Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3232342e302f32302d3230203d3e203238333338.roa
File:                     3138392e38342e3232342e302f32302d3230203d3e203238333338.roa (raw, json)
Hash identifier:          yh+BpWfmflcwxoDeS/O8dxsfz+IeeU3Gg2zLPxnL9yE=
Subject key identifier:   B8:31:DF:47:0B:1E:C3:69:FE:9A:AD:AB:92:47:27:62:DC:2C:41:B3
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       3972732E9AC96B7792E43CAA52C8B7BA3E3A39F8
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3232342e302f32302d3230203d3e203238333338.roa
Signing time:             Wed 29 May 2024 18:17:16 +0000
ROA not before:           Wed 29 May 2024 18:12:16 +0000
ROA not after:            Wed 28 May 2025 18:17:16 +0000
asID:                     28338
IP address blocks:        189.84.224.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 19:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:72:73:2e:9a:c9:6b:77:92:e4:3c:aa:52:c8:b7:ba:3e:3a:39:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: May 29 18:12:16 2024 GMT
            Not After : May 28 18:17:16 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b0:b1:2f:87:43:05:93:be:a9:d2:e1:f4:8b:
                    80:09:d6:e1:9c:fa:73:49:7b:c9:57:e5:9c:74:08:
                    7b:48:3e:db:3e:a0:97:bf:e3:b0:4d:ec:85:d0:e9:
                    16:76:eb:f1:fc:4b:83:47:0a:b2:65:d9:a1:2b:b7:
                    aa:96:99:7f:62:40:ef:b2:dd:7e:b0:3f:4b:75:6c:
                    99:24:35:05:91:c5:93:46:6e:d2:27:3b:83:84:59:
                    7f:30:12:7d:c1:66:ba:6e:02:a5:df:41:c3:7c:83:
                    5e:bf:6f:a2:74:a1:03:c3:b4:64:73:bb:0e:3a:f9:
                    86:bd:7d:a4:43:da:97:ef:87:5d:4f:b2:b4:67:3b:
                    f0:cb:eb:8a:2c:7d:ef:7b:7e:57:74:24:01:58:6f:
                    2d:b1:49:2e:fe:db:3d:90:d8:89:83:37:59:64:39:
                    62:44:f2:ab:e0:fa:7e:df:97:32:98:48:d3:fa:8e:
                    b3:e3:c6:22:15:82:01:25:db:60:43:92:4a:ec:4b:
                    b3:91:94:7f:88:08:1b:9b:e7:bb:b6:89:a2:6d:9a:
                    78:31:5d:a2:d9:6f:1f:98:9f:8d:86:a2:31:7a:49:
                    4d:a3:34:ab:e6:4f:1a:48:11:b4:1b:e6:40:ae:cf:
                    59:63:f2:d5:10:82:a4:02:6f:21:ad:0f:b9:2f:a3:
                    b8:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:31:DF:47:0B:1E:C3:69:FE:9A:AD:AB:92:47:27:62:DC:2C:41:B3
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3232342e302f32302d3230203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ab:48:3e:ae:70:30:fa:0b:a1:4e:15:b8:10:6a:92:9c:ca:0e:
         a8:f0:af:ef:4f:ac:48:62:4f:d3:e1:13:04:28:06:f3:16:80:
         86:3e:6f:de:0b:c3:4a:58:33:ad:78:e2:c5:77:87:7f:b2:42:
         f2:82:a8:ec:c6:51:c4:e8:f4:45:31:83:0f:c0:79:e3:72:f9:
         f6:f6:37:6f:00:67:5c:56:16:ad:b5:ea:d1:ee:05:0f:07:67:
         3e:c1:4e:8f:f4:a1:8e:98:c1:7d:f4:a1:57:06:ea:4f:2f:8e:
         31:f3:48:f6:ed:f6:78:45:8b:9b:4a:1e:bb:fb:ae:13:e3:40:
         f0:00:5b:fa:80:b2:74:c7:de:5a:5b:56:e3:43:2d:5c:f5:f8:
         c8:5e:b7:72:70:ba:ab:c4:e7:b0:70:a3:c0:3b:5e:64:2b:14:
         f8:a4:a9:3c:09:ca:8c:ae:da:e4:a6:78:60:5f:c9:f6:17:c8:
         8a:2e:9e:23:72:33:a5:a3:80:8e:43:a8:f1:68:11:ce:07:8e:
         cf:b1:8e:df:e1:1f:c7:bb:82:00:30:00:27:6f:e6:31:2e:83:
         b0:e4:de:1d:eb:ea:20:98:20:ac:37:aa:98:36:29:01:ee:14:
         cc:9f:eb:8e:0d:26:15:30:96:21:38:49:d2:55:00:83:90:ca:
         ad:d6:ae:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:45 2024 by rpki-client on console-fra.rpki-client.org