Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3138392e33382e342e302f32342d3234203d3e203238333036.roa
File:                     3138392e33382e342e302f32342d3234203d3e203238333036.roa (raw, json)
Hash identifier:          IX0eV/9IBdkLgP2n3E9ubQu0/C8UZt0GN75JlIhwIm8=
Subject key identifier:   FF:C4:72:36:A7:C3:1B:E7:CC:EE:97:FC:54:2C:5E:D1:14:8E:B9:7B
Certificate issuer:       /CN=94294401D5CB3E5895F6F68AEC5E4163AED0F324
Certificate serial:       392CB61F91CC3A8BC5ECE7E9728EA4677D41446E
Authority key identifier: 94:29:44:01:D5:CB:3E:58:95:F6:F6:8A:EC:5E:41:63:AE:D0:F3:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3138392e33382e342e302f32342d3234203d3e203238333036.roa
Signing time:             Tue 25 Jun 2024 15:21:15 +0000
ROA not before:           Tue 25 Jun 2024 15:16:15 +0000
ROA not after:            Tue 24 Jun 2025 15:21:15 +0000
asID:                     28306
IP address blocks:        189.38.4.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/94294401D5CB3E5895F6F68AEC5E4163AED0F324.crl
                          rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/94294401D5CB3E5895F6F68AEC5E4163AED0F324.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:2c:b6:1f:91:cc:3a:8b:c5:ec:e7:e9:72:8e:a4:67:7d:41:44:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94294401D5CB3E5895F6F68AEC5E4163AED0F324
        Validity
            Not Before: Jun 25 15:16:15 2024 GMT
            Not After : Jun 24 15:21:15 2025 GMT
        Subject: CN=FFC47236A7C31BE7CCEE97FC542C5ED1148EB97B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4f:11:dc:2f:fe:61:91:f0:74:ff:34:ea:95:
                    b6:f9:76:73:87:90:fa:a9:11:50:3e:21:5c:44:f8:
                    10:5f:c4:c7:35:c2:e0:d0:d6:24:3d:99:5c:d0:69:
                    e3:9a:95:61:eb:77:c4:10:44:15:1b:44:44:3e:22:
                    c1:b7:0e:cc:07:0c:f2:43:5e:a1:84:1f:7e:35:01:
                    03:d0:6b:7a:71:2f:1a:a9:3d:b7:af:d7:da:04:6b:
                    9d:4d:cb:44:0a:ff:b9:42:70:02:7a:d6:8a:24:ba:
                    0d:f5:89:65:0d:36:ca:38:6c:bd:50:a2:e4:2a:c1:
                    1d:2c:e8:0a:a3:c4:2a:e8:7e:60:77:23:15:7b:41:
                    3a:11:3c:ed:5b:ad:3d:15:3a:bd:f3:b3:f5:ce:74:
                    c5:a3:bf:01:2b:61:2d:5c:ad:47:f2:3e:81:58:15:
                    5e:f6:34:62:19:8b:73:9f:fc:5d:3e:be:0b:d6:04:
                    c8:cb:15:45:1b:48:5a:72:2c:27:d6:59:00:f0:ea:
                    59:d3:13:20:a2:ab:ad:a0:4a:8c:a2:52:3d:54:90:
                    ff:8c:91:4d:36:34:04:75:57:7e:6a:b8:28:e7:b8:
                    2e:cb:d8:a2:5f:9a:2e:07:d3:59:15:49:51:44:b5:
                    d6:49:d4:d8:f0:2f:d9:46:7c:10:64:c8:e4:9e:2f:
                    41:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:C4:72:36:A7:C3:1B:E7:CC:EE:97:FC:54:2C:5E:D1:14:8E:B9:7B
            X509v3 Authority Key Identifier:
                keyid:94:29:44:01:D5:CB:3E:58:95:F6:F6:8A:EC:5E:41:63:AE:D0:F3:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/94294401D5CB3E5895F6F68AEC5E4163AED0F324.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3138392e33382e342e302f32342d3234203d3e203238333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.38.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:81:60:6e:fc:d9:4e:f1:e4:60:e7:f4:cc:b6:aa:ef:24:cb:
         45:17:57:4b:11:56:e3:df:f2:3f:2d:72:23:5f:f4:e2:3b:78:
         35:23:a5:d7:7a:f3:cf:82:b5:d2:ea:ab:dd:59:95:a4:5a:4e:
         48:dc:59:e8:c7:4a:3c:dc:9e:6e:e8:35:0d:56:40:00:c0:bf:
         22:d4:c4:1d:22:24:91:7f:4b:13:47:9a:00:30:b4:c1:b3:eb:
         e8:2a:bb:9e:84:ac:92:76:7a:6f:20:f7:60:40:b0:06:e0:04:
         c6:b6:90:18:4b:41:3d:85:32:12:64:cd:5d:b8:7d:e1:6c:5f:
         5f:44:37:8a:8d:bd:73:c8:5f:55:22:c6:e9:f1:ed:0b:f3:a3:
         ab:94:8b:9d:e3:4d:9f:ff:cf:21:15:7c:0c:5f:bb:13:5d:d0:
         da:fe:aa:59:9f:e6:3c:6f:fb:dd:e0:7c:be:5a:01:66:a6:0f:
         27:08:8d:04:ef:32:74:24:10:ab:42:e8:95:fd:d8:a1:6a:4b:
         44:06:e8:9c:48:8d:f4:8d:0c:09:c6:13:1a:c0:73:20:b3:c4:
         a6:a8:c5:66:71:1c:36:e5:af:e1:73:d1:3b:f4:22:5c:e4:33:
         0a:42:87:5e:1d:b1:2b:4e:7c:6c:02:a7:de:21:db:ba:5a:2f:
         3e:27:29:aa
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUOSy2H5HMOovF7Ofpco6kZ31BRG4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTQyOTQ0MDFENUNCM0U1ODk1RjZGNjhBRUM1RTQxNjNB
RUQwRjMyNDAeFw0yNDA2MjUxNTE2MTVaFw0yNTA2MjQxNTIxMTVaMDMxMTAvBgNV
BAMTKEZGQzQ3MjM2QTdDMzFCRTdDQ0VFOTdGQzU0MkM1RUQxMTQ4RUI5N0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4TxHcL/5hkfB0/zTqlbb5dnOH
kPqpEVA+IVxE+BBfxMc1wuDQ1iQ9mVzQaeOalWHrd8QQRBUbREQ+IsG3DswHDPJD
XqGEH341AQPQa3pxLxqpPbev19oEa51Ny0QK/7lCcAJ61ookug31iWUNNso4bL1Q
ouQqwR0s6AqjxCrofmB3IxV7QToRPO1brT0VOr3zs/XOdMWjvwErYS1crUfyPoFY
FV72NGIZi3Of/F0+vgvWBMjLFUUbSFpyLCfWWQDw6lnTEyCiq62gSoyiUj1UkP+M
kU02NAR1V35quCjnuC7L2KJfmi4H01kVSVFEtdZJ1NjwL9lGfBBkyOSeL0EDAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQU/8RyNqfDG+fM7pf8VCxe0RSOuXswHwYDVR0j
BBgwFoAUlClEAdXLPliV9vaK7F5BY67Q8yQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1BEMlBudzFaclJFblYzck5rOGF6WmoxWHk2dmZ0ZTFXTE1KOWdCUE5O
dWcvMC85NDI5NDQwMUQ1Q0IzRTU4OTVGNkY2OEFFQzVFNDE2M0FFRDBGMzI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk0Mjk0NDAxRDVDQjNFNTg5
NUY2RjY4QUVDNUU0MTYzQUVEMEYzMjQuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdQRDJQbncxWnJSRW5WM3JOazhhelpqMVh5NnZmdGUxV0xNSjlnQlBOTnVnLzAv
MzEzODM5MmUzMzM4MmUzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzgzMzMw
MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAC9JgQwDQYJKoZIhvcNAQELBQADggEBAIWBYG782U7x5GDn
9My2qu8ky0UXV0sRVuPf8j8tciNf9OI7eDUjpdd688+CtdLqq91ZlaRaTkjcWejH
Sjzcnm7oNQ1WQADAvyLUxB0iJJF/SxNHmgAwtMGz6+gqu56ErJJ2em8g92BAsAbg
BMa2kBhLQT2FMhJkzV24feFsX19EN4qNvXPIX1Uixunx7Qvzo6uUi53jTZ//zyEV
fAxfuxNd0Nr+qlmf5jxv+93gfL5aAWamDycIjQTvMnQkEKtC6JX92KFqS0QG6JxI
jfSNDAnGExrAcyCzxKaoxWZxHDblr+Fz0Tv0IlzkMwpCh14dsStOfGwCp94h27pa
Lz4nKao=
-----END CERTIFICATE-----
Generated at Tue Nov 26 07:01:34 2024 by rpki-client on console-ams.rpki-client.org