Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3233372e302f32342d3234203d3e203532343638.roa
File:                     3138392e38342e3233372e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          1hBxmM5HBLpCgDN/PhFNaMTzTmrUFiWw6npM9Et5T9E=
Subject key identifier:   FF:2C:D8:B9:1E:DE:B3:9C:A8:DF:C1:BC:9A:DE:60:3D:9F:53:EE:89
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       6A5F2B116300D18C5EC7E36FD15AED15379DC929
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3233372e302f32342d3234203d3e203532343638.roa
Signing time:             Wed 29 May 2024 18:17:16 +0000
ROA not before:           Wed 29 May 2024 18:12:16 +0000
ROA not after:            Wed 28 May 2025 18:17:16 +0000
asID:                     52468
IP address blocks:        189.84.237.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 03 Jul 2024 18:50:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:5f:2b:11:63:00:d1:8c:5e:c7:e3:6f:d1:5a:ed:15:37:9d:c9:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: May 29 18:12:16 2024 GMT
            Not After : May 28 18:17:16 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:32:78:1d:cf:b8:1c:61:a6:e0:d4:40:f7:ed:
                    f5:78:3f:51:86:9c:ae:cc:70:bd:0e:ac:76:19:8c:
                    3a:80:72:32:d5:78:30:d7:61:79:8e:d8:72:fa:58:
                    e0:88:c5:45:03:f5:33:05:d2:0a:6d:63:a8:fd:58:
                    cd:ba:89:3d:d6:5a:f0:48:25:3c:26:da:e0:f5:70:
                    3f:7d:b6:ae:35:62:98:b1:44:a3:1b:01:88:8b:53:
                    00:cb:42:c1:d2:39:2a:6a:08:67:06:90:37:a9:c5:
                    37:6f:d0:18:56:c3:d8:08:1c:6e:e6:66:79:1e:a7:
                    50:d8:de:85:74:2d:c7:d5:86:e2:9e:45:99:35:2d:
                    02:d2:c2:56:28:50:68:48:b2:c6:ef:a4:8b:39:03:
                    c4:88:35:a8:49:8c:ab:c0:07:9e:82:38:d3:6a:4b:
                    f7:0d:8b:0c:3b:6a:23:22:bf:01:d0:d1:ca:99:f5:
                    cf:41:66:5a:05:03:35:1a:56:95:f1:5f:9d:63:50:
                    d6:0d:3d:99:59:72:f2:c5:b4:db:4a:23:9d:71:f4:
                    3b:2f:7d:60:25:f5:43:e6:da:0f:b7:73:a2:71:38:
                    63:d7:00:92:aa:60:48:b8:73:a4:d1:fe:2c:47:ee:
                    72:bf:52:90:ab:f9:ab:fa:05:2e:58:ca:c9:6b:cb:
                    00:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:2C:D8:B9:1E:DE:B3:9C:A8:DF:C1:BC:9A:DE:60:3D:9F:53:EE:89
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3233372e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:ec:24:49:22:34:2f:fc:ff:15:7d:df:b9:20:ae:54:46:e7:
         94:7c:8f:68:f2:6f:96:65:24:e2:6e:dc:31:44:b3:b4:81:11:
         a8:fe:2c:e7:b8:f2:72:de:a2:3f:45:b4:27:06:86:d6:05:b5:
         7e:b7:78:dc:ac:83:89:f7:e9:5c:83:a4:5e:43:0b:e4:ad:a3:
         9e:94:a0:56:91:45:18:b7:a2:73:cb:2f:a3:6b:b1:0e:0d:68:
         ee:73:64:9e:3f:a7:32:b5:35:58:02:3d:8a:8a:7a:94:d1:53:
         f4:be:55:93:3a:81:42:59:f1:be:64:88:66:b4:c5:20:76:3d:
         41:6a:f6:b5:50:2a:bf:33:92:47:68:e3:fc:c6:24:84:ed:d9:
         21:72:59:a6:b6:64:e8:83:59:06:ef:e0:6a:79:d8:f8:21:23:
         59:e6:2c:c8:9a:34:53:f4:0e:ea:b2:57:85:75:98:18:c3:70:
         81:68:33:0d:e0:12:f8:cb:b4:64:39:29:ad:64:e7:18:42:8e:
         c0:fa:1e:46:a6:f6:0b:d5:28:08:68:03:73:8f:6a:4d:c3:44:
         96:92:19:9c:94:a5:13:10:ff:0f:43:62:40:80:33:65:24:4a:
         81:0e:d6:28:3a:b7:98:0c:82:fd:9a:1b:f4:40:a7:33:bd:38:
         cf:30:79:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 19:48:40 2024 by rpki-client on console-fra.rpki-client.org