Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3138392e33382e312e302f32342d3234203d3e203238333036.roa
File:                     3138392e33382e312e302f32342d3234203d3e203238333036.roa (raw, json)
Hash identifier:          iBMdqf6BcZ5/sBV2BgqsLKYDoynbxoJHD58hqR+Q4Do=
Subject key identifier:   03:70:4C:15:DC:F5:DE:2F:C2:3F:8E:06:9F:81:B7:C6:CA:67:E9:5A
Certificate issuer:       /CN=94294401D5CB3E5895F6F68AEC5E4163AED0F324
Certificate serial:       584B0B4E227941F51A62E811A82B0B42ECB5389F
Authority key identifier: 94:29:44:01:D5:CB:3E:58:95:F6:F6:8A:EC:5E:41:63:AE:D0:F3:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3138392e33382e312e302f32342d3234203d3e203238333036.roa
Signing time:             Tue 25 Jun 2024 15:21:22 +0000
ROA not before:           Tue 25 Jun 2024 15:16:22 +0000
ROA not after:            Tue 24 Jun 2025 15:21:22 +0000
asID:                     28306
IP address blocks:        189.38.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/94294401D5CB3E5895F6F68AEC5E4163AED0F324.crl
                          rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/94294401D5CB3E5895F6F68AEC5E4163AED0F324.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:4b:0b:4e:22:79:41:f5:1a:62:e8:11:a8:2b:0b:42:ec:b5:38:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94294401D5CB3E5895F6F68AEC5E4163AED0F324
        Validity
            Not Before: Jun 25 15:16:22 2024 GMT
            Not After : Jun 24 15:21:22 2025 GMT
        Subject: CN=03704C15DCF5DE2FC23F8E069F81B7C6CA67E95A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:de:d5:b5:b8:9a:a1:69:99:4e:60:ab:e3:76:
                    73:df:cf:c9:a0:86:bb:43:83:16:0b:dd:97:e3:16:
                    a2:05:e6:d9:6c:a8:e6:ff:03:25:7f:ca:d2:4c:49:
                    46:63:2d:06:b5:b9:96:87:80:f8:b6:c6:b0:df:9f:
                    f1:15:de:a6:7e:f0:66:12:3e:9e:49:ed:c8:37:e1:
                    db:fb:1c:0a:ba:68:21:0e:c7:36:22:4e:fe:dd:66:
                    41:97:10:8f:58:ac:7e:a8:a1:42:09:64:4f:2f:50:
                    cf:f5:7a:7e:b3:9b:fd:68:c4:1e:a6:b9:3d:27:71:
                    54:a0:df:d6:33:fb:02:3a:38:98:77:21:57:bb:96:
                    f8:56:9c:31:bc:2f:f9:39:ea:f8:dd:b9:0e:e8:06:
                    f6:9f:c2:6c:4a:be:dc:5e:b7:5c:c7:92:87:7d:6c:
                    b4:a4:fe:15:fa:f7:df:3a:c7:4c:7d:9f:ce:85:40:
                    aa:69:79:c0:2e:6b:7a:5a:00:6d:3c:d8:06:4b:3a:
                    68:33:b5:b7:21:8f:7c:f6:e0:b4:be:6b:b1:1f:22:
                    74:10:45:7f:2c:2a:54:33:0a:be:38:90:45:5e:09:
                    fa:63:70:91:de:f4:7a:cd:3c:9e:a7:f4:ce:32:9a:
                    7a:1d:c9:86:00:a7:71:62:25:3b:f4:35:e9:1b:de:
                    ab:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:70:4C:15:DC:F5:DE:2F:C2:3F:8E:06:9F:81:B7:C6:CA:67:E9:5A
            X509v3 Authority Key Identifier:
                keyid:94:29:44:01:D5:CB:3E:58:95:F6:F6:8A:EC:5E:41:63:AE:D0:F3:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/94294401D5CB3E5895F6F68AEC5E4163AED0F324.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3138392e33382e312e302f32342d3234203d3e203238333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.38.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:bd:df:6e:b3:89:d1:fa:5e:99:43:51:d7:a8:39:4b:1d:5d:
         34:a2:4c:36:dc:e8:41:25:e3:21:70:b2:7b:eb:05:a8:e0:b8:
         51:5d:be:9e:30:53:84:2d:bf:41:c5:89:a2:9d:30:5f:0b:d5:
         95:e4:b0:82:63:a6:60:e3:25:89:7a:a5:e4:95:6a:89:6b:58:
         24:7b:99:27:27:c3:a6:46:8c:7d:31:ab:31:78:26:d1:da:78:
         4f:44:90:27:41:20:a0:1a:a1:e3:ab:01:da:b4:75:bd:d8:cd:
         07:8e:a6:23:95:3b:06:b1:00:09:d1:d1:b2:45:65:75:94:37:
         b4:2d:2f:8e:f5:64:8d:25:5f:6d:b2:58:26:85:b1:a4:b7:6d:
         97:c4:b2:9a:54:b3:16:d7:fc:7a:70:19:20:fe:45:d3:de:8e:
         20:fe:60:b9:91:5c:3a:ef:54:ad:f0:f1:fd:55:f6:b0:54:71:
         41:e8:29:36:6d:a6:8b:58:d5:20:90:e7:ef:43:5d:07:53:7b:
         2b:9f:97:19:3f:3c:5c:44:15:6d:6a:ae:fd:ef:ed:b1:f9:9a:
         79:00:1b:f5:ba:39:64:8c:f8:21:15:f9:7a:23:ae:96:3f:ef:
         04:6d:f9:26:9e:80:5e:6c:5f:40:ef:97:d9:2d:45:c9:4d:c7:
         66:9c:31:a2
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUWEsLTiJ5QfUaYugRqCsLQuy1OJ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTQyOTQ0MDFENUNCM0U1ODk1RjZGNjhBRUM1RTQxNjNB
RUQwRjMyNDAeFw0yNDA2MjUxNTE2MjJaFw0yNTA2MjQxNTIxMjJaMDMxMTAvBgNV
BAMTKDAzNzA0QzE1RENGNURFMkZDMjNGOEUwNjlGODFCN0M2Q0E2N0U5NUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB3tW1uJqhaZlOYKvjdnPfz8mg
hrtDgxYL3ZfjFqIF5tlsqOb/AyV/ytJMSUZjLQa1uZaHgPi2xrDfn/EV3qZ+8GYS
Pp5J7cg34dv7HAq6aCEOxzYiTv7dZkGXEI9YrH6ooUIJZE8vUM/1en6zm/1oxB6m
uT0ncVSg39Yz+wI6OJh3IVe7lvhWnDG8L/k56vjduQ7oBvafwmxKvtxet1zHkod9
bLSk/hX69986x0x9n86FQKppecAua3paAG082AZLOmgztbchj3z24LS+a7EfInQQ
RX8sKlQzCr44kEVeCfpjcJHe9HrNPJ6n9M4ymnodyYYAp3FiJTv0Nekb3qs9AgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUA3BMFdz13i/CP44Gn4G3xspn6VowHwYDVR0j
BBgwFoAUlClEAdXLPliV9vaK7F5BY67Q8yQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1BEMlBudzFaclJFblYzck5rOGF6WmoxWHk2dmZ0ZTFXTE1KOWdCUE5O
dWcvMC85NDI5NDQwMUQ1Q0IzRTU4OTVGNkY2OEFFQzVFNDE2M0FFRDBGMzI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk0Mjk0NDAxRDVDQjNFNTg5
NUY2RjY4QUVDNUU0MTYzQUVEMEYzMjQuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdQRDJQbncxWnJSRW5WM3JOazhhelpqMVh5NnZmdGUxV0xNSjlnQlBOTnVnLzAv
MzEzODM5MmUzMzM4MmUzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzgzMzMw
MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAC9JgEwDQYJKoZIhvcNAQELBQADggEBAAC9326zidH6XplD
UdeoOUsdXTSiTDbc6EEl4yFwsnvrBajguFFdvp4wU4Qtv0HFiaKdMF8L1ZXksIJj
pmDjJYl6peSVaolrWCR7mScnw6ZGjH0xqzF4JtHaeE9EkCdBIKAaoeOrAdq0db3Y
zQeOpiOVOwaxAAnR0bJFZXWUN7QtL471ZI0lX22yWCaFsaS3bZfEsppUsxbX/Hpw
GSD+RdPejiD+YLmRXDrvVK3w8f1V9rBUcUHoKTZtpotY1SCQ5+9DXQdTeyuflxk/
PFxEFW1qrv3v7bH5mnkAG/W6OWSM+CEV+XojrpY/7wRt+SaegF5sX0Dvl9ktRclN
x2acMaI=
-----END CERTIFICATE-----
Generated at Tue Nov 26 06:32:04 2024 by rpki-client on console-fra.rpki-client.org