Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e342e302f32342d3234203d3e203238333338.roa
File:                     3138392e34352e342e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          b3YeE4B7tGppJD2ckMoJudlSQrjuXgDjKqTgyXa4/7w=
Subject key identifier:   9C:FC:22:81:F2:9C:6F:E2:7F:21:14:AE:7F:5A:57:BD:F4:A7:E3:30
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       4EEFFDB7B0722544AE381078521295D7857ED728
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e342e302f32342d3234203d3e203238333338.roa
Signing time:             Wed 30 Apr 2025 19:00:08 +0000
ROA not before:           Wed 30 Apr 2025 18:55:08 +0000
ROA not after:            Wed 29 Apr 2026 19:00:08 +0000
asID:                     28338
IP address blocks:        189.45.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 11:20:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:ef:fd:b7:b0:72:25:44:ae:38:10:78:52:12:95:d7:85:7e:d7:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: Apr 30 18:55:08 2025 GMT
            Not After : Apr 29 19:00:08 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:61:23:07:9c:b0:82:4b:bc:6a:c1:51:95:ee:
                    d0:44:ef:88:34:f0:bb:07:75:fa:32:fa:63:c4:50:
                    c9:37:01:d1:84:e6:f5:47:16:ca:cc:21:f2:2c:fa:
                    35:e5:dc:0b:96:5c:07:c4:2f:cb:7b:84:5f:a8:c1:
                    33:65:b0:78:f9:ba:54:eb:10:16:f8:23:db:82:41:
                    31:a7:ba:b9:73:39:ed:96:90:8e:8a:10:1e:2e:c6:
                    e2:f5:b3:27:0f:8a:5d:cf:ab:73:4d:2c:03:c6:e9:
                    d3:c5:65:3e:9f:db:28:da:74:5d:08:df:ef:37:c0:
                    16:2d:18:df:64:8b:6a:73:df:74:ae:4d:c9:55:02:
                    26:ea:6b:c0:0a:d6:7c:4b:8e:fa:fd:1d:fc:25:1d:
                    8a:c2:34:af:50:9a:c5:33:57:1f:99:d7:94:9d:60:
                    79:c6:0d:af:b8:eb:00:a1:9e:e8:bb:42:59:04:c2:
                    73:e4:0b:d8:25:d8:51:cf:d6:0a:e3:1f:bd:5d:e9:
                    69:57:e8:b9:d7:55:4d:52:de:6b:f2:58:ea:a5:02:
                    aa:ee:b1:31:76:b2:0d:47:44:f4:31:8f:aa:f8:d4:
                    eb:cf:29:91:dd:1f:a8:9d:74:03:40:8c:0b:ac:39:
                    ea:ba:47:ff:bf:f0:7a:b3:fa:2c:39:8d:16:9c:22:
                    8c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:FC:22:81:F2:9C:6F:E2:7F:21:14:AE:7F:5A:57:BD:F4:A7:E3:30
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e342e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:ab:5b:92:40:7e:0f:f2:02:31:88:94:13:99:bc:e5:27:2d:
         84:8c:5e:cf:99:cc:f6:0a:6a:55:e7:57:d2:c1:a0:47:a5:15:
         f6:da:2c:32:1d:34:4b:87:fa:b7:ce:f2:24:f7:56:55:e1:31:
         0b:fe:f9:d1:8d:66:5d:60:20:23:e8:53:65:84:40:96:4c:1f:
         3c:16:86:f4:86:ee:d2:5a:3e:26:c5:2a:c9:ae:2a:8f:d5:40:
         46:66:d5:7f:e4:ff:a4:f0:e0:30:9c:0c:d9:9e:32:43:5b:e5:
         b8:84:8c:54:49:96:7b:52:75:df:19:9a:30:94:20:bf:53:34:
         89:f6:d8:fe:a8:99:a3:02:e0:a3:ed:19:2b:11:05:fa:d8:e2:
         8d:ba:1e:b3:c1:1b:a1:c9:9c:59:3b:f2:26:85:53:af:fa:90:
         5d:bb:e3:cf:22:09:50:b9:06:e5:20:bb:80:6c:ba:da:6f:94:
         29:6b:e9:cb:dc:ad:75:33:5a:2d:26:ad:68:2d:2a:1f:0d:b2:
         a2:aa:8e:50:9c:00:62:d7:85:df:27:ef:cb:09:5f:33:84:67:
         7c:b9:8e:ba:de:cc:ca:3c:0c:86:61:7f:80:96:33:45:37:dc:
         e2:37:f6:7b:b9:0c:db:bc:54:d8:dd:8a:2c:e8:21:28:da:e3:
         f0:0a:75:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:22:49 2025 by rpki-client