Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3233322e302f32342d3234203d3e203238333338.roa
File:                     3138392e38342e3233322e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          BZn0/GQZawxKPsVzhUcOpUfezuaTYeIiUEtuxihMMwE=
Subject key identifier:   06:BF:29:AF:06:CF:21:ED:0B:A5:F4:F3:87:B2:34:C8:39:19:DA:3D
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       53CE2B33D97199A7965CADADE6BF86B15B789ED8
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3233322e302f32342d3234203d3e203238333338.roa
Signing time:             Wed 29 May 2024 18:17:15 +0000
ROA not before:           Wed 29 May 2024 18:12:15 +0000
ROA not after:            Wed 28 May 2025 18:17:15 +0000
asID:                     28338
IP address blocks:        189.84.232.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 19:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:ce:2b:33:d9:71:99:a7:96:5c:ad:ad:e6:bf:86:b1:5b:78:9e:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: May 29 18:12:15 2024 GMT
            Not After : May 28 18:17:15 2025 GMT
        Subject: CN=3082010A0282010100CDE9F7CA9E1BAF933CF9B87E9C70C9E2CDD1791003544BDCDB277D0CFBC11E3FF10524BEA73640FF6F9E99C688CBD4DBA652B778098FE68E4FCC9DC1ED99E8803B73771AD13B0352647C340A80B4CE5F25C270BCEB79CEACC422B00CC08CE953A04F0A1147754A5781371D0DFCDF52BA0DA1A0F503DDCBB0041075AE8F359104C33B4B72C1FEA6D2083E520B53FE257561CD98C526CEFC02F7A451D5315C6DF5E8F923638C7D393EDFEF0AB68856DD3964F2654F7A6AE4B0B602CF8486E08298E47BFCE14A33393D039EEF5731E5032E60C9BC29516BA659B731BE8930D3804DE805701E91F43C7178195BA58B0CB6B23A0F29C58B866040EE8E6E8BFE7AC1C50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e9:f7:ca:9e:1b:af:93:3c:f9:b8:7e:9c:70:
                    c9:e2:cd:d1:79:10:03:54:4b:dc:db:27:7d:0c:fb:
                    c1:1e:3f:f1:05:24:be:a7:36:40:ff:6f:9e:99:c6:
                    88:cb:d4:db:a6:52:b7:78:09:8f:e6:8e:4f:cc:9d:
                    c1:ed:99:e8:80:3b:73:77:1a:d1:3b:03:52:64:7c:
                    34:0a:80:b4:ce:5f:25:c2:70:bc:eb:79:ce:ac:c4:
                    22:b0:0c:c0:8c:e9:53:a0:4f:0a:11:47:75:4a:57:
                    81:37:1d:0d:fc:df:52:ba:0d:a1:a0:f5:03:dd:cb:
                    b0:04:10:75:ae:8f:35:91:04:c3:3b:4b:72:c1:fe:
                    a6:d2:08:3e:52:0b:53:fe:25:75:61:cd:98:c5:26:
                    ce:fc:02:f7:a4:51:d5:31:5c:6d:f5:e8:f9:23:63:
                    8c:7d:39:3e:df:ef:0a:b6:88:56:dd:39:64:f2:65:
                    4f:7a:6a:e4:b0:b6:02:cf:84:86:e0:82:98:e4:7b:
                    fc:e1:4a:33:39:3d:03:9e:ef:57:31:e5:03:2e:60:
                    c9:bc:29:51:6b:a6:59:b7:31:be:89:30:d3:80:4d:
                    e8:05:70:1e:91:f4:3c:71:78:19:5b:a5:8b:0c:b6:
                    b2:3a:0f:29:c5:8b:86:60:40:ee:8e:6e:8b:fe:7a:
                    c1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:BF:29:AF:06:CF:21:ED:0B:A5:F4:F3:87:B2:34:C8:39:19:DA:3D
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3233322e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:e4:dc:24:14:ec:eb:f1:91:fb:b4:a8:32:f3:46:0f:ec:96:
         b2:8b:af:ad:d6:7c:80:6d:96:e9:f4:36:05:33:14:8e:56:dc:
         de:44:44:ab:b3:b9:22:66:ca:99:fc:69:15:0c:de:f0:06:30:
         61:fc:8d:c1:d2:af:0e:db:ba:e0:8a:34:0c:17:f3:bd:89:b3:
         c8:c7:71:09:b9:e2:2a:a7:20:da:a0:c2:f3:2e:f2:c4:6f:f8:
         2b:3f:23:8b:9a:33:4a:54:df:3d:c2:f1:a7:16:98:77:34:d5:
         f0:de:4c:fd:b7:0b:68:b6:11:ca:2d:7e:93:c3:b2:82:40:ca:
         27:66:00:5a:5b:ec:de:94:fb:b8:75:30:c0:4f:81:72:ac:f1:
         97:f6:dc:54:8e:7a:89:50:04:37:87:dd:49:e4:1a:0b:aa:9d:
         77:0d:91:eb:f3:48:af:2e:19:01:57:70:18:00:6b:02:09:ba:
         f2:63:6e:8d:64:db:34:a9:fd:03:99:2a:ab:d6:d4:47:d4:be:
         9e:9a:af:e6:a8:16:2d:16:bf:74:43:0e:61:80:8a:a1:4a:85:
         50:0e:3c:fe:0d:b9:07:6c:30:4c:39:a9:13:31:80:e2:45:e5:
         30:9d:f9:e4:ea:99:d9:7c:09:5d:b8:b2:fd:16:58:fa:eb:85:
         52:67:8e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:45 2024 by rpki-client on console-fra.rpki-client.org