Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3233382e302f32342d3234203d3e203532343638.roa
File:                     3138392e38342e3233382e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          8hEwODxYiilMTGD46SO6mXSoHbxDwJ4aoaR1i+adQgA=
Subject key identifier:   90:92:DC:7E:EA:38:90:FC:67:5C:5A:CC:A2:2A:9B:AF:7F:4A:D6:4C
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       73460AA61149C382F8F4DF2EA8EE75889C9496A1
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3233382e302f32342d3234203d3e203532343638.roa
Signing time:             Wed 29 May 2024 18:17:15 +0000
ROA not before:           Wed 29 May 2024 18:12:15 +0000
ROA not after:            Wed 28 May 2025 18:17:15 +0000
asID:                     52468
IP address blocks:        189.84.238.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 03 Jul 2024 18:50:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:46:0a:a6:11:49:c3:82:f8:f4:df:2e:a8:ee:75:88:9c:94:96:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: May 29 18:12:15 2024 GMT
            Not After : May 28 18:17:15 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:35:e9:7c:ee:8d:0e:5e:36:fd:37:0a:6e:ff:
                    5e:1e:e0:9c:c8:80:ac:20:e1:f9:6d:f0:54:6a:58:
                    c9:f9:1e:07:ad:ad:ee:ef:50:ef:87:5a:43:5e:f4:
                    60:6d:28:df:5f:50:5c:c6:a1:24:f1:7f:5c:3a:52:
                    50:68:bf:76:ae:a7:7a:5c:a4:cb:e2:7c:3f:ce:3b:
                    d4:9f:a8:5f:ac:9b:b1:55:b3:5b:71:a6:fa:67:bb:
                    77:80:f4:6f:46:36:f4:55:03:d9:55:f8:4f:ba:a5:
                    fb:5e:97:be:43:ec:89:6c:04:4a:8d:08:58:d9:c0:
                    62:c7:50:de:e6:f1:c9:9f:1d:a9:aa:52:18:85:8b:
                    22:48:7c:1d:21:17:df:25:ad:27:44:ed:b4:61:f3:
                    28:42:c1:97:33:72:33:f8:92:9b:d4:8f:79:5c:8b:
                    e6:d6:d7:a9:58:ef:5f:75:a1:14:28:e6:a3:d5:12:
                    97:f3:f6:65:8d:a6:1b:16:5c:4c:d6:78:2e:90:13:
                    39:ff:3a:82:b8:15:c8:8a:18:61:5c:a9:83:38:28:
                    b7:49:c3:f4:bd:03:fa:3f:f7:ce:af:3f:6f:39:0c:
                    f4:66:12:1b:8c:d7:82:1e:67:c4:85:cf:1b:0e:b7:
                    7d:04:c4:a5:00:c6:ee:29:aa:c0:58:b0:40:2b:be:
                    80:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:92:DC:7E:EA:38:90:FC:67:5C:5A:CC:A2:2A:9B:AF:7F:4A:D6:4C
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3233382e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:d1:ca:34:f9:fb:a1:9b:b8:4b:da:3a:ae:f1:62:d1:fe:19:
         07:51:80:0e:21:c4:e5:cb:6c:5d:c5:3f:b9:3b:2e:e4:b3:99:
         b4:60:3e:4d:03:39:69:49:48:70:a6:62:8e:3a:0e:54:9e:01:
         6a:43:c8:6b:6b:7c:7e:81:8e:bb:1d:21:96:8f:f0:8c:bc:54:
         b4:3c:14:3e:18:a1:0b:c3:f7:b6:83:5f:08:66:10:da:aa:42:
         12:ae:2f:e3:95:21:7d:df:d7:30:ce:9b:40:0d:ca:5d:55:0f:
         d9:2b:27:7e:a4:2d:da:1e:3d:5d:bd:6b:17:24:d8:47:7c:59:
         6d:3d:8e:e6:a0:10:30:86:8b:fd:06:d9:f6:79:b4:48:07:1c:
         ef:91:a0:d3:17:c0:8e:b8:12:2c:63:d1:52:93:3b:7f:c5:63:
         ce:e0:15:ce:c0:64:1a:c7:ac:9d:9f:df:c7:a5:9e:bf:5c:55:
         c5:8c:ae:1d:88:87:22:e3:0d:42:c0:47:69:c7:23:ec:bd:b2:
         98:4b:e5:ff:23:2e:33:89:b1:29:03:23:89:64:be:34:d2:2a:
         18:35:3a:05:6d:b3:b6:0b:b8:40:0d:0d:69:b5:ba:5c:2a:b5:
         06:13:3b:60:76:fb:94:43:3c:da:7c:eb:6e:9c:7e:98:e3:69:
         43:cf:63:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 19:48:40 2024 by rpki-client on console-fra.rpki-client.org