Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e302e302f32302d3230203d3e203238333338.roa
File:                     3138392e34352e302e302f32302d3230203d3e203238333338.roa (raw, json)
Hash identifier:          lYumwo+7OigEvxqjcmNuMBAHfsK+IARzlEEibfQI3uE=
Subject key identifier:   BC:A0:01:34:53:73:C6:0B:8F:1B:D8:C3:74:F7:78:6D:26:3C:D3:BE
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       200B527758851CA91AF366548E4BB30A79F1FD93
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e302e302f32302d3230203d3e203238333338.roa
Signing time:             Wed 30 Apr 2025 19:00:00 +0000
ROA not before:           Wed 30 Apr 2025 18:55:00 +0000
ROA not after:            Wed 29 Apr 2026 19:00:00 +0000
asID:                     28338
IP address blocks:        189.45.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 01:36:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:0b:52:77:58:85:1c:a9:1a:f3:66:54:8e:4b:b3:0a:79:f1:fd:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: Apr 30 18:55:00 2025 GMT
            Not After : Apr 29 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d7:9b:15:c5:b3:ef:fe:b7:2a:bb:e5:02:6b:
                    3a:39:94:41:0e:11:07:e7:ad:e4:1d:8a:53:c7:8f:
                    06:d6:b0:c2:a8:66:09:5e:fc:87:0f:52:26:d1:85:
                    5e:df:3f:61:f5:42:51:38:15:cf:34:d5:7d:1d:df:
                    30:78:05:1e:6b:a5:66:d8:ba:3a:a3:ee:17:fe:81:
                    02:cb:fc:4e:10:44:34:0e:3d:1d:2b:66:a2:e5:87:
                    6d:a1:1a:bb:0b:af:3d:3d:4f:69:1e:0f:8f:fe:0c:
                    16:28:c7:dd:c1:87:fa:db:3b:d6:04:12:b8:6e:40:
                    86:2f:95:d7:56:0c:6f:4b:b8:c9:38:b1:aa:0c:1e:
                    9f:3c:3f:6d:7c:a7:9b:a9:5d:aa:ae:32:00:93:54:
                    b0:aa:74:0c:fd:4d:8d:38:36:e5:42:ad:ae:85:7e:
                    78:aa:07:d8:17:1a:39:e5:6e:5d:0c:15:f1:a3:1a:
                    5a:15:39:a6:b3:f1:a1:44:d1:eb:77:b1:17:e6:cd:
                    0a:6b:46:bb:97:14:bb:b3:78:8b:0d:a5:b1:f1:02:
                    a5:d2:62:46:8f:ba:5c:97:d6:12:71:a8:b0:0c:e9:
                    4e:fb:01:27:f3:d1:90:89:83:25:e2:ff:ca:f4:f3:
                    58:1d:53:f8:ec:47:d5:b6:91:f4:63:2d:89:d7:2d:
                    3f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:A0:01:34:53:73:C6:0B:8F:1B:D8:C3:74:F7:78:6D:26:3C:D3:BE
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e302e302f32302d3230203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         67:9a:a3:fc:ae:0a:b5:e7:f8:bf:75:06:85:26:64:b4:1e:6b:
         b8:1b:f1:7a:86:7e:2c:60:71:af:df:60:26:5d:ea:0f:c0:a2:
         d9:17:fe:a6:1d:24:1c:3b:e7:af:ca:5b:bd:9a:8c:8b:e5:32:
         c6:9c:ed:e4:fa:50:ee:17:9a:83:7d:89:d3:4f:53:4e:54:c2:
         a2:a0:e7:64:32:d7:af:b3:b9:35:6b:7d:dd:8c:aa:87:45:b8:
         a6:a1:93:98:cb:de:2c:c9:c7:7c:94:09:f5:65:15:9b:7b:ab:
         3f:28:bb:7d:ec:0f:6a:57:62:95:c5:c7:dd:c1:42:3c:53:6f:
         cf:db:de:08:1c:ef:1c:af:5a:84:19:e3:c2:8b:91:0e:32:06:
         44:15:ed:ef:17:2e:c6:1e:1c:b9:7f:72:8d:ce:bd:f9:4c:65:
         e9:66:e3:fa:e1:82:0c:8e:d1:33:3e:0b:02:ac:5d:7c:35:75:
         27:60:99:d0:ba:28:10:14:1e:8d:66:7a:32:68:52:48:5b:39:
         ee:f0:1e:4b:37:ea:1e:6c:0d:03:19:00:c9:65:f5:2b:ce:d8:
         33:6d:1f:32:2a:f9:e2:a2:07:52:00:e3:65:b2:ae:c4:dc:d6:
         b7:b9:7e:73:7e:01:cc:45:a4:66:5d:10:3d:f7:2d:6c:0b:1b:
         21:6f:c8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:22:39 2025 by rpki-client