Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e352e302f32342d3234203d3e203238333338.roa
File:                     3138392e34352e352e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          N+mJ4juaD/m4sEYqg8eOUHETgzw4cCfzVS3kXBZ2IrQ=
Subject key identifier:   95:68:37:B9:B8:54:59:B4:73:F1:CE:35:43:2A:83:2C:1A:AC:8D:FD
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       6A6C2DCE0C7316D74D3C74C347DA394BC872FED1
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e352e302f32342d3234203d3e203238333338.roa
Signing time:             Wed 29 May 2024 18:17:14 +0000
ROA not before:           Wed 29 May 2024 18:12:14 +0000
ROA not after:            Wed 28 May 2025 18:17:14 +0000
asID:                     28338
IP address blocks:        189.45.5.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 19:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:6c:2d:ce:0c:73:16:d7:4d:3c:74:c3:47:da:39:4b:c8:72:fe:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: May 29 18:12:14 2024 GMT
            Not After : May 28 18:17:14 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:92:32:81:13:f5:6c:fe:2d:0d:1a:50:45:de:
                    45:cd:3a:a6:7b:b2:62:d8:4e:99:d1:91:1f:9b:16:
                    ab:88:59:84:ec:4b:ad:63:b1:37:d2:5f:20:7d:28:
                    85:3c:68:78:4d:66:53:20:f8:d4:b1:f0:2d:49:63:
                    2f:12:ed:36:54:9b:f0:f2:d1:16:e6:55:48:3c:5e:
                    b6:d9:ab:3c:8b:4b:d2:2d:96:eb:75:e7:f0:36:c4:
                    b5:ca:f3:5e:ca:77:b2:cc:99:8f:13:da:19:b7:28:
                    1b:eb:3b:6c:9f:15:34:a5:45:44:d5:43:b0:83:eb:
                    26:90:a3:80:71:ac:5c:5a:36:19:38:b5:83:4e:9b:
                    9d:0d:01:1e:d6:c3:5e:2b:af:38:81:f6:5b:db:69:
                    49:e9:2f:a2:b9:f1:01:1f:a2:d3:de:9e:ad:6c:3c:
                    07:53:f7:9e:77:09:a6:34:40:27:99:5b:7e:d6:b4:
                    98:af:3e:84:12:b8:6c:1c:62:61:43:6a:00:17:2f:
                    1d:b3:a7:f1:11:25:79:aa:10:64:57:31:25:69:29:
                    c1:4b:50:58:cd:b1:e7:49:8f:76:3a:d8:e6:ce:c6:
                    4d:e8:43:f6:c2:8b:b8:08:26:eb:ea:4b:ad:15:6e:
                    cb:4f:62:da:2e:4a:2a:ad:46:dc:39:18:47:5e:33:
                    6e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:68:37:B9:B8:54:59:B4:73:F1:CE:35:43:2A:83:2C:1A:AC:8D:FD
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e352e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:c0:65:90:a5:21:03:29:ad:66:23:5c:04:5b:d7:43:52:df:
         8f:d0:60:8a:18:a6:d0:65:cb:a5:63:58:ae:3f:a8:f9:c7:42:
         d6:66:ae:6a:6c:d6:6c:c8:7e:ca:0a:93:58:ce:c6:c3:7d:de:
         6e:cf:3c:23:37:bf:42:15:d0:ef:fa:3f:52:88:28:6b:cd:0a:
         26:11:52:77:6f:81:a7:14:fd:35:66:3c:db:47:8a:fc:d0:46:
         44:65:44:22:65:a4:ad:13:e2:28:4d:63:83:d0:4a:75:c7:e4:
         9e:04:75:c7:ff:c9:eb:d4:c1:bc:50:d2:61:65:c7:ff:11:62:
         f9:87:bd:67:88:25:a8:62:a3:40:05:9d:10:2b:be:b0:45:8c:
         14:98:35:eb:31:bb:8e:a7:59:96:76:e2:91:34:4c:27:76:f4:
         9e:13:81:02:96:62:1b:67:c1:a3:de:f1:b1:03:83:48:e5:f7:
         19:c1:69:cd:67:a5:0f:2d:09:f9:0e:34:73:2b:6f:14:d6:92:
         0c:6b:5e:17:ba:48:a0:64:b0:eb:de:4e:ab:f5:72:44:73:34:
         75:75:11:c0:7a:67:b1:8c:b8:df:b9:f2:a2:9c:10:81:cc:e7:
         f7:d1:b5:9a:05:2c:67:4f:23:16:79:af:3d:8d:48:6f:eb:34:
         85:f4:d2:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:45 2024 by rpki-client on console-fra.rpki-client.org