Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e332e302f32342d3234203d3e203238333338.roa
File:                     3138392e34352e332e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          6EZ6f2vUJUAHYsZIxNf+3C76XlfLQNQ9tXyiaPCghXc=
Subject key identifier:   28:89:27:F2:D7:A8:35:1B:0A:40:E0:B7:EA:7C:EB:D9:49:49:9A:58
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       6A0DFB4FE920B40516E9F358F3780252D7B3FCD1
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e332e302f32342d3234203d3e203238333338.roa
Signing time:             Wed 29 May 2024 18:17:13 +0000
ROA not before:           Wed 29 May 2024 18:12:13 +0000
ROA not after:            Wed 28 May 2025 18:17:13 +0000
asID:                     28338
IP address blocks:        189.45.3.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 19:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:0d:fb:4f:e9:20:b4:05:16:e9:f3:58:f3:78:02:52:d7:b3:fc:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: May 29 18:12:13 2024 GMT
            Not After : May 28 18:17:13 2025 GMT
        Subject: CN=3082010A0282010100A113A0B73F9561B3C483E49D79C439D12F40AEA53FF88169495AB53FDB7539BB190D91AA1385D13B2061D6867D850FDF1888B1477422E7390AB028375EA9B9619B39071F062425C4177A1F828ED1A942108175546BD9A085955C721A4C1F41380D6A485EB7830CBA3D20EB7277F74CA823CED334B5F21684399E94F9AAB8D36140161C65465AF14484FC1CFCB4859A8A0595909EB7E08D9D0B9E4C182C43CE895A99F44267D18EB0CC23D2C734D1B27846466D96462FDD76FF01C3E2F0A1A28044D34EDD4DC564DEC0DBBB1A8E2774BECF9E8B599B2A86CEB3CC2E34FACA5418636E25E3F552FF271AE59FDD82CF3B95A65A8654978F5A37D349E9262D2A7B2F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:13:a0:b7:3f:95:61:b3:c4:83:e4:9d:79:c4:
                    39:d1:2f:40:ae:a5:3f:f8:81:69:49:5a:b5:3f:db:
                    75:39:bb:19:0d:91:aa:13:85:d1:3b:20:61:d6:86:
                    7d:85:0f:df:18:88:b1:47:74:22:e7:39:0a:b0:28:
                    37:5e:a9:b9:61:9b:39:07:1f:06:24:25:c4:17:7a:
                    1f:82:8e:d1:a9:42:10:81:75:54:6b:d9:a0:85:95:
                    5c:72:1a:4c:1f:41:38:0d:6a:48:5e:b7:83:0c:ba:
                    3d:20:eb:72:77:f7:4c:a8:23:ce:d3:34:b5:f2:16:
                    84:39:9e:94:f9:aa:b8:d3:61:40:16:1c:65:46:5a:
                    f1:44:84:fc:1c:fc:b4:85:9a:8a:05:95:90:9e:b7:
                    e0:8d:9d:0b:9e:4c:18:2c:43:ce:89:5a:99:f4:42:
                    67:d1:8e:b0:cc:23:d2:c7:34:d1:b2:78:46:46:6d:
                    96:46:2f:dd:76:ff:01:c3:e2:f0:a1:a2:80:44:d3:
                    4e:dd:4d:c5:64:de:c0:db:bb:1a:8e:27:74:be:cf:
                    9e:8b:59:9b:2a:86:ce:b3:cc:2e:34:fa:ca:54:18:
                    63:6e:25:e3:f5:52:ff:27:1a:e5:9f:dd:82:cf:3b:
                    95:a6:5a:86:54:97:8f:5a:37:d3:49:e9:26:2d:2a:
                    7b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:89:27:F2:D7:A8:35:1B:0A:40:E0:B7:EA:7C:EB:D9:49:49:9A:58
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e332e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:4e:89:cc:df:3b:bb:8c:3e:00:3a:7f:28:b8:82:6a:bd:f9:
         47:f8:c5:60:67:65:37:34:e5:47:a8:6f:93:e9:66:07:83:b9:
         c4:7d:a0:56:c3:b9:9a:8b:5b:8d:e6:a4:d3:52:2d:d8:13:16:
         c0:57:91:c7:2a:f1:ff:de:cb:2d:03:55:68:d3:4d:4c:1c:ca:
         b9:7a:d1:f9:6f:82:58:f3:b2:2f:12:35:2c:58:64:3c:76:ca:
         3a:29:72:0b:32:23:61:cb:2d:89:bc:12:5f:5b:3e:0f:63:e1:
         4a:aa:4a:05:f6:42:ea:a0:11:bf:ad:5f:7e:d8:25:b6:73:7e:
         8c:f5:fe:59:1d:93:00:aa:64:50:85:74:e3:12:72:0a:b6:c2:
         55:ae:81:8e:be:61:94:75:37:90:b3:1c:3c:92:a8:57:3c:23:
         91:b8:bd:63:85:84:1b:51:40:98:84:68:db:2b:3f:1c:33:e6:
         a7:46:ed:67:54:54:40:5a:b7:d0:5d:8e:72:cb:ef:6f:65:8c:
         ea:dc:40:01:cd:55:28:53:12:c5:1a:0f:cc:01:ac:81:79:b5:
         f5:90:33:28:03:8b:98:2c:7b:d8:6c:9c:8c:15:55:07:84:fb:
         85:ce:87:2f:6e:ac:db:2e:f4:b0:2d:cd:78:62:c1:af:2b:23:
         b4:86:11:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:22 2024 by rpki-client on console-ams.rpki-client.org