Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e322e302f32342d3234203d3e203238333338.roa
File:                     3138392e34352e322e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          6G2M5M2AwlhkyjFIHfaJscu1M+z5qkDEDMhMuZmB3b8=
Subject key identifier:   13:08:CA:E7:E0:DA:40:23:6F:B0:E0:5E:D9:0B:E8:14:78:BA:01:15
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       4C51EC974E5E3A8E58629BF5C56433370182C614
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e322e302f32342d3234203d3e203238333338.roa
Signing time:             Wed 30 Apr 2025 19:00:00 +0000
ROA not before:           Wed 30 Apr 2025 18:55:00 +0000
ROA not after:            Wed 29 Apr 2026 19:00:00 +0000
asID:                     28338
IP address blocks:        189.45.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 02:16:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:51:ec:97:4e:5e:3a:8e:58:62:9b:f5:c5:64:33:37:01:82:c6:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: Apr 30 18:55:00 2025 GMT
            Not After : Apr 29 19:00:00 2026 GMT
        Subject: CN=3082010A0282010100C84705777BAD94CF4AAB535641511996DE876AC0DDD1214E61E43F35D2A953141A34F6A8106C3F7CE17DE24D5663EC317233349297D0CBF52BF8210642EA64F294BA47EE3C57351558D15BC7B7F77710B6E990EF0644A8B36888DA64103D4B99EEB4F9F381B799FEB00293786743900E2CB9BBCAB459B529BD69425FCCF3AB4DCD9DDADC7C2EF6C01265BB50C29ABC8493E99257C87AF0AD577F78A99842ED9961651408B6E8E9ABC3B48F1E7CC9F9FB053CC186BEA44DE2A4D562881A13C2BD8EC516FE9D11350D0CE2B79B3BB47FBB013B6C6CAAF52603E0DD790CB14FDC78AA5CA37F1200A96529461339AB5A70FF455697AF495CDCF7709C33BE502CDF450203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:47:05:77:7b:ad:94:cf:4a:ab:53:56:41:51:
                    19:96:de:87:6a:c0:dd:d1:21:4e:61:e4:3f:35:d2:
                    a9:53:14:1a:34:f6:a8:10:6c:3f:7c:e1:7d:e2:4d:
                    56:63:ec:31:72:33:34:92:97:d0:cb:f5:2b:f8:21:
                    06:42:ea:64:f2:94:ba:47:ee:3c:57:35:15:58:d1:
                    5b:c7:b7:f7:77:10:b6:e9:90:ef:06:44:a8:b3:68:
                    88:da:64:10:3d:4b:99:ee:b4:f9:f3:81:b7:99:fe:
                    b0:02:93:78:67:43:90:0e:2c:b9:bb:ca:b4:59:b5:
                    29:bd:69:42:5f:cc:f3:ab:4d:cd:9d:da:dc:7c:2e:
                    f6:c0:12:65:bb:50:c2:9a:bc:84:93:e9:92:57:c8:
                    7a:f0:ad:57:7f:78:a9:98:42:ed:99:61:65:14:08:
                    b6:e8:e9:ab:c3:b4:8f:1e:7c:c9:f9:fb:05:3c:c1:
                    86:be:a4:4d:e2:a4:d5:62:88:1a:13:c2:bd:8e:c5:
                    16:fe:9d:11:35:0d:0c:e2:b7:9b:3b:b4:7f:bb:01:
                    3b:6c:6c:aa:f5:26:03:e0:dd:79:0c:b1:4f:dc:78:
                    aa:5c:a3:7f:12:00:a9:65:29:46:13:39:ab:5a:70:
                    ff:45:56:97:af:49:5c:dc:f7:70:9c:33:be:50:2c:
                    df:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:08:CA:E7:E0:DA:40:23:6F:B0:E0:5E:D9:0B:E8:14:78:BA:01:15
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e322e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:10:2f:34:2a:eb:f2:55:d4:0e:15:40:dc:3f:09:e7:89:06:
         10:1f:ab:27:f4:f2:d9:bf:82:ce:94:eb:cb:ee:b4:7f:41:91:
         e3:80:2a:42:b4:42:dd:f4:3a:69:bd:be:e7:1a:a8:6e:8a:91:
         b2:57:51:c4:cc:ab:8d:3a:20:0f:7d:73:a7:7e:9a:4a:9b:80:
         f9:79:50:a4:ab:06:77:5c:5b:82:8d:b3:00:e5:bc:55:7a:25:
         89:00:1b:57:d4:74:c7:ca:b1:3c:11:eb:ce:06:da:6c:37:66:
         84:27:f8:7b:0d:1f:fc:53:ac:29:c1:c7:40:88:83:aa:bc:2f:
         ef:91:a8:c6:ca:7c:02:17:2c:ce:fc:24:ac:6b:b8:33:28:96:
         92:f3:0a:2c:9b:7b:02:ae:25:b0:d9:5a:da:29:5a:ca:4d:6a:
         37:a2:28:7b:fd:d0:b8:a6:7f:27:ed:63:19:b0:f1:7e:3a:d5:
         be:e8:d0:11:5a:ca:e2:e5:9d:f6:09:ed:b2:7a:b5:07:a7:3a:
         5a:bb:7e:e8:03:99:d9:10:29:3d:e2:54:9a:6c:27:c4:aa:fd:
         c5:db:f1:23:80:c6:04:dc:97:b2:72:3f:10:3f:af:48:b8:89:
         ab:4e:a7:73:ec:99:e3:9e:20:6d:28:48:21:a6:bc:1e:ff:b1:
         13:12:c6:0b
-----BEGIN CERTIFICATE-----
MIIHPTCCBiWgAwIBAgIUTFHsl05eOo5YYpv1xWQzNwGCxhQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjdGNjJENTVEQzc1ODg3NUI0OUFEQ0EwRkNEMTE1ODA3
QjJGMUREMTAeFw0yNTA0MzAxODU1MDBaFw0yNjA0MjkxOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzg0NzA1Nzc3QkFEOTRDRjRB
QUI1MzU2NDE1MTE5OTZERTg3NkFDMERERDEyMTRFNjFFNDNGMzVEMkE5NTMxNDFB
MzRGNkE4MTA2QzNGN0NFMTdERTI0RDU2NjNFQzMxNzIzMzM0OTI5N0QwQ0JGNTJC
RjgyMTA2NDJFQTY0RjI5NEJBNDdFRTNDNTczNTE1NThEMTVCQzdCN0Y3NzcxMEI2
RTk5MEVGMDY0NEE4QjM2ODg4REE2NDEwM0Q0Qjk5RUVCNEY5RjM4MUI3OTlGRUIw
MDI5Mzc4Njc0MzkwMEUyQ0I5QkJDQUI0NTlCNTI5QkQ2OTQyNUZDQ0YzQUI0RENE
OUREQURDN0MyRUY2QzAxMjY1QkI1MEMyOUFCQzg0OTNFOTkyNTdDODdBRjBBRDU3
N0Y3OEE5OTg0MkVEOTk2MTY1MTQwOEI2RThFOUFCQzNCNDhGMUU3Q0M5RjlGQjA1
M0NDMTg2QkVBNDRERTJBNEQ1NjI4ODFBMTNDMkJEOEVDNTE2RkU5RDExMzUwRDBD
RTJCNzlCM0JCNDdGQkIwMTNCNkM2Q0FBRjUyNjAzRTBERDc5MENCMTRGREM3OEFB
NUNBMzdGMTIwMEE5NjUyOTQ2MTMzOUFCNUE3MEZGNDU1Njk3QUY0OTVDRENGNzcw
OUMzM0JFNTAyQ0RGNDUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAyEcFd3utlM9Kq1NWQVEZlt6HasDd0SFOYeQ/NdKpUxQaNPaoEGw/
fOF94k1WY+wxcjM0kpfQy/Ur+CEGQupk8pS6R+48VzUVWNFbx7f3dxC26ZDvBkSo
s2iI2mQQPUuZ7rT584G3mf6wApN4Z0OQDiy5u8q0WbUpvWlCX8zzq03NndrcfC72
wBJlu1DCmryEk+mSV8h68K1Xf3ipmELtmWFlFAi26Omrw7SPHnzJ+fsFPMGGvqRN
4qTVYogaE8K9jsUW/p0RNQ0M4rebO7R/uwE7bGyq9SYD4N15DLFP3HiqXKN/EgCp
ZSlGEzmrWnD/RVaXr0lc3PdwnDO+UCzfRQIDAQABo4ICSzCCAkcwHQYDVR0OBBYE
FBMIyufg2kAjb7DgXtkL6BR4ugEVMB8GA1UdIwQYMBaAFLf2LVXcdYh1tJrcoPzR
FYB7Lx3RMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRCeDg4RlhlOG41Ujc0
OXBXZ3JrQVMzZGV5cjVtZHl5ZnhCTmlXejV5dnZNLzEvQjdGNjJENTVEQzc1ODg3
NUI0OUFEQ0EwRkNEMTE1ODA3QjJGMUREMS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9CN0Y2MkQ1NURDNzU4ODc1QjQ5QURDQTBGQ0QxMTU4MDdCMkYx
REQxLmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80Qng4OEZYZThuNVI3NDlwV2dy
a0FTM2RleXI1bWR5eWZ4Qk5pV3o1eXZ2TS8xLzMxMzgzOTJlMzQzNTJlMzIyZTMw
MmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4MzMzMzM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvS0CMA0G
CSqGSIb3DQEBCwUAA4IBAQCaEC80KuvyVdQOFUDcPwnniQYQH6sn9PLZv4LOlOvL
7rR/QZHjgCpCtELd9Dppvb7nGqhuipGyV1HEzKuNOiAPfXOnfppKm4D5eVCkqwZ3
XFuCjbMA5bxVeiWJABtX1HTHyrE8EevOBtpsN2aEJ/h7DR/8U6wpwcdAiIOqvC/v
kajGynwCFyzO/CSsa7gzKJaS8wosm3sCriWw2VraKVrKTWo3oih7/dC4pn8n7WMZ
sPF+OtW+6NARWsri5Z32Ce2yerUHpzpau37oA5nZECk94lSabCfEqv3F2/EjgMYE
3Jeycj8QP69IuImrTqdz7JnjniBtKEghprwe/7ETEsYL
-----END CERTIFICATE-----
Generated at Sun May 11 19:15:46 2025 by rpki-client