Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3233342e302f32342d3234203d3e203238333338.roa
File:                     3138392e38342e3233342e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          iLLEaB7/0WtVwRAn04qIzFYcUpDM67dGYDud2AIqW4w=
Subject key identifier:   CE:C4:D9:41:62:BB:FC:DD:84:AC:EF:5D:C2:58:8F:61:EA:CC:4F:EF
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       0D7EBD9D223460266A40A74FA1D9A8435820974B
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3233342e302f32342d3234203d3e203238333338.roa
Signing time:             Wed 29 May 2024 18:17:12 +0000
ROA not before:           Wed 29 May 2024 18:12:12 +0000
ROA not after:            Wed 28 May 2025 18:17:12 +0000
asID:                     28338
IP address blocks:        189.84.234.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 18:55:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:7e:bd:9d:22:34:60:26:6a:40:a7:4f:a1:d9:a8:43:58:20:97:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: May 29 18:12:12 2024 GMT
            Not After : May 28 18:17:12 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4b:0d:a4:9d:e5:11:63:52:fd:c0:c6:cc:10:
                    7b:cf:2a:2c:70:de:ac:00:48:34:36:dc:c5:b9:22:
                    da:75:cc:48:6f:9e:bc:7a:b8:11:24:a3:7f:e5:c7:
                    d3:f4:12:c6:5c:54:c3:32:f5:7a:6d:34:3a:9b:1d:
                    41:2e:d0:2a:6d:d6:d0:22:54:af:54:a2:4d:3f:57:
                    49:cc:1b:bc:a7:e2:49:42:da:e5:06:bc:e4:1e:62:
                    58:4b:8d:6e:bf:38:af:c0:c3:03:54:ba:ca:fc:1a:
                    a4:b8:2a:c5:44:a8:5e:8c:68:73:43:ce:a7:b9:ca:
                    df:96:4d:34:43:00:7e:54:5a:7a:54:cb:60:1f:4b:
                    c1:20:95:30:68:b4:f5:ad:a8:5a:23:98:9a:47:0b:
                    7a:e3:cc:a0:b8:d8:0c:0d:79:72:d3:81:19:ce:60:
                    4d:86:19:33:a1:ec:4a:7c:bc:2e:fa:57:f1:58:72:
                    03:a7:a1:c7:28:16:5f:5b:b5:fb:35:7e:58:47:eb:
                    6e:ff:36:e6:ee:3c:0a:59:9d:d3:82:0f:78:94:c7:
                    13:23:1a:1c:cd:6e:f0:80:ae:89:8b:04:81:2f:bf:
                    f1:da:cc:47:94:a5:68:74:c1:b6:3e:e1:16:6a:93:
                    13:ec:b7:27:93:a0:29:a1:07:8e:bc:a3:72:52:ff:
                    05:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:C4:D9:41:62:BB:FC:DD:84:AC:EF:5D:C2:58:8F:61:EA:CC:4F:EF
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3233342e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:c1:0c:f0:ab:cc:27:f9:ed:f3:2d:47:93:84:db:ba:99:2a:
         54:eb:6d:6f:6f:67:bc:52:ef:b5:a0:ae:ca:43:4b:78:cc:9f:
         16:fd:28:e5:9e:16:dc:8f:00:5d:4f:67:af:8e:70:3a:45:69:
         d7:7b:33:55:1e:9e:67:74:ba:88:e9:d6:0e:86:a6:64:88:03:
         a2:40:e0:9b:36:05:1d:b9:a1:17:74:ea:b9:69:9c:5c:c7:aa:
         97:46:d1:8d:dd:17:d6:11:6b:13:13:14:87:f6:4c:bf:da:b3:
         cd:a9:64:82:73:d0:e8:b1:e0:9b:8e:54:22:d2:2f:f3:11:28:
         34:d9:c1:ae:aa:fd:6e:78:05:ff:f0:41:bc:39:44:99:60:43:
         e5:e7:76:ec:10:16:9f:2b:e4:1b:1f:76:00:56:11:3a:c9:c7:
         fa:9f:1d:27:dd:76:0f:bb:72:e0:83:b0:d6:4a:cd:62:67:b0:
         62:ac:a2:2d:ee:90:d6:9d:af:71:de:e4:2c:e1:e6:8d:b9:fb:
         1c:65:ba:1a:f3:de:39:0f:6c:62:4c:7c:f9:7c:31:b4:2e:a5:
         c1:65:58:5a:9c:0f:45:f7:ae:e2:ac:71:08:ae:ac:1b:e4:88:
         72:5d:04:c7:f9:8e:27:bc:85:26:34:ee:f2:3f:af:a6:06:19:
         d4:0d:5d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:42:02 2024 by rpki-client on console-fra.rpki-client.org