:b8:76:30:bb:f1:c8:ab:
                    51:75:62:4b:2b:92:24:ee:1c:b1:69:ee:8f:7d:d7:
                    a9:2f:19:59:b9:82:d7:73:40:a3:d2:83:fa:8e:ce:
                    e5:2d:0b:7c:10:75:7a:04:9e:4f:4e:36:c6:11:1d:
                    a1:0e:b9:e8:5c:36:7a:56:13:ea:06:b4:0d:e6:9a:
                    46:d9:44:4e:2a:38:1a:f1:0e:6b:e8:69:65:d2:0c:
                    fb:e5:1c:f1:8c:71:ef:d6:1d:3e:ee:e4:a7:a0:09:
                    52:17:97:9e:bc:71:a9:1f:7e:d9:f6:55:e5:bc:99:
                    8f:33:30:ad:e3:f4:63:e6:b6:97:76:34:b8:3b:b2:
                    ca:94:70:34:5a:f1:cb:f2:0d:c9:0a:e7:0c:d7:df:
                    fe:3e:cb:31:b5:a5:1d:ed:5a:92:09:42:bd:fe:cb:
                    6f:b4:69:50:c6:3a:8b:bf:cd:be:52:b0:ad:23:36:
                    77:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:C7:28:22:25:80:83:38:18:EA:62:56:08:72:2D:51:BF:27:EC:AB
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e31342e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:70:d1:2d:0c:c3:65:40:12:a1:b5:5d:da:9e:03:44:fb:17:
         ff:75:8b:fe:31:56:4a:99:4f:c4:87:49:2d:b3:4d:c6:4d:5b:
         e6:02:70:48:2b:f3:60:ca:62:ed:e7:17:03:02:8c:54:57:5c:
         f5:84:69:02:40:cc:be:04:91:d9:d8:b4:20:cf:cb:ff:eb:5b:
         93:d6:43:a4:17:b4:e7:94:cd:de:d0:ef:20:2d:39:5c:39:a8:
         8b:ee:23:75:61:9f:bd:3a:e0:b0:b6:36:26:b7:56:1a:c8:32:
         88:91:25:75:5e:46:e2:26:38:7b:fa:9d:da:55:d8:ec:3e:85:
         fb:e4:6c:f1:58:eb:ed:82:67:e5:d5:27:11:e9:41:d0:2f:76:
         ab:9a:df:7c:61:57:2b:4b:a1:d7:b0:a4:62:6d:0a:43:41:b3:
         02:ab:3a:3f:93:04:19:ed:f6:45:af:04:7a:ad:de:fa:02:d9:
         f1:93:9d:c4:3b:70:e9:1a:6e:30:ce:90:6d:09:ff:ea:9e:c7:
         8c:c9:c2:62:3f:fe:b6:45:5c:71:39:d2:1b:60:5a:c8:e4:a1:
         29:46:88:45:8e:33:48:fa:5a:7d:80:7f:3a:a5:58:a3:9d:f6:
         e4:bd:1d:75:fd:8c:a0:69:33:9b:f2:98:ee:6e:6e:de:9b:16:
         0e:a1:de:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:22 2024 by rpki-client on console-ams.rpki-client.org