Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3232382e302f32342d3234203d3e203532343638.roa
File:                     3138392e38342e3232382e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          wbS+sZ+t0S0cj9/9pUCHH0VHrh7djEHbkdwNvRjYmW8=
Subject key identifier:   6B:42:2F:1A:0F:C8:E5:99:85:5F:C9:DF:B0:3C:2E:1C:8D:4C:9B:28
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       4CCB43AF4067B9CA3E224690FECEA0C9ACBAFDCC
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3232382e302f32342d3234203d3e203532343638.roa
Signing time:             Wed 29 May 2024 18:25:17 +0000
ROA not before:           Wed 29 May 2024 18:20:17 +0000
ROA not after:            Wed 28 May 2025 18:25:17 +0000
asID:                     52468
IP address blocks:        189.84.228.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 19:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:cb:43:af:40:67:b9:ca:3e:22:46:90:fe:ce:a0:c9:ac:ba:fd:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: May 29 18:20:17 2024 GMT
            Not After : May 28 18:25:17 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:90:8c:56:72:6f:75:c8:13:eb:75:01:72:b0:
                    fe:84:95:90:c9:5e:f6:cf:5d:9c:b0:46:ca:eb:3c:
                    2d:87:ef:21:43:12:cc:d7:53:e0:eb:72:ae:12:10:
                    3e:c5:17:1c:bd:89:0d:74:ac:46:17:bc:11:1c:ff:
                    31:fe:55:68:64:2e:ad:ca:4f:ac:b3:3f:30:51:04:
                    77:1f:e4:19:2a:d9:46:20:3b:c6:98:f1:7f:46:fc:
                    96:d3:35:8a:4c:fc:83:58:07:44:1b:4e:9c:21:03:
                    67:47:b9:f7:83:d7:0e:85:12:fd:25:fb:b3:2d:a6:
                    59:8c:f7:e3:00:41:61:3b:ea:6e:36:34:29:a5:c1:
                    12:76:f2:05:8f:76:51:28:5f:8a:c4:e6:e1:44:6b:
                    d7:3e:04:cc:5c:b7:34:16:b4:79:f2:d2:fa:c2:8c:
                    de:93:78:d3:9c:46:b9:9f:b4:17:86:b9:45:13:fb:
                    c9:e2:a4:45:d6:dc:5e:5b:4d:52:65:12:1d:98:2d:
                    ed:a2:20:71:e8:94:3d:ab:4e:5d:89:45:ed:0c:38:
                    18:f2:1e:20:1c:3b:77:2d:9e:15:f4:20:1e:bc:d9:
                    4c:02:66:a6:81:a0:4a:2b:53:ac:07:39:47:dd:f2:
                    0e:72:01:28:e2:61:9a:8f:c8:b4:2d:08:7b:bc:fe:
                    f8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:42:2F:1A:0F:C8:E5:99:85:5F:C9:DF:B0:3C:2E:1C:8D:4C:9B:28
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3232382e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:48:72:9c:21:56:61:12:9d:f8:2e:e1:4c:96:8a:9c:d9:5e:
         ca:77:91:9a:af:fd:de:eb:1e:fc:c7:0a:fa:75:cf:67:f3:11:
         b1:98:fe:c7:8a:ec:1b:1f:67:20:48:d8:cf:59:b7:21:a8:1c:
         0d:65:8b:d8:e8:74:8c:38:76:a9:2e:6f:e2:53:ec:da:52:b0:
         06:95:03:23:fc:80:fb:52:fe:7f:a5:37:44:c8:71:4d:63:db:
         20:c5:bf:af:da:ee:07:2e:8e:6f:66:e2:46:dc:8d:39:4c:29:
         b0:07:29:f1:e1:5b:59:40:0a:c5:22:f7:bd:c1:f3:e4:73:7f:
         76:4f:24:c7:94:0c:dc:b3:95:b5:e3:06:87:b4:91:35:18:f9:
         e8:7b:7e:10:1b:d5:75:19:f4:7a:32:2b:a6:30:bc:d4:7d:40:
         a1:d2:19:11:33:78:67:23:2a:c7:83:63:9d:c4:0b:1d:a3:77:
         9c:0c:aa:b0:1a:ca:2d:bd:b5:bd:bf:c6:68:b5:ec:d5:a6:02:
         1b:6a:dd:c5:46:87:5a:fa:bd:68:74:cc:6d:26:50:2e:74:c5:
         22:2f:5a:6e:d2:e1:f7:c2:68:ca:63:5d:4b:9c:88:ff:1a:4e:
         73:07:cb:91:d7:20:62:be:56:af:07:d2:c5:5c:11:07:5a:28:
         c7:9b:4f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:45 2024 by rpki-client on console-fra.rpki-client.org