Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e31312e302f32342d3234203d3e203238333338.roa
File:                     3138392e34352e31312e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          RVntQJtcdSJtKK2L0sdC9nAF0PgQzZfqW7z1IOYF884=
Subject key identifier:   76:89:22:DD:45:3A:90:3F:64:6B:3E:FE:B8:A4:9A:24:47:71:E5:CE
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       38CEED82CC22F32D5CBEA208859916347325AEE5
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e31312e302f32342d3234203d3e203238333338.roa
Signing time:             Wed 30 Apr 2025 19:00:05 +0000
ROA not before:           Wed 30 Apr 2025 18:55:05 +0000
ROA not after:            Wed 29 Apr 2026 19:00:05 +0000
asID:                     28338
IP address blocks:        189.45.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 18 Jun 2025 21:20:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:ce:ed:82:cc:22:f3:2d:5c:be:a2:08:85:99:16:34:73:25:ae:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: Apr 30 18:55:05 2025 GMT
            Not After : Apr 29 19:00:05 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fa:59:58:8c:77:41:c7:d7:5f:b7:4d:97:52:
                    96:68:d8:4f:89:76:c3:3a:44:75:d8:06:67:66:3d:
                    39:84:80:09:2b:f7:d0:b4:ad:76:e4:5a:2f:0b:1e:
                    71:2e:62:63:8a:17:70:cb:f6:fa:e2:08:29:2b:61:
                    78:58:b7:de:af:1f:70:81:c9:4d:8a:67:72:e7:45:
                    27:59:40:31:fa:f2:9a:02:a2:1d:68:a3:67:23:95:
                    ea:e2:d6:69:90:b1:e2:27:07:63:14:9c:20:f3:b4:
                    8a:09:53:92:cb:53:18:19:15:d4:b9:9e:8c:40:fc:
                    50:e1:33:c3:f2:ba:65:1f:ac:1a:1e:c0:7b:c8:11:
                    a3:3d:87:49:5e:02:72:74:44:20:b7:ac:72:6a:c4:
                    59:d7:69:8c:f6:c4:65:14:2a:d8:6a:02:2f:87:5d:
                    fe:29:20:c3:e9:9d:a7:82:cf:28:3c:a7:36:fb:c3:
                    90:17:9d:58:9f:3f:1f:e5:3c:0e:02:df:ca:48:c0:
                    55:9a:d4:d7:0c:aa:8a:0e:93:89:9b:75:d9:72:a5:
                    08:6e:a9:a7:63:fb:62:7b:87:41:f5:5b:8c:70:39:
                    fd:a8:3a:c2:84:8d:66:34:8f:07:b8:dc:b1:c3:d3:
                    a9:ee:2e:f1:83:51:74:23:b5:26:31:56:56:fd:07:
                    b5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:89:22:DD:45:3A:90:3F:64:6B:3E:FE:B8:A4:9A:24:47:71:E5:CE
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e31312e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:7f:55:0e:c4:3d:46:8f:46:79:20:e2:da:33:82:d4:c5:88:
         a5:0f:19:d1:63:18:4b:72:51:90:0d:7c:d8:61:c6:2d:7f:11:
         0b:06:e6:9b:67:fe:20:12:ef:db:e1:f4:64:8e:72:ed:58:3b:
         67:d8:47:48:53:54:f7:cc:bd:e4:4c:85:dc:e9:65:0e:71:43:
         cc:d4:f0:d0:a8:6c:cb:bf:ef:b8:1c:ea:42:ef:32:47:83:67:
         07:9a:9f:f0:34:a9:18:e8:54:55:4e:a8:8d:ad:eb:36:2c:44:
         aa:db:b7:e7:31:b8:b4:87:2f:79:7a:1c:11:86:e0:cb:cf:a2:
         92:d5:7d:ab:b5:75:58:79:c3:1b:16:bc:fc:f0:24:98:15:d3:
         06:31:42:d1:a5:2c:c1:0d:74:9e:a3:d4:23:d6:97:eb:d6:9a:
         3d:9e:1f:24:ab:ab:34:ec:32:ec:69:63:9e:6d:62:53:03:c7:
         9a:e2:a0:28:01:86:65:e5:83:51:91:5d:69:26:83:f5:88:00:
         40:3a:e5:00:02:59:d1:a0:3e:8a:9b:39:75:78:ed:7e:6a:ed:
         ae:ae:10:39:56:b4:cc:1f:d9:97:c7:bb:47:bf:1b:04:4e:41:
         84:6c:f5:c0:19:2e:14:a4:b2:09:e0:60:87:b4:ef:08:e7:69:
         ed:cb:c2:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 06:35:32 2025 by rpki-client