Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3233302e302f32342d3234203d3e203238333338.roa
File:                     3138392e38342e3233302e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          5Chnttz9EU92+qqnrBWEfEmH+dM+I6j5ELBvz4OdGFo=
Subject key identifier:   7C:EE:12:F4:E1:C2:D8:76:97:78:D5:7E:D4:DD:E4:CF:83:19:0D:C5
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       4A2EEC36A92FF2F5BB561755C7F358216B1F1DEA
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3233302e302f32342d3234203d3e203238333338.roa
Signing time:             Wed 29 May 2024 18:17:13 +0000
ROA not before:           Wed 29 May 2024 18:12:13 +0000
ROA not after:            Wed 28 May 2025 18:17:13 +0000
asID:                     28338
IP address blocks:        189.84.230.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 19:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:2e:ec:36:a9:2f:f2:f5:bb:56:17:55:c7:f3:58:21:6b:1f:1d:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: May 29 18:12:13 2024 GMT
            Not After : May 28 18:17:13 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:42:93:05:d2:2a:21:a7:90:f5:48:65:ab:bb:
                    1c:c6:e7:9b:34:95:4c:cd:47:85:db:f5:6e:af:94:
                    60:1b:a1:50:ac:fa:9d:55:e4:2f:19:0f:31:2d:79:
                    a9:6b:52:f2:58:8a:00:44:c4:21:9a:15:ff:18:4c:
                    29:ac:63:65:2c:e4:3e:be:e6:97:f7:74:51:e2:ba:
                    f1:71:f0:1a:d9:fd:4f:fb:14:bd:c2:c2:01:0f:6f:
                    d1:4f:53:4e:85:f8:89:25:3c:2b:ec:50:d9:ae:e3:
                    b8:47:ae:d5:57:f9:25:1a:e9:13:ce:f1:45:49:79:
                    b2:5b:7c:9f:37:af:ea:4c:4b:19:e8:93:f6:1b:5f:
                    3d:d0:06:13:58:17:53:43:c9:94:23:b0:f2:54:7e:
                    77:d8:01:3c:7d:50:c9:2d:a5:20:d0:60:91:a2:19:
                    fe:9f:a4:5f:f5:bc:bd:67:0d:28:b3:4a:4f:64:f3:
                    7b:f4:35:d9:31:e6:05:91:95:aa:f2:7e:64:b6:ce:
                    b5:82:a1:32:22:64:48:5b:b2:4c:ea:14:70:50:89:
                    b3:d8:28:e4:4d:ad:af:e0:0b:b8:66:7a:fc:44:2c:
                    a1:7d:63:d9:2a:83:0d:93:d5:fd:df:94:e4:c5:bc:
                    23:f0:8f:a4:83:79:1f:b7:32:ea:6d:8d:a9:8d:35:
                    da:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:EE:12:F4:E1:C2:D8:76:97:78:D5:7E:D4:DD:E4:CF:83:19:0D:C5
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3233302e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:5d:71:b9:82:9d:db:d5:22:97:71:8c:33:89:dc:c4:1d:0b:
         57:cf:18:e0:10:c6:ac:46:4f:98:fa:ac:3f:60:fe:fd:a7:c5:
         6b:e1:4f:35:b7:31:45:9d:44:4d:09:4f:90:07:a7:8d:ac:d0:
         a4:b7:20:23:ff:c2:f4:8a:bc:05:b9:03:93:23:8e:95:cc:f7:
         0e:5b:d3:01:23:fd:45:5b:f0:e8:9c:e1:f8:68:e5:25:55:2e:
         dc:07:59:77:be:29:06:c2:3c:f6:46:50:56:dd:d6:4b:a2:90:
         3e:85:47:a1:b3:86:cd:27:e6:02:26:a8:0d:08:f7:18:a8:d1:
         3d:b2:c4:3e:5e:13:8f:19:7b:a3:63:c9:a8:11:4f:a3:16:33:
         5e:7e:21:a2:d7:71:3d:8d:31:a5:97:57:36:3b:5f:06:e9:99:
         3d:56:93:45:cf:db:b5:b1:25:fe:73:63:a6:19:24:48:52:db:
         8d:32:dd:9e:a6:f9:77:d8:3c:92:0a:5d:02:8d:6f:70:55:a1:
         7f:45:41:a7:4e:c0:ad:68:ee:1c:98:60:71:74:d1:77:60:c4:
         00:1a:90:dd:a6:3b:1d:a6:c3:97:f2:a1:85:59:c1:d4:41:38:
         2c:cb:68:11:3d:32:04:d7:3e:eb:74:17:3b:9d:6b:a2:1a:67:
         8f:72:c7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:45 2024 by rpki-client on console-fra.rpki-client.org