Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3233302e302f32342d3234203d3e203238333338.roa
File:                     3138392e38342e3233302e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          GPEQpA/etv3Lg8+XtkcT8+GWSWIG9hMTh1dj/ytQyHE=
Subject key identifier:   D9:E0:11:A6:E0:DA:6E:05:A1:67:9D:85:68:2F:EC:BA:0F:66:DA:98
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       5A540DFD65FDD5CC793B7761F84F60343AC2191E
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3233302e302f32342d3234203d3e203238333338.roa
Signing time:             Wed 30 Apr 2025 19:00:01 +0000
ROA not before:           Wed 30 Apr 2025 18:55:01 +0000
ROA not after:            Wed 29 Apr 2026 19:00:01 +0000
asID:                     28338
IP address blocks:        189.84.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 19:20:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:54:0d:fd:65:fd:d5:cc:79:3b:77:61:f8:4f:60:34:3a:c2:19:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: Apr 30 18:55:01 2025 GMT
            Not After : Apr 29 19:00:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:66:13:d4:d3:ad:71:94:91:80:0b:24:9a:43:
                    28:85:20:3e:fc:bd:b2:20:a5:4a:6b:be:b4:9d:25:
                    10:48:12:5f:41:99:39:ea:3c:11:88:02:08:67:e4:
                    05:79:1a:9c:d6:8d:1c:d2:47:a1:12:c4:f9:f4:cc:
                    73:ab:17:8f:81:8e:e6:50:a2:bc:d4:1b:80:89:b9:
                    ab:44:62:49:15:18:72:db:dc:39:eb:39:26:3b:01:
                    0c:df:09:e4:cb:e4:95:d2:5b:1f:7b:d1:b5:fd:31:
                    3a:56:0d:01:50:b3:5d:f0:1a:70:d8:73:5f:dc:4c:
                    60:41:a0:5c:7e:bb:b1:c8:ab:92:51:e6:dc:57:6d:
                    e1:4e:47:3a:c5:a9:43:5d:77:0e:b2:01:a5:20:02:
                    dc:20:f5:d7:83:0e:55:21:33:55:bf:fd:0f:a5:7f:
                    c2:f3:59:75:a1:e1:5e:43:48:be:06:10:bc:2a:1f:
                    81:15:3f:e3:0e:b8:bd:c8:32:4d:a7:9f:c4:f3:34:
                    21:7c:d5:f1:7a:9e:36:ff:66:60:8f:57:d8:e7:f9:
                    51:5a:a9:a6:34:31:20:1d:c9:41:b2:49:e3:ef:85:
                    55:5e:55:57:29:04:50:21:fe:29:6c:79:51:77:21:
                    03:0c:7a:ae:33:22:9f:a2:8b:a1:b5:64:f9:75:06:
                    c9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:E0:11:A6:E0:DA:6E:05:A1:67:9D:85:68:2F:EC:BA:0F:66:DA:98
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3233302e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:d4:32:de:0b:04:5c:ac:54:c3:28:26:b5:3d:3f:85:5a:b8:
         21:d5:d1:3a:f3:8c:d5:5e:e9:ee:df:06:99:d8:a4:9c:41:fd:
         fc:5b:52:2c:71:b1:93:0b:16:1b:e1:fc:e6:98:54:89:ae:5c:
         e6:78:2e:b9:8b:aa:15:82:91:02:14:0e:2a:ab:33:9b:bb:77:
         6e:1d:a6:79:81:c5:88:9e:dc:62:ad:5b:d5:5b:e7:fd:e7:96:
         69:77:50:6f:c4:39:13:5c:b8:2e:f0:01:20:3c:af:fd:ad:05:
         2a:a8:b5:db:1e:f6:d4:1c:bd:ba:54:22:32:c7:73:0a:09:06:
         4c:e6:71:c7:bd:da:da:e9:72:e1:bb:b7:b9:83:3c:b6:97:58:
         f0:d0:83:d9:a1:13:dc:14:29:66:d7:c8:bf:81:94:dd:77:38:
         6d:e6:a6:5f:0e:37:71:f4:e8:b8:80:5b:fb:12:a0:28:ee:3d:
         67:0d:de:56:d4:6a:01:61:73:d5:87:8b:6a:00:cc:24:06:f2:
         5a:2f:bd:2a:38:06:d5:37:9b:4c:ec:e6:06:bd:7d:8a:31:39:
         d7:6b:cc:1a:81:52:e4:4a:87:b3:51:ef:b1:fe:3d:4d:9a:29:
         6e:bd:18:0f:4a:ba:ab:a6:d5:6c:8d:78:db:18:bb:50:54:84:
         f5:e9:58:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 08:18:19 2025 by rpki-client