Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3233362e302f32342d3234203d3e203532343638.roa
File:                     3138392e38342e3233362e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          Qn0o4RsBkI9HOJ1O9M4BC7sPjE1VBb0YPLNL6xeB57o=
Subject key identifier:   38:4F:B4:58:BF:11:48:43:EE:43:24:D1:5E:5A:4E:11:32:72:C0:4F
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       23051999C6DB2085833B23FC76564430F7AAA937
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3233362e302f32342d3234203d3e203532343638.roa
Signing time:             Wed 29 May 2024 18:35:48 +0000
ROA not before:           Wed 29 May 2024 18:30:48 +0000
ROA not after:            Wed 28 May 2025 18:35:48 +0000
asID:                     52468
IP address blocks:        189.84.236.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 03 Jul 2024 18:50:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:05:19:99:c6:db:20:85:83:3b:23:fc:76:56:44:30:f7:aa:a9:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: May 29 18:30:48 2024 GMT
            Not After : May 28 18:35:48 2025 GMT
        Subject: CN=3082010A0282010100D610EC9923F3A0045E1A9BE6EF1BD05C98D51BF7A0625FE04E7005B9C02F5B9EAF7F93445399A6DB88C64BBEEAED14B392409AD6D09A8BE9B4F31DC194F7A7A6861711BFD513C469E9E4D9E5B2CAA61FBAD2FC93D3982BD68CB563517456B6EADA275F54B2EC91DA6B648701F570879DDC67FAD487F4490ED5E50C02C7F4AF36CFCDD3979DD348F0FAB69FA925968FB0976CE3645E1D0E6DE6BE7B9F5AA7747A4C3F0252FF444DA57F1A433A5EE68F0D3180B286D8DF6DBECFB659D4993CD220752FA973BEEC7B5A97F577764DF970BE057FE85A019CF8E1063253B204387AD858B05B799E2C493C5E7019A0E030246AC807D43B8E39DE1136EF8BF1CEABEB850203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:10:ec:99:23:f3:a0:04:5e:1a:9b:e6:ef:1b:
                    d0:5c:98:d5:1b:f7:a0:62:5f:e0:4e:70:05:b9:c0:
                    2f:5b:9e:af:7f:93:44:53:99:a6:db:88:c6:4b:be:
                    ea:ed:14:b3:92:40:9a:d6:d0:9a:8b:e9:b4:f3:1d:
                    c1:94:f7:a7:a6:86:17:11:bf:d5:13:c4:69:e9:e4:
                    d9:e5:b2:ca:a6:1f:ba:d2:fc:93:d3:98:2b:d6:8c:
                    b5:63:51:74:56:b6:ea:da:27:5f:54:b2:ec:91:da:
                    6b:64:87:01:f5:70:87:9d:dc:67:fa:d4:87:f4:49:
                    0e:d5:e5:0c:02:c7:f4:af:36:cf:cd:d3:97:9d:d3:
                    48:f0:fa:b6:9f:a9:25:96:8f:b0:97:6c:e3:64:5e:
                    1d:0e:6d:e6:be:7b:9f:5a:a7:74:7a:4c:3f:02:52:
                    ff:44:4d:a5:7f:1a:43:3a:5e:e6:8f:0d:31:80:b2:
                    86:d8:df:6d:be:cf:b6:59:d4:99:3c:d2:20:75:2f:
                    a9:73:be:ec:7b:5a:97:f5:77:76:4d:f9:70:be:05:
                    7f:e8:5a:01:9c:f8:e1:06:32:53:b2:04:38:7a:d8:
                    58:b0:5b:79:9e:2c:49:3c:5e:70:19:a0:e0:30:24:
                    6a:c8:07:d4:3b:8e:39:de:11:36:ef:8b:f1:ce:ab:
                    eb:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:4F:B4:58:BF:11:48:43:EE:43:24:D1:5E:5A:4E:11:32:72:C0:4F
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3233362e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:76:e0:63:97:a4:0d:da:bd:74:e9:4d:5e:bd:76:5a:d5:dd:
         95:0e:01:00:62:f6:84:d0:08:df:9f:24:83:db:09:df:a8:2d:
         ce:8a:49:3a:94:54:79:1a:7b:54:a6:61:51:bc:ef:a3:91:a7:
         75:9b:f4:ef:4a:b5:b8:60:8b:01:bc:9d:d2:34:d2:f6:23:f3:
         0f:56:1d:5f:f1:87:7a:55:0f:47:bb:04:78:0c:ed:05:bd:5b:
         d3:0f:bc:a1:15:07:ad:1b:09:9d:f1:40:c1:3e:0a:07:20:9b:
         9c:2a:50:6b:fc:bf:a4:0e:01:d9:c9:7f:95:7f:00:32:60:01:
         74:4e:fa:1c:f8:26:4c:38:e0:88:47:86:a9:fc:a8:ce:46:b5:
         c4:87:e6:0c:4e:9a:ae:c2:2f:6a:79:90:3d:a4:ab:02:cc:85:
         4f:3b:4d:96:43:37:56:7f:05:e5:e5:b1:e4:a7:d6:92:da:3a:
         90:76:ec:75:a5:07:c6:02:8c:5e:01:f7:fa:ca:91:42:3a:3a:
         54:82:3f:fb:dc:7d:69:39:89:ae:e0:70:11:66:29:f8:56:89:
         03:88:b2:0f:38:3b:ec:7e:f4:ea:bd:31:3f:5f:48:9f:1f:33:
         14:08:83:5b:96:d5:e7:70:e7:ac:62:fe:3f:83:08:a6:01:c6:
         d9:4d:8e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 19:48:40 2024 by rpki-client on console-fra.rpki-client.org