Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3232352e302f32342d3234203d3e203532343638.roa
File:                     3138392e38342e3232352e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          hZgsBZ9/qSX1W52Xs3iWoftk9y0Vv0Nv7TEp3iL7tmg=
Subject key identifier:   B3:96:79:AA:0B:4F:F2:54:C8:1A:A7:25:D5:35:04:AC:6A:2A:E6:D0
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       0FB5AF67A68DDB9BBC8D64C4EFE5B833889F6100
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3232352e302f32342d3234203d3e203532343638.roa
Signing time:             Wed 29 May 2024 18:24:56 +0000
ROA not before:           Wed 29 May 2024 18:19:56 +0000
ROA not after:            Wed 28 May 2025 18:24:56 +0000
asID:                     52468
IP address blocks:        189.84.225.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 19:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:b5:af:67:a6:8d:db:9b:bc:8d:64:c4:ef:e5:b8:33:88:9f:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: May 29 18:19:56 2024 GMT
            Not After : May 28 18:24:56 2025 GMT
        Subject: CN=3082010A0282010100D75A49B87682C4C21296DF586814AF8A6A38601129F5BE97ABC4FE6AD9D0DF7334A673A1EAC6CA99C20E06C901856B0A4CB10ABA4C76B79F8EB02C58383D76437B27EF0633199B0902F9F14B4F9ED35971A2EDA309BAA3E8789A396DCE42F797A2C0F9B882CE000CCA716AEF450AFD859D1919A13A9C7BA93C671E8054DAB3B6385C05BB1D2A816C9287A3361DED8E502D0BE1C4259E93B84CFE12352F89F1F3E1A9366CFEC6F6ECEC42F5CC959421CCE6D5A48D5E8B9131AB5CF3A30699D690EC79591B5DA6BCE0B40CB0BE54BAE0689F022893F9AA83E4D1F6C700BE674F9218C3062B8219754066F5D26E0492E7CBC6E0F4FCF11D42ABB2EC3BA3CFD960330203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:5a:49:b8:76:82:c4:c2:12:96:df:58:68:14:
                    af:8a:6a:38:60:11:29:f5:be:97:ab:c4:fe:6a:d9:
                    d0:df:73:34:a6:73:a1:ea:c6:ca:99:c2:0e:06:c9:
                    01:85:6b:0a:4c:b1:0a:ba:4c:76:b7:9f:8e:b0:2c:
                    58:38:3d:76:43:7b:27:ef:06:33:19:9b:09:02:f9:
                    f1:4b:4f:9e:d3:59:71:a2:ed:a3:09:ba:a3:e8:78:
                    9a:39:6d:ce:42:f7:97:a2:c0:f9:b8:82:ce:00:0c:
                    ca:71:6a:ef:45:0a:fd:85:9d:19:19:a1:3a:9c:7b:
                    a9:3c:67:1e:80:54:da:b3:b6:38:5c:05:bb:1d:2a:
                    81:6c:92:87:a3:36:1d:ed:8e:50:2d:0b:e1:c4:25:
                    9e:93:b8:4c:fe:12:35:2f:89:f1:f3:e1:a9:36:6c:
                    fe:c6:f6:ec:ec:42:f5:cc:95:94:21:cc:e6:d5:a4:
                    8d:5e:8b:91:31:ab:5c:f3:a3:06:99:d6:90:ec:79:
                    59:1b:5d:a6:bc:e0:b4:0c:b0:be:54:ba:e0:68:9f:
                    02:28:93:f9:aa:83:e4:d1:f6:c7:00:be:67:4f:92:
                    18:c3:06:2b:82:19:75:40:66:f5:d2:6e:04:92:e7:
                    cb:c6:e0:f4:fc:f1:1d:42:ab:b2:ec:3b:a3:cf:d9:
                    60:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:96:79:AA:0B:4F:F2:54:C8:1A:A7:25:D5:35:04:AC:6A:2A:E6:D0
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3232352e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:6a:16:b9:7c:b5:95:48:e4:1b:ad:70:ea:c4:ab:50:a1:d2:
         54:a3:5a:d8:61:ee:db:f0:05:47:2b:ca:54:4a:70:ee:07:44:
         72:9a:96:56:86:cc:15:38:85:dc:d7:43:23:2e:34:38:75:93:
         ff:11:b0:f8:58:18:c0:d2:ad:87:29:6f:02:47:17:8d:cf:03:
         28:0a:2b:0e:e5:12:f3:ce:4b:3b:3e:f1:36:bc:3c:87:e7:ff:
         b8:2f:af:f9:3e:d7:d4:82:a2:07:f3:4a:23:70:07:f6:10:98:
         bb:af:d3:22:97:ce:22:aa:d7:08:7a:d5:4a:43:a5:a0:08:a1:
         d6:04:f4:32:f9:46:07:8c:7c:a1:26:e2:4c:b9:88:fb:5c:57:
         c4:e1:94:09:32:e3:6c:74:9f:1b:6e:10:0d:1f:f6:0d:39:8d:
         1c:e8:d3:b6:af:2c:9a:0c:5f:83:e4:91:8f:83:89:75:93:2b:
         6d:aa:46:91:82:36:95:9c:d5:03:37:a8:61:7d:8b:e9:07:c9:
         6c:12:72:6b:8b:e8:4c:1f:1c:18:ae:6c:06:c2:40:f3:a0:f4:
         95:6e:22:af:ac:3c:8e:31:16:f6:7a:25:a1:26:97:22:a9:21:
         6e:aa:0a:35:ae:5d:22:8a:e5:cb:b7:c5:25:02:f8:58:6d:2c:
         58:08:a6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:45 2024 by rpki-client on console-fra.rpki-client.org