Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3233352e302f32342d3234203d3e203238333338.roa
File:                     3138392e38342e3233352e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          egond3Kw98FosdEsYUUYnvjEuiaNNmlpV6sFFefWwpA=
Subject key identifier:   7A:4C:00:C4:27:E5:C4:A7:2B:2E:63:A6:13:98:97:62:97:B0:18:50
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       3B44FA2751C598AE96AC06E94AE0C307AC9847E6
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3233352e302f32342d3234203d3e203238333338.roa
Signing time:             Wed 29 May 2024 18:17:15 +0000
ROA not before:           Wed 29 May 2024 18:12:15 +0000
ROA not after:            Wed 28 May 2025 18:17:15 +0000
asID:                     28338
IP address blocks:        189.84.235.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 19:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:44:fa:27:51:c5:98:ae:96:ac:06:e9:4a:e0:c3:07:ac:98:47:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: May 29 18:12:15 2024 GMT
            Not After : May 28 18:17:15 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cf:74:94:bc:15:01:ac:18:cc:40:cb:d8:56:
                    56:5e:df:29:cb:6f:6f:3d:af:7d:63:45:53:7b:91:
                    3c:96:e7:44:38:12:e0:35:6b:f9:ab:4e:eb:a4:89:
                    e2:8d:8d:d3:b6:b2:f4:94:c0:18:c7:f2:b8:a5:11:
                    14:12:08:0f:68:4c:c8:57:ef:74:83:2a:07:0e:8a:
                    1a:d7:31:81:f4:67:1c:0f:4b:fd:c9:ce:36:21:7c:
                    d5:23:ea:9e:e7:1c:87:55:2f:9e:8d:28:6f:ba:60:
                    a9:fc:e3:be:71:66:47:f7:35:f5:2b:32:c2:11:c1:
                    01:34:3e:c7:52:d0:67:59:cb:94:55:ab:1a:60:17:
                    81:eb:6c:67:c0:e2:57:9f:06:c0:39:e3:5f:49:9a:
                    1c:d3:45:bc:1d:d8:4a:9c:7b:8a:f8:e0:f9:e6:b5:
                    4a:8a:c4:eb:d8:26:63:83:02:e9:30:57:ae:8c:04:
                    d9:9f:99:a1:e4:50:6e:fe:c5:25:8d:6d:29:95:e4:
                    28:38:70:6d:fe:3f:dd:1f:d1:87:90:90:60:ba:76:
                    42:79:33:10:58:d7:92:d4:63:70:87:8a:77:f4:f4:
                    bf:a0:7d:0c:12:b6:2a:e9:25:1d:72:21:f0:d6:49:
                    c0:67:2c:15:29:6d:fb:a4:80:2c:29:0f:90:08:28:
                    69:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:4C:00:C4:27:E5:C4:A7:2B:2E:63:A6:13:98:97:62:97:B0:18:50
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3233352e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:8d:98:03:6a:ed:8e:d1:c4:44:72:10:01:d2:f2:40:83:1f:
         c4:a0:e9:00:4e:2d:27:40:0d:1b:c9:91:6d:c7:51:4b:7c:20:
         c0:f8:a4:cc:06:4c:f1:85:d7:31:0b:fe:88:be:f1:75:67:99:
         c9:4f:1b:c1:6f:7f:32:a5:11:bf:a0:09:fd:6e:42:6d:35:49:
         56:ee:0c:12:47:fb:5e:51:cd:18:13:b8:45:78:b6:ab:21:2a:
         c3:0c:9c:bf:31:91:fe:d3:e5:04:32:0d:97:77:24:51:4a:c3:
         0b:43:f8:5c:e3:66:89:34:29:09:48:d1:f5:59:76:5c:34:5b:
         1f:46:86:48:72:40:6c:8d:5e:06:38:a6:5d:20:64:c6:26:b4:
         12:9e:bb:7e:4e:22:fe:16:15:cd:12:d4:83:b3:68:68:3b:07:
         97:e0:db:dd:82:45:9e:d0:1c:96:d3:dd:15:e5:d3:cd:ee:b6:
         12:31:b7:ea:38:58:21:0e:be:5b:b0:cd:29:a3:ce:84:de:58:
         93:87:cd:0d:44:33:5a:11:bd:ba:21:2c:f0:73:04:f8:c2:05:
         ee:9c:ca:3b:2f:a8:da:b8:47:21:6e:bd:bc:eb:20:35:8c:94:
         a7:5d:b5:71:33:31:52:12:fe:aa:e3:67:40:7e:57:94:2c:9d:
         eb:70:17:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:22 2024 by rpki-client on console-ams.rpki-client.org