Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3233332e302f32342d3234203d3e203238333338.roa
File:                     3138392e38342e3233332e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          8w4AFapU5k8aBsCdrrEHSWFJ0T2IB4caAnkiPtlOiyI=
Subject key identifier:   49:A5:24:ED:0B:0A:8A:68:08:91:EF:A9:99:9A:6C:57:96:14:B5:A9
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       513317D0CA1E33BF77BAFFB4604CFBC25E89227B
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3233332e302f32342d3234203d3e203238333338.roa
Signing time:             Wed 29 May 2024 18:17:14 +0000
ROA not before:           Wed 29 May 2024 18:12:14 +0000
ROA not after:            Wed 28 May 2025 18:17:14 +0000
asID:                     28338
IP address blocks:        189.84.233.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 19:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:33:17:d0:ca:1e:33:bf:77:ba:ff:b4:60:4c:fb:c2:5e:89:22:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: May 29 18:12:14 2024 GMT
            Not After : May 28 18:17:14 2025 GMT
        Subject: CN=3082010A0282010100CDB18D8DF630E618CA0DE061E0AB27598A0A12154B38FB5A61E1F37AA2F5B3A28CD1E4A16C0E04F79F04F4389E3FD95C21FCB7316A77EE56E3A39DA8863721947F76F20EB36D2B039BD08352E1F6D78C259A79C42AD10DA8BB551627201B5EAE2AE38F27CE9DF8B04C9BA1D0CC6AED390E64384ADD98FDA429C0E5F21AF8E2B01BB92376212FCD7C111A5452B4247EEBA4AA6AA07CF1BC9FD8C406330DDF8D5CB1CD4F3BE6B97A1F44F5907B99A0EBEB0A8D1F9DA405EF5120496F445751BB497B23CD9B98F43DDF565CF2A5FD755E2B6BD3D1FFD319C73D7A70E527B9F05ECA5179CCB7D78A0AA5769DFB8B6B6358D060D2906A85C7ED9ED696B400113FD7370203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b1:8d:8d:f6:30:e6:18:ca:0d:e0:61:e0:ab:
                    27:59:8a:0a:12:15:4b:38:fb:5a:61:e1:f3:7a:a2:
                    f5:b3:a2:8c:d1:e4:a1:6c:0e:04:f7:9f:04:f4:38:
                    9e:3f:d9:5c:21:fc:b7:31:6a:77:ee:56:e3:a3:9d:
                    a8:86:37:21:94:7f:76:f2:0e:b3:6d:2b:03:9b:d0:
                    83:52:e1:f6:d7:8c:25:9a:79:c4:2a:d1:0d:a8:bb:
                    55:16:27:20:1b:5e:ae:2a:e3:8f:27:ce:9d:f8:b0:
                    4c:9b:a1:d0:cc:6a:ed:39:0e:64:38:4a:dd:98:fd:
                    a4:29:c0:e5:f2:1a:f8:e2:b0:1b:b9:23:76:21:2f:
                    cd:7c:11:1a:54:52:b4:24:7e:eb:a4:aa:6a:a0:7c:
                    f1:bc:9f:d8:c4:06:33:0d:df:8d:5c:b1:cd:4f:3b:
                    e6:b9:7a:1f:44:f5:90:7b:99:a0:eb:eb:0a:8d:1f:
                    9d:a4:05:ef:51:20:49:6f:44:57:51:bb:49:7b:23:
                    cd:9b:98:f4:3d:df:56:5c:f2:a5:fd:75:5e:2b:6b:
                    d3:d1:ff:d3:19:c7:3d:7a:70:e5:27:b9:f0:5e:ca:
                    51:79:cc:b7:d7:8a:0a:a5:76:9d:fb:8b:6b:63:58:
                    d0:60:d2:90:6a:85:c7:ed:9e:d6:96:b4:00:11:3f:
                    d7:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A5:24:ED:0B:0A:8A:68:08:91:EF:A9:99:9A:6C:57:96:14:B5:A9
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3233332e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:40:95:db:1a:f2:75:c6:7d:ab:67:67:25:78:8b:c2:b4:8a:
         ff:3c:e7:26:83:25:0e:8d:86:65:23:01:c4:52:70:67:6d:0c:
         14:ae:8e:ea:97:4e:6d:7a:71:c8:94:38:83:bb:26:07:f4:17:
         fd:59:4f:10:2c:3c:af:64:8f:a5:3d:f0:2c:be:18:68:ce:48:
         8a:82:94:59:a2:81:0c:0d:4b:31:94:d0:c9:d9:db:1d:fb:7b:
         80:f5:67:75:00:11:77:ac:b9:b4:58:c1:e6:ae:fe:cf:fe:43:
         83:10:7b:98:42:37:7a:2f:9b:08:d9:e0:72:0a:8a:ef:b7:31:
         4d:08:52:8a:8f:c7:88:c3:76:b0:c8:09:44:b5:a2:de:bc:89:
         d3:73:a3:ff:80:25:77:1c:88:48:7c:2b:f9:67:cf:ef:d6:08:
         20:ec:fd:61:e3:d8:56:8a:ff:0b:06:8e:c0:b1:c0:fc:ce:ad:
         fb:38:c8:98:4b:00:7c:d1:a3:e9:b5:08:f8:3e:97:94:aa:0f:
         11:87:5e:70:a8:29:bc:f8:bd:4d:e1:fb:be:d4:e0:bc:b2:e8:
         e8:d5:49:e9:97:87:ba:1c:53:6d:be:f7:ba:e1:19:1c:bf:c4:
         6b:3c:d5:b5:04:df:7d:70:b1:ce:2e:21:36:ef:b5:f8:41:30:
         3e:17:3b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:45 2024 by rpki-client on console-fra.rpki-client.org