Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e302e302f32342d3234203d3e203238333338.roa
File:                     3138392e34352e302e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          YPxQ76UVxMjI3oSZ4ut7zPT5XUduQ1hFNv0TIiG2U1A=
Subject key identifier:   02:19:87:DD:FB:F5:34:91:23:40:9E:05:A7:18:8D:D3:DC:73:DF:2E
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       4B843ABA96EA6EA05FE5AB008D80F0AB2957872D
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e302e302f32342d3234203d3e203238333338.roa
Signing time:             Wed 30 Apr 2025 19:00:00 +0000
ROA not before:           Wed 30 Apr 2025 18:55:00 +0000
ROA not after:            Wed 29 Apr 2026 19:00:00 +0000
asID:                     28338
IP address blocks:        189.45.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:84:3a:ba:96:ea:6e:a0:5f:e5:ab:00:8d:80:f0:ab:29:57:87:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: Apr 30 18:55:00 2025 GMT
            Not After : Apr 29 19:00:00 2026 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e2:60:61:9c:23:2a:c6:23:00:1d:3b:5c:f5:
                    a5:0b:20:68:71:c4:a7:7e:45:c6:0d:3a:ba:cd:a7:
                    15:fb:62:6b:7f:0c:dc:8d:e5:65:58:e7:fd:f9:a5:
                    9c:78:cc:fe:c5:6c:18:60:a4:82:90:6f:15:9f:5c:
                    39:85:5b:6b:21:cd:57:19:84:63:a3:41:25:7e:69:
                    a4:a1:f5:d1:80:45:13:c5:26:8a:bd:c8:7e:9e:8f:
                    c6:0d:b0:0b:af:55:58:8f:2c:ea:bf:79:a3:e7:e5:
                    2b:b8:04:ea:c1:a4:2d:7d:ef:39:92:67:0e:6b:92:
                    10:83:d3:6c:c4:a6:ce:b0:2e:c2:55:35:9b:48:d2:
                    bc:69:e0:7a:a6:05:fe:81:c4:3c:dd:c7:42:84:3f:
                    e1:24:4c:e4:80:3e:89:94:85:4c:6c:c1:fa:cd:28:
                    82:00:b3:55:6b:31:f1:c3:8d:8e:4c:f4:33:33:1d:
                    43:a8:09:59:f0:fb:f1:83:6d:12:2e:9a:75:eb:63:
                    ca:ec:63:d4:29:41:76:75:5b:6c:ad:87:31:a9:43:
                    55:c6:d3:bb:22:fc:73:42:b5:6f:1c:da:63:fc:71:
                    4b:20:8b:ca:2c:bd:86:37:c9:86:e4:a9:27:78:5e:
                    37:5c:fe:cc:0d:92:d4:2d:ad:e3:de:ab:af:de:67:
                    3c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:19:87:DD:FB:F5:34:91:23:40:9E:05:A7:18:8D:D3:DC:73:DF:2E
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e302e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:e4:2a:4c:de:1e:b8:79:24:1c:af:4e:90:4f:74:5d:b1:53:
         a9:2a:93:74:60:2f:62:76:b9:73:ba:c3:85:0b:92:dc:5c:b9:
         f2:a4:93:bf:9c:9e:77:3b:b6:c2:7a:a6:03:29:da:89:2c:35:
         81:0d:b4:b0:fa:95:f1:c1:f3:10:61:97:92:fc:6d:1d:33:ee:
         bd:64:28:2c:8f:ee:ca:57:a7:32:51:1e:2a:be:79:04:95:c1:
         b9:57:20:32:46:0f:c9:35:75:c7:79:71:22:b9:ab:5b:f1:07:
         db:19:48:87:02:1d:f9:89:cf:2e:c6:89:da:66:3c:62:a5:79:
         56:59:5f:fb:71:73:be:76:40:b3:84:67:42:7d:20:93:05:d2:
         0b:b0:19:ce:29:fc:c7:8b:89:05:46:9b:d0:9d:d3:4c:72:fa:
         2c:90:5f:5b:67:8d:d7:f4:25:66:88:ca:d9:86:c2:35:83:91:
         c7:8b:60:a6:55:22:3b:32:93:9e:3b:c0:10:08:c9:40:69:4a:
         73:ae:85:9f:9b:a3:01:7b:d6:06:28:b9:e8:72:93:32:38:59:
         a7:f4:54:1c:b6:e8:05:8b:05:7d:9a:db:7d:d1:e2:32:a5:01:
         02:9c:84:8f:82:09:39:36:8e:5a:71:c5:47:c6:fa:cc:69:6e:
         76:a2:bd:07
-----BEGIN CERTIFICATE-----
MIIHPTCCBiWgAwIBAgIUS4Q6upbqbqBf5asAjYDwqylXhy0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjdGNjJENTVEQzc1ODg3NUI0OUFEQ0EwRkNEMTE1ODA3
QjJGMUREMTAeFw0yNTA0MzAxODU1MDBaFw0yNjA0MjkxOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzFFMjYwNjE5QzIzMkFDNjIz
MDAxRDNCNUNGNUE1MEIyMDY4NzFDNEE3N0U0NUM2MEQzQUJBQ0RBNzE1RkI2MjZC
N0YwQ0RDOERFNTY1NThFN0ZERjlBNTlDNzhDQ0ZFQzU2QzE4NjBBNDgyOTA2RjE1
OUY1QzM5ODU1QjZCMjFDRDU3MTk4NDYzQTM0MTI1N0U2OUE0QTFGNUQxODA0NTEz
QzUyNjhBQkRDODdFOUU4RkM2MERCMDBCQUY1NTU4OEYyQ0VBQkY3OUEzRTdFNTJC
QjgwNEVBQzFBNDJEN0RFRjM5OTI2NzBFNkI5MjEwODNEMzZDQzRBNkNFQjAyRUMy
NTUzNTlCNDhEMkJDNjlFMDdBQTYwNUZFODFDNDNDRERDNzQyODQzRkUxMjQ0Q0U0
ODAzRTg5OTQ4NTRDNkNDMUZBQ0QyODgyMDBCMzU1NkIzMUYxQzM4RDhFNENGNDMz
MzMxRDQzQTgwOTU5RjBGQkYxODM2RDEyMkU5QTc1RUI2M0NBRUM2M0Q0Mjk0MTc2
NzU1QjZDQUQ4NzMxQTk0MzU1QzZEM0JCMjJGQzczNDJCNTZGMUNEQTYzRkM3MTRC
MjA4QkNBMkNCRDg2MzdDOTg2RTRBOTI3Nzg1RTM3NUNGRUNDMEQ5MkQ0MkRBREUz
REVBQkFGREU2NzNDNDcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAweJgYZwjKsYjAB07XPWlCyBoccSnfkXGDTq6zacV+2JrfwzcjeVl
WOf9+aWceMz+xWwYYKSCkG8Vn1w5hVtrIc1XGYRjo0ElfmmkofXRgEUTxSaKvch+
no/GDbALr1VYjyzqv3mj5+UruATqwaQtfe85kmcOa5IQg9NsxKbOsC7CVTWbSNK8
aeB6pgX+gcQ83cdChD/hJEzkgD6JlIVMbMH6zSiCALNVazHxw42OTPQzMx1DqAlZ
8Pvxg20SLpp162PK7GPUKUF2dVtsrYcxqUNVxtO7IvxzQrVvHNpj/HFLIIvKLL2G
N8mG5KkneF43XP7MDZLULa3j3quv3mc8RwIDAQABo4ICSzCCAkcwHQYDVR0OBBYE
FAIZh9379TSRI0CeBacYjdPcc98uMB8GA1UdIwQYMBaAFLf2LVXcdYh1tJrcoPzR
FYB7Lx3RMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRCeDg4RlhlOG41Ujc0
OXBXZ3JrQVMzZGV5cjVtZHl5ZnhCTmlXejV5dnZNLzEvQjdGNjJENTVEQzc1ODg3
NUI0OUFEQ0EwRkNEMTE1ODA3QjJGMUREMS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9CN0Y2MkQ1NURDNzU4ODc1QjQ5QURDQTBGQ0QxMTU4MDdCMkYx
REQxLmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80Qng4OEZYZThuNVI3NDlwV2dy
a0FTM2RleXI1bWR5eWZ4Qk5pV3o1eXZ2TS8xLzMxMzgzOTJlMzQzNTJlMzAyZTMw
MmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4MzMzMzM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvS0AMA0G
CSqGSIb3DQEBCwUAA4IBAQAn5CpM3h64eSQcr06QT3RdsVOpKpN0YC9idrlzusOF
C5LcXLnypJO/nJ53O7bCeqYDKdqJLDWBDbSw+pXxwfMQYZeS/G0dM+69ZCgsj+7K
V6cyUR4qvnkElcG5VyAyRg/JNXXHeXEiuatb8QfbGUiHAh35ic8uxonaZjxipXlW
WV/7cXO+dkCzhGdCfSCTBdILsBnOKfzHi4kFRpvQndNMcvoskF9bZ43X9CVmiMrZ
hsI1g5HHi2CmVSI7MpOeO8AQCMlAaUpzroWfm6MBe9YGKLnocpMyOFmn9FQctugF
iwV9mtt90eIypQECnISPggk5No5accVHxvrMaW52or0H
-----END CERTIFICATE-----
Generated at Wed Apr 30 23:41:23 2025 by rpki-client