Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3233392e302f32342d3234203d3e203238333338.roa
File:                     3138392e38342e3233392e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          PdwP3sAE5FJoHFh3jfKp/6hrcQERq1E5UQ47QZTpYHo=
Subject key identifier:   6D:FE:75:CD:B5:E3:7E:0D:51:7A:72:3C:9C:83:3C:07:71:A2:95:FC
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       020732CA26598F8B32570E5327E74623B1D4FA33
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3233392e302f32342d3234203d3e203238333338.roa
Signing time:             Wed 29 May 2024 18:17:17 +0000
ROA not before:           Wed 29 May 2024 18:12:17 +0000
ROA not after:            Wed 28 May 2025 18:17:17 +0000
asID:                     28338
IP address blocks:        189.84.239.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 19:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:07:32:ca:26:59:8f:8b:32:57:0e:53:27:e7:46:23:b1:d4:fa:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: May 29 18:12:17 2024 GMT
            Not After : May 28 18:17:17 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3c:54:7a:4c:23:14:4d:b0:7c:fc:3f:4c:b3:
                    b2:e4:fb:95:e6:74:e3:03:ec:e0:70:73:a8:9a:1e:
                    cc:e7:fa:8d:4e:08:1f:52:2e:c4:66:fe:39:b9:e5:
                    d8:29:e3:0a:69:da:62:02:23:01:d1:6c:4d:9d:8b:
                    13:6b:18:6d:38:4d:08:83:9d:c6:31:e7:5f:b6:fb:
                    62:ec:5c:7f:74:87:00:d6:93:0e:9c:88:33:11:2b:
                    96:5b:49:43:48:21:c9:c3:35:9b:39:13:1d:42:8b:
                    26:6a:b2:64:fa:e7:13:96:f2:24:5a:2c:d1:7e:c7:
                    02:03:cb:bb:3b:57:0e:4f:65:bd:0c:96:d3:fb:4f:
                    c3:e7:97:fb:54:df:49:46:98:af:39:0e:59:d9:41:
                    79:3f:10:d2:cf:a4:b0:f2:39:91:66:25:c1:5c:7c:
                    07:46:32:dc:19:ff:d4:25:02:07:43:28:8a:7a:0c:
                    d3:cf:22:d6:46:0f:06:36:d9:ec:5d:da:06:dd:85:
                    1d:26:40:02:28:2d:68:48:9c:19:f8:f9:38:de:e8:
                    02:6d:ad:bb:5b:98:d1:41:58:4f:9c:e2:4e:46:06:
                    54:b5:6c:11:51:10:75:34:47:c7:a2:38:43:72:c7:
                    50:d2:b7:7f:53:84:f4:b4:24:ea:8b:c1:88:f5:00:
                    b9:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:FE:75:CD:B5:E3:7E:0D:51:7A:72:3C:9C:83:3C:07:71:A2:95:FC
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3233392e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:d1:5a:e6:14:8e:5c:cf:62:94:2f:ea:05:b8:da:73:dd:94:
         19:4b:70:06:b1:db:20:ea:ff:08:87:f2:71:f0:eb:97:5e:c5:
         ba:e6:1e:6e:69:60:89:07:c3:0e:04:fc:43:b5:42:67:77:f7:
         08:2a:3c:5f:64:04:1e:d1:58:83:d7:90:ce:6a:48:1a:32:7b:
         ed:34:4e:f3:95:3f:e4:0d:2f:41:7c:04:9c:b5:0b:78:5f:d5:
         b0:3e:b5:85:e8:1e:1c:83:75:69:56:b5:b3:ca:33:1e:50:0e:
         b2:ba:1c:ea:06:b8:b2:be:5f:17:e5:c6:cf:51:1a:5d:86:f8:
         a3:55:92:bc:3a:8e:cd:32:17:76:6c:f0:aa:93:63:75:db:47:
         fb:35:1b:45:25:f8:f9:19:2f:a3:2c:69:d2:2e:88:6e:91:cb:
         3e:0c:5f:f6:f3:6c:49:1b:4c:c2:96:4b:6b:1e:0a:c6:a7:0e:
         e4:d4:8b:e8:7b:35:e1:24:52:38:f4:c2:cb:7f:14:01:3d:5e:
         82:7c:69:2f:2f:9b:03:d5:16:90:7b:f3:2a:43:22:78:f3:e0:
         71:33:42:c0:d5:22:2b:c3:a2:7f:56:4f:82:5f:b0:f7:b1:3d:
         c1:48:18:71:2e:68:8d:89:49:0c:83:f7:fd:9e:3a:8a:4f:bb:
         a9:04:3a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:45 2024 by rpki-client on console-fra.rpki-client.org