Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e312e302f32342d3234203d3e203238333338.roa
File:                     3138392e34352e312e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          zf6gqUfhtdKolpIfdPHI3Juu2QQFsYzzVEg8xKey17Y=
Subject key identifier:   63:20:38:7B:E9:07:64:E2:33:7F:57:E3:6B:8D:68:F9:FD:D4:FA:3B
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       1274DDF1EE7B21F94A4718E6D549E03E6A3F51F9
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e312e302f32342d3234203d3e203238333338.roa
Signing time:             Wed 30 Apr 2025 19:00:06 +0000
ROA not before:           Wed 30 Apr 2025 18:55:06 +0000
ROA not after:            Wed 29 Apr 2026 19:00:06 +0000
asID:                     28338
IP address blocks:        189.45.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 03:20:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:74:dd:f1:ee:7b:21:f9:4a:47:18:e6:d5:49:e0:3e:6a:3f:51:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: Apr 30 18:55:06 2025 GMT
            Not After : Apr 29 19:00:06 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8e:db:39:76:fa:39:d5:d1:a9:a6:2b:6c:03:
                    3b:1f:93:33:16:d5:14:f7:6e:51:3f:97:ad:f2:30:
                    7e:51:ba:1e:ae:48:c8:ca:3c:94:99:e3:40:84:14:
                    a5:17:ff:dc:6d:f9:92:b9:0b:f8:c2:25:b2:ef:fd:
                    a5:ef:79:2d:bc:84:fb:d8:8a:a8:84:2b:6d:52:43:
                    54:62:c7:98:3e:fb:a8:9b:9f:03:65:d0:82:48:05:
                    17:20:2d:2d:47:eb:a6:be:e4:71:2a:33:ab:d7:87:
                    50:85:14:4a:f7:79:a7:54:f6:13:63:91:4a:af:5a:
                    32:d2:70:57:51:87:6a:13:ee:ab:d4:7b:36:a9:23:
                    51:10:b1:c8:19:7f:91:42:7f:4a:fd:dd:00:7b:2d:
                    92:90:b6:9c:eb:5d:4f:72:b2:a5:f9:0c:37:b0:27:
                    e1:a4:bb:56:6d:94:40:35:24:d4:fb:df:16:3c:ba:
                    3c:54:4c:6e:ed:00:32:be:cd:1c:b9:07:4b:44:e2:
                    ef:0e:f7:27:bf:1b:1d:f3:ce:8e:c7:bc:7b:68:56:
                    9e:83:a8:0d:f6:c5:d2:43:09:4e:85:62:73:ee:21:
                    d1:84:76:f2:ae:4c:70:72:97:5b:64:78:51:dc:f4:
                    72:71:0f:32:42:4a:c5:21:0c:9f:bf:ed:e0:ea:8a:
                    92:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:20:38:7B:E9:07:64:E2:33:7F:57:E3:6B:8D:68:F9:FD:D4:FA:3B
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e312e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:8a:c4:f3:d6:d4:c3:50:2a:fa:64:b0:61:6d:59:6f:e5:a6:
         54:12:ac:7d:be:87:fa:fe:e9:45:b1:4c:fa:89:f7:02:35:b1:
         b8:00:08:1e:ae:60:cb:f0:59:d7:98:06:82:52:29:6d:f0:cf:
         a0:fd:e7:1b:0e:7c:53:db:52:12:92:9b:80:01:a3:92:cf:45:
         db:b8:41:25:75:80:15:6d:b6:47:36:3a:eb:c8:f5:bc:bc:87:
         db:33:2b:1c:66:55:19:30:bf:f2:c4:80:bc:35:60:db:3c:78:
         61:8a:12:57:be:9a:23:2f:18:cd:c3:66:bb:e5:d0:75:19:d4:
         39:a7:b0:d1:ae:fe:53:80:ad:9a:9b:92:5d:a7:64:fd:f7:91:
         6c:2c:21:1b:63:97:4f:50:08:aa:a0:01:67:75:1d:12:37:b0:
         e5:64:69:c4:66:14:31:44:6f:87:64:e9:ee:bb:61:24:f7:75:
         dc:e5:b7:2a:a5:80:87:51:5f:3a:06:91:41:82:7a:9b:83:f0:
         4f:9f:ef:6b:6a:a5:36:b2:d6:57:35:f8:4e:6c:08:8d:dd:9d:
         67:c2:fa:59:45:e2:d4:c9:21:c0:69:98:b0:e9:56:d2:c6:a4:
         1b:f2:19:30:9f:85:e5:c0:5b:d9:2b:da:99:26:77:9e:61:06:
         74:cc:17:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:35:31 2025 by rpki-client