Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e382e302f32342d3234203d3e203238333338.roa
File:                     3138392e34352e382e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          45tUfnB11IGrtEUv5vTZYKIRXgCrCEfDCL2S5yomqDM=
Subject key identifier:   FD:5C:56:7B:F2:7E:E3:85:84:46:A2:0A:07:CF:1A:14:4A:F9:D7:96
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       127B518491C68D8A4C5AC9051F9502B038F3B061
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e382e302f32342d3234203d3e203238333338.roa
Signing time:             Wed 29 May 2024 18:17:18 +0000
ROA not before:           Wed 29 May 2024 18:12:18 +0000
ROA not after:            Wed 28 May 2025 18:17:18 +0000
asID:                     28338
IP address blocks:        189.45.8.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 19:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:7b:51:84:91:c6:8d:8a:4c:5a:c9:05:1f:95:02:b0:38:f3:b0:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: May 29 18:12:18 2024 GMT
            Not After : May 28 18:17:18 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0e:84:c7:74:3b:e4:f4:cd:aa:66:0d:27:11:
                    88:66:77:d7:d4:ee:b5:6b:09:0b:38:1a:e1:44:1a:
                    d7:f9:6b:12:0c:c3:7e:f3:a9:13:0c:4a:fc:50:4f:
                    68:09:00:c9:73:0c:31:71:81:5e:ac:80:a6:d9:8a:
                    c6:ca:8e:a5:f6:14:96:b6:f2:b6:d6:06:ce:1d:6e:
                    27:b1:a5:91:76:21:57:98:8b:28:58:20:ad:4e:c9:
                    0e:e1:79:16:82:4e:10:ef:73:0d:b9:75:c8:b1:33:
                    a9:d4:8f:3f:7f:a0:6e:2e:28:2a:c6:e1:7a:5c:36:
                    d9:91:45:ed:ca:68:b3:a9:a0:46:d5:5c:e2:86:19:
                    f9:a5:9c:a8:93:1c:5f:0c:5a:6b:1f:e9:4b:50:07:
                    7d:68:22:12:84:3a:e1:e1:eb:bd:bb:3f:83:2a:62:
                    da:dd:80:c1:0b:d2:aa:79:a0:ae:bc:37:9f:ab:0f:
                    5b:30:27:4b:7c:5f:04:fb:61:b1:c4:54:87:24:2f:
                    45:da:b8:23:64:7c:66:70:a9:5f:37:33:cb:cb:3c:
                    51:8a:ab:d8:24:f0:40:32:27:3c:f3:e5:3a:b4:c2:
                    c0:66:51:16:9e:b6:74:39:82:7a:a0:89:d2:0b:04:
                    14:29:d8:f8:fc:24:22:4a:c7:43:12:31:a0:67:35:
                    82:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:5C:56:7B:F2:7E:E3:85:84:46:A2:0A:07:CF:1A:14:4A:F9:D7:96
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e382e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:4f:93:a3:b1:21:33:57:cb:df:22:bb:68:1c:b2:c4:cf:19:
         10:f5:30:2f:4f:7a:a3:11:21:03:b8:b4:d0:73:bc:a5:60:e3:
         ae:40:06:c7:8e:fe:ce:1e:ee:a3:09:0d:bf:ee:11:cc:55:01:
         af:64:c1:b4:5b:bf:8f:69:ac:45:76:58:1b:19:f8:76:4e:b4:
         d5:64:02:3e:f1:55:74:17:a5:80:76:b4:e9:58:39:d3:6a:cf:
         7d:aa:42:46:88:c5:ba:be:a5:88:03:4e:a1:ae:4e:73:cc:93:
         90:e1:ab:54:9a:c5:5f:58:b8:8d:c7:15:b3:11:43:78:24:7e:
         eb:a7:13:87:b2:f6:2c:ce:08:02:9f:91:c1:ca:1e:8a:6a:72:
         d5:7c:44:e1:ce:1a:3f:95:ba:4c:03:4d:1d:72:1c:31:5d:a3:
         ed:ca:02:5a:e2:94:96:cd:a7:92:e0:11:b2:07:86:75:4c:17:
         ff:23:f6:0c:eb:e3:fc:24:0b:68:84:b3:cf:b8:ec:fb:3f:f2:
         9c:b4:a2:d5:c3:ca:e3:cd:8e:d2:4d:20:8b:86:21:0b:60:3d:
         38:fe:7d:c2:f5:98:a6:1e:02:ef:63:fd:1b:43:c7:6b:8a:a0:
         35:ef:2e:92:cd:f4:81:e7:e7:32:8d:0e:96:bb:bd:48:45:71:
         e5:1b:56:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:45 2024 by rpki-client on console-fra.rpki-client.org