Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e31302e302f32342d3234203d3e203238333338.roa
File:                     3138392e34352e31302e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          XURgoyFOARqCxAgxyt4ejwqX9DfUz9ZBwCQzOEeKH+Y=
Subject key identifier:   2A:A5:9F:D5:3A:64:E7:7C:B1:82:EE:B0:37:5C:FE:70:1C:FE:CB:34
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       52E28BE50A4A7648C7C6F6B4DD06866EF6BD5202
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e31302e302f32342d3234203d3e203238333338.roa
Signing time:             Wed 30 Apr 2025 19:00:01 +0000
ROA not before:           Wed 30 Apr 2025 18:55:01 +0000
ROA not after:            Wed 29 Apr 2026 19:00:01 +0000
asID:                     28338
IP address blocks:        189.45.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 03:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:e2:8b:e5:0a:4a:76:48:c7:c6:f6:b4:dd:06:86:6e:f6:bd:52:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: Apr 30 18:55:01 2025 GMT
            Not After : Apr 29 19:00:01 2026 GMT
        Subject: CN=3082010A0282010100D42A7FDF6B6E7DE9B5C93B69FB26B3F8043E037A5C07FC83256629B7700193FA3C0F53EE9C8C3D60F5A59695A5847F6008D654339FCE7E17BC2315E57D3184FEC7BA0173477A64B8AF16A20002EABB75557B0102CE76D718BF8239ECFA5A9DEC0B4B51F13419320EDF89B8EEAAD129E6FB88CCDAF3F6CB753E2B34C957A12AEC17AE0BE432C049DB82515883696D8C228419ADD24954347DD19DD9C42D2958E9C0B0FAF2DD0460A9125CBADB1F13032391C14BA626E3C2CD9B81500DBB8762785E416ADAE7418A7FEE4D2974DE202AAB48ED34C9A4AF76B00708CEE92DD000A25EBAD4778F6B20AD8AEAD09AE4B96C8CE585550F557AD9278DBF40C5BA36DD010203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2a:7f:df:6b:6e:7d:e9:b5:c9:3b:69:fb:26:
                    b3:f8:04:3e:03:7a:5c:07:fc:83:25:66:29:b7:70:
                    01:93:fa:3c:0f:53:ee:9c:8c:3d:60:f5:a5:96:95:
                    a5:84:7f:60:08:d6:54:33:9f:ce:7e:17:bc:23:15:
                    e5:7d:31:84:fe:c7:ba:01:73:47:7a:64:b8:af:16:
                    a2:00:02:ea:bb:75:55:7b:01:02:ce:76:d7:18:bf:
                    82:39:ec:fa:5a:9d:ec:0b:4b:51:f1:34:19:32:0e:
                    df:89:b8:ee:aa:d1:29:e6:fb:88:cc:da:f3:f6:cb:
                    75:3e:2b:34:c9:57:a1:2a:ec:17:ae:0b:e4:32:c0:
                    49:db:82:51:58:83:69:6d:8c:22:84:19:ad:d2:49:
                    54:34:7d:d1:9d:d9:c4:2d:29:58:e9:c0:b0:fa:f2:
                    dd:04:60:a9:12:5c:ba:db:1f:13:03:23:91:c1:4b:
                    a6:26:e3:c2:cd:9b:81:50:0d:bb:87:62:78:5e:41:
                    6a:da:e7:41:8a:7f:ee:4d:29:74:de:20:2a:ab:48:
                    ed:34:c9:a4:af:76:b0:07:08:ce:e9:2d:d0:00:a2:
                    5e:ba:d4:77:8f:6b:20:ad:8a:ea:d0:9a:e4:b9:6c:
                    8c:e5:85:55:0f:55:7a:d9:27:8d:bf:40:c5:ba:36:
                    dd:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:A5:9F:D5:3A:64:E7:7C:B1:82:EE:B0:37:5C:FE:70:1C:FE:CB:34
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e31302e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:ab:13:08:3c:27:60:be:ac:7e:c1:59:1d:3f:e9:19:6d:62:
         76:4e:7f:45:14:fa:6d:ec:46:b9:b1:89:88:74:39:77:e9:30:
         a0:1e:72:45:67:66:d3:da:72:f2:d2:ba:b7:84:80:fd:eb:e2:
         db:40:2b:fc:b3:9b:52:f5:1d:4b:9f:e4:24:a5:ec:22:c0:03:
         73:f2:68:90:e7:fa:25:e5:46:a4:05:72:71:14:bd:30:cf:8d:
         a3:09:e6:6d:85:37:81:e0:9e:8b:7e:25:a7:f7:eb:3e:06:55:
         90:f6:b1:bf:ca:08:5d:f4:49:e4:d8:8f:62:a2:2e:45:a3:c0:
         6a:43:5e:45:3a:95:8b:68:1e:dc:f4:05:d8:17:ee:48:92:9c:
         87:75:9f:e1:14:48:16:7f:4f:9d:b2:b5:b6:1c:fc:b9:a7:04:
         45:08:6a:4f:a8:a0:1f:55:b5:65:5d:05:60:7e:83:c1:a1:2f:
         87:da:df:30:7e:80:f3:cd:42:76:00:61:e0:e6:8a:bc:05:55:
         f3:4f:f9:be:d1:db:c7:f8:8f:f4:7f:b8:31:8b:39:b1:ce:8c:
         08:6b:f1:8f:c2:28:75:58:64:ab:10:a6:ca:c7:db:17:9f:65:
         b5:36:80:16:96:73:a2:1b:e5:98:86:71:0c:e0:56:7e:76:a3:
         d5:49:a3:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 09:51:01 2025 by rpki-client