Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e342e302f32342d3234203d3e203238333338.roa
File:                     3138392e34352e342e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          Ko5KIoZ7DP2tbDv9GwiBpdiaTc/ab39ufVJqR5JpDzM=
Subject key identifier:   47:26:79:61:14:28:60:96:B1:8D:5D:F0:33:AB:8D:A0:48:F8:AB:DD
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       08A3832648314A77B8D9E12AAC38AD37B582DAE6
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e342e302f32342d3234203d3e203238333338.roa
Signing time:             Wed 29 May 2024 18:17:13 +0000
ROA not before:           Wed 29 May 2024 18:12:13 +0000
ROA not after:            Wed 28 May 2025 18:17:13 +0000
asID:                     28338
IP address blocks:        189.45.4.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 19:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:a3:83:26:48:31:4a:77:b8:d9:e1:2a:ac:38:ad:37:b5:82:da:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: May 29 18:12:13 2024 GMT
            Not After : May 28 18:17:13 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0f:3c:4f:b8:32:01:00:e9:37:00:3e:f2:1d:
                    55:27:20:a5:52:ba:db:3f:9a:6c:cb:59:bc:57:86:
                    5d:ee:be:ac:48:fd:26:34:7f:3b:48:75:70:27:e8:
                    24:64:ce:e4:3b:0e:88:a9:55:d6:66:44:e6:76:ac:
                    07:f2:4a:d2:7b:bf:51:ab:ca:15:50:a7:37:13:64:
                    5a:c9:8f:90:75:25:59:15:b4:6b:1c:a0:6a:c4:b5:
                    fe:13:35:b7:be:24:16:7c:b0:ea:dc:7d:96:af:0c:
                    80:66:de:6a:63:ec:fa:37:33:d9:fe:8c:f3:da:29:
                    0c:62:a2:bc:19:5d:f0:76:84:4f:76:cf:d2:9a:92:
                    17:79:95:6d:59:08:af:77:b8:e1:9f:17:5e:83:0b:
                    57:6e:98:9d:24:64:5f:0f:1a:8c:62:05:25:0b:9b:
                    32:fb:7e:9a:0c:28:b8:cf:49:ae:72:24:4b:ef:2a:
                    4a:67:8e:79:b8:64:73:ee:c1:77:77:35:a2:e6:ad:
                    fa:5e:f7:05:4a:64:11:52:64:fe:5e:48:ac:c5:9b:
                    e8:da:36:ec:2e:a9:fd:be:c0:4b:77:bd:e4:75:3b:
                    bc:60:66:61:07:ca:c3:74:dd:c2:0b:84:e6:d9:17:
                    7a:7a:8a:1d:58:a3:7c:94:2a:c2:5a:94:8a:4c:7f:
                    b9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:26:79:61:14:28:60:96:B1:8D:5D:F0:33:AB:8D:A0:48:F8:AB:DD
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e342e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:1e:49:3b:27:2c:cc:b1:81:98:87:3e:b7:ab:88:53:04:ec:
         90:b6:e9:2a:41:73:45:4a:43:58:f6:a7:a9:e2:ca:cc:a5:b4:
         71:09:bb:fd:c1:79:86:a7:8d:e5:90:d7:fb:a4:28:85:26:85:
         01:82:c4:0e:1e:3e:dc:50:65:37:f8:11:8a:bd:fb:53:17:22:
         06:82:d5:07:0a:9f:d7:23:a8:ed:75:bc:bf:42:74:69:54:62:
         d2:8a:ab:40:a2:c3:95:62:6d:a1:68:16:69:c6:61:18:66:b5:
         dc:65:24:95:96:bc:71:6a:49:bb:1f:5e:93:e9:f8:07:59:4e:
         ba:e4:95:f8:02:99:1e:67:6d:9a:25:6a:03:f1:6f:29:76:9d:
         dd:95:5f:b4:01:d5:f3:7e:14:df:e6:53:52:6c:fb:f5:67:2d:
         be:ea:95:75:74:25:01:e0:45:df:9d:8f:a5:c8:30:6b:2b:77:
         ab:5a:53:24:3a:ce:f9:7c:7a:3d:19:98:9a:32:2f:c2:de:3c:
         88:48:6c:bf:ec:8c:43:b0:01:8e:37:c5:b7:87:92:1e:ff:ee:
         4c:23:0d:a8:55:f9:56:2d:a1:6b:88:c2:78:67:8d:ce:bf:60:
         39:ef:03:e0:3d:79:ed:06:86:03:95:3e:d2:8c:3d:75:3c:b2:
         b2:8d:13:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:45 2024 by rpki-client on console-fra.rpki-client.org