Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e31332e302f32342d3234203d3e203238333338.roa
File:                     3138392e34352e31332e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          jl55VQxv0k4uL2AUmU0U6ge+NaJi9iwXkB8hNqbNGuc=
Subject key identifier:   C3:5B:EC:BD:D6:3C:CA:05:5D:CF:E3:6C:0C:59:F3:0F:FD:96:F8:F5
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       41B18A6553D4CABDB7EA35F5FCC3672ABCE9E54F
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e31332e302f32342d3234203d3e203238333338.roa
Signing time:             Wed 30 Apr 2025 19:00:04 +0000
ROA not before:           Wed 30 Apr 2025 18:55:04 +0000
ROA not after:            Wed 29 Apr 2026 19:00:04 +0000
asID:                     28338
IP address blocks:        189.45.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 02:16:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:b1:8a:65:53:d4:ca:bd:b7:ea:35:f5:fc:c3:67:2a:bc:e9:e5:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: Apr 30 18:55:04 2025 GMT
            Not After : Apr 29 19:00:04 2026 GMT
        Subject: CN=3082010A0282010100C866BA3885956654CEC9F0656682B149B1C3E436B0ECFB89759987B72255D300B3F587D2195F1EBF38B1832BDF097859066792BE0DCB82778377300A9F39C0A93F5AB1947D5ED0A70D1EDF35E3DCEC23DA394D08C9A6637CB91479AB7A8776BCF7D47F05BB218471F9464BD4ECCA4885D043C9D86825E5553DD4D96A1D1C6169DCEA77C4669C6BFBB0A822422942384B70FAEB9A90353BFC49D1A98F38A8C7275D43FD535F725EB7B972A43E6F5BB78152D506A10EC05258130A15D4ED3418988FA09F552808D87B17E75F0173B1C5BF87E27B13E8CF83275945351462F7ED1C7877002A4DE92BA2BF44FBD34A77B71D3A2A8D4E0D525E34BAB84C0E2714DD330203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:66:ba:38:85:95:66:54:ce:c9:f0:65:66:82:
                    b1:49:b1:c3:e4:36:b0:ec:fb:89:75:99:87:b7:22:
                    55:d3:00:b3:f5:87:d2:19:5f:1e:bf:38:b1:83:2b:
                    df:09:78:59:06:67:92:be:0d:cb:82:77:83:77:30:
                    0a:9f:39:c0:a9:3f:5a:b1:94:7d:5e:d0:a7:0d:1e:
                    df:35:e3:dc:ec:23:da:39:4d:08:c9:a6:63:7c:b9:
                    14:79:ab:7a:87:76:bc:f7:d4:7f:05:bb:21:84:71:
                    f9:46:4b:d4:ec:ca:48:85:d0:43:c9:d8:68:25:e5:
                    55:3d:d4:d9:6a:1d:1c:61:69:dc:ea:77:c4:66:9c:
                    6b:fb:b0:a8:22:42:29:42:38:4b:70:fa:eb:9a:90:
                    35:3b:fc:49:d1:a9:8f:38:a8:c7:27:5d:43:fd:53:
                    5f:72:5e:b7:b9:72:a4:3e:6f:5b:b7:81:52:d5:06:
                    a1:0e:c0:52:58:13:0a:15:d4:ed:34:18:98:8f:a0:
                    9f:55:28:08:d8:7b:17:e7:5f:01:73:b1:c5:bf:87:
                    e2:7b:13:e8:cf:83:27:59:45:35:14:62:f7:ed:1c:
                    78:77:00:2a:4d:e9:2b:a2:bf:44:fb:d3:4a:77:b7:
                    1d:3a:2a:8d:4e:0d:52:5e:34:ba:b8:4c:0e:27:14:
                    dd:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:5B:EC:BD:D6:3C:CA:05:5D:CF:E3:6C:0C:59:F3:0F:FD:96:F8:F5
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e31332e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:ea:56:e9:f4:12:70:3f:db:f8:2b:2a:4c:c4:1e:cb:24:6e:
         f5:86:54:99:cd:cd:20:98:8d:b5:3c:dd:5d:1e:94:9a:ba:72:
         21:0c:72:09:4e:59:04:f3:7a:23:e5:70:2c:31:25:20:32:6f:
         88:a6:e5:bc:9e:a8:16:6d:85:4c:c7:e1:2f:9a:e1:0b:33:60:
         1e:6c:cf:bb:f6:7a:36:83:d4:06:ae:7d:52:3b:25:d8:17:f3:
         d1:00:82:3d:1f:37:c1:09:40:d3:f3:63:78:6f:53:b7:63:21:
         1c:73:e2:7f:2e:0a:30:9b:3d:ab:3d:aa:0d:74:95:ea:b8:20:
         5e:a0:78:d0:c7:f1:98:8c:f8:25:c2:62:01:8b:2c:d3:75:a2:
         29:32:9e:34:e4:a8:be:3c:91:56:11:28:a6:8c:68:dc:b7:d9:
         db:d6:01:c6:1e:28:c9:bc:7c:59:d9:58:84:29:74:f1:71:24:
         fa:c4:5c:ed:6a:f6:58:15:42:3b:cc:fe:9b:9c:62:ba:1b:af:
         a3:6c:44:de:ab:9a:cb:04:2f:66:48:87:5e:b8:3f:f3:a9:6a:
         63:b3:21:09:5c:94:98:47:19:6a:5f:20:c8:bf:d8:0c:e7:89:
         77:a6:d4:94:9f:6e:e3:1b:7e:8c:9f:5c:bd:75:32:f6:73:3d:
         00:7f:f3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:05:27 2025 by rpki-client