Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e362e302f32342d3234203d3e203238333338.roa
File:                     3138392e34352e362e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          EU33S9lOWD+ZVCAfJuBiUnRgf/elnLCKX7oUFPs3hL4=
Subject key identifier:   27:7B:BC:EE:DF:2B:DD:FF:56:DD:57:6C:A9:75:AB:B8:67:08:E8:B3
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       05599A939DBD646211F07003A0A9E1704A2ED6B6
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e362e302f32342d3234203d3e203238333338.roa
Signing time:             Wed 30 Apr 2025 19:00:04 +0000
ROA not before:           Wed 30 Apr 2025 18:55:04 +0000
ROA not after:            Wed 29 Apr 2026 19:00:04 +0000
asID:                     28338
IP address blocks:        189.45.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 11:20:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:59:9a:93:9d:bd:64:62:11:f0:70:03:a0:a9:e1:70:4a:2e:d6:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: Apr 30 18:55:04 2025 GMT
            Not After : Apr 29 19:00:04 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:36:a8:74:64:40:9c:fe:46:64:ea:2f:65:d8:
                    4e:fe:62:bb:95:9d:e3:e5:7e:42:3e:3f:09:a7:9c:
                    59:eb:5f:2c:91:ac:1a:43:4e:ef:cc:8d:06:9e:47:
                    73:63:d9:ea:31:55:f8:ec:04:a6:88:80:cd:d9:b6:
                    92:b5:c4:c7:ef:2f:f5:54:b6:93:29:81:b4:d3:a2:
                    16:4c:0f:a8:7b:27:21:65:8b:d3:d4:e6:05:8c:96:
                    cc:9d:30:e4:46:4b:5b:24:ae:2e:f2:29:c4:7d:49:
                    cc:3f:45:62:1b:72:d4:7b:a9:6f:e9:f1:5e:55:67:
                    6e:fe:1d:75:ee:ee:91:a9:19:70:cb:e2:02:d0:3d:
                    d3:3d:53:4b:49:f0:87:68:3c:fb:39:3f:a8:dc:76:
                    2e:c7:95:ca:60:27:7e:58:72:ba:2a:b0:73:ff:0b:
                    ec:f0:ed:8c:a6:05:ef:8c:e4:5a:24:fc:19:9f:13:
                    15:91:ac:28:aa:b7:d8:b6:d9:4a:b5:76:af:fa:f1:
                    fa:3b:b9:04:de:b7:98:ee:c3:46:10:5f:35:a0:f8:
                    80:01:f7:6e:c6:47:84:e8:c8:64:a8:3f:05:75:00:
                    32:df:e0:04:e0:03:e5:23:4f:d2:aa:a5:fe:c6:7e:
                    e7:77:90:8f:15:d7:10:09:0a:54:ea:5e:18:87:f3:
                    ad:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:7B:BC:EE:DF:2B:DD:FF:56:DD:57:6C:A9:75:AB:B8:67:08:E8:B3
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e362e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:7d:77:cd:a3:5d:53:0e:a4:8f:80:62:d6:e4:50:3b:54:82:
         7b:36:eb:9e:81:94:ab:d4:b8:23:72:88:fd:11:81:9d:2a:8f:
         06:f3:ee:0e:a3:67:19:61:43:a5:b1:b5:d4:4c:7b:21:4c:8d:
         28:29:f2:a2:ab:ea:0f:d3:10:71:64:de:52:f0:2f:3b:a6:51:
         b8:40:6d:40:f9:0e:d8:cc:7d:22:23:09:d7:89:b0:7b:c9:04:
         43:f3:f5:21:57:7d:be:b4:1b:a4:11:35:91:8e:50:43:97:66:
         9e:3e:fc:23:c7:d5:3e:79:c5:eb:42:d1:6a:84:a2:4e:80:41:
         e6:e5:f7:59:cd:2d:6f:4b:d3:16:ea:8d:0b:1b:51:2f:6d:e0:
         b0:33:1f:1f:3c:87:85:7e:28:0c:23:48:d8:0f:81:10:ef:a9:
         7e:41:f6:58:ef:c6:93:ff:98:75:0c:fd:de:84:0f:0c:5d:7a:
         6c:99:11:43:ed:ee:cb:8d:77:c8:ce:6d:d7:41:31:4a:0a:85:
         3a:27:a3:a2:15:a4:5d:df:21:e5:56:1e:35:50:d7:2d:4a:4d:
         09:53:99:2b:c0:80:30:bb:ec:74:0f:fb:55:e4:ea:fc:46:2e:
         04:c2:b9:19:f4:25:57:a7:b1:62:c3:1b:40:b0:8e:18:23:90:
         94:88:ab:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:04:14 2025 by rpki-client