Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e31322e302f32342d3234203d3e203238333338.roa
File:                     3138392e34352e31322e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          pNZmtvj7Jzo6AWbYOuba8I3E++6t6p8+1V35PUg//0k=
Subject key identifier:   37:15:94:B1:8B:8A:40:B8:F7:5E:0E:A4:DE:56:12:5C:EB:B5:92:8C
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       404B2360C466DE935F5A77DB5A5CA4D6BDEE4CA5
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e31322e302f32342d3234203d3e203238333338.roa
Signing time:             Wed 30 Apr 2025 19:00:03 +0000
ROA not before:           Wed 30 Apr 2025 18:55:03 +0000
ROA not after:            Wed 29 Apr 2026 19:00:03 +0000
asID:                     28338
IP address blocks:        189.45.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:4b:23:60:c4:66:de:93:5f:5a:77:db:5a:5c:a4:d6:bd:ee:4c:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: Apr 30 18:55:03 2025 GMT
            Not After : Apr 29 19:00:03 2026 GMT
        Subject: CN=3082010A0282010100C397AFC7274DD9E4EAE917820F2D2AD76E124BB331C0138E6BAE4D81FEE9F0D04FE7349C43C1EE3D1CF564639B9382C0A4B9CF4BA656123ED0B52EF8D96B652DEA36E6CF6012EACB251772E24650A8A7094E86D49A010001EC0553D1198690738566B8DB1FC12E1F5E765E3B24E50DF1D856621D9E378F10217E773A414225ABF59665556F4367AC99D600C882040411031F0B6E1B42BD8729206CCFD071E116BD8C1D52BE30EF4E34D448C1A945F1645AA86066C07576AF6C947EF9A923CE52F7B843AF5699E1C2645658513DB81E8A5B87C19796B5E468D1537D605A159327CD1DA25CCF263C45C94B1D17640F345E7A5B594584A9BE6B0E8504B5ADD0FAE90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:97:af:c7:27:4d:d9:e4:ea:e9:17:82:0f:2d:
                    2a:d7:6e:12:4b:b3:31:c0:13:8e:6b:ae:4d:81:fe:
                    e9:f0:d0:4f:e7:34:9c:43:c1:ee:3d:1c:f5:64:63:
                    9b:93:82:c0:a4:b9:cf:4b:a6:56:12:3e:d0:b5:2e:
                    f8:d9:6b:65:2d:ea:36:e6:cf:60:12:ea:cb:25:17:
                    72:e2:46:50:a8:a7:09:4e:86:d4:9a:01:00:01:ec:
                    05:53:d1:19:86:90:73:85:66:b8:db:1f:c1:2e:1f:
                    5e:76:5e:3b:24:e5:0d:f1:d8:56:62:1d:9e:37:8f:
                    10:21:7e:77:3a:41:42:25:ab:f5:96:65:55:6f:43:
                    67:ac:99:d6:00:c8:82:04:04:11:03:1f:0b:6e:1b:
                    42:bd:87:29:20:6c:cf:d0:71:e1:16:bd:8c:1d:52:
                    be:30:ef:4e:34:d4:48:c1:a9:45:f1:64:5a:a8:60:
                    66:c0:75:76:af:6c:94:7e:f9:a9:23:ce:52:f7:b8:
                    43:af:56:99:e1:c2:64:56:58:51:3d:b8:1e:8a:5b:
                    87:c1:97:96:b5:e4:68:d1:53:7d:60:5a:15:93:27:
                    cd:1d:a2:5c:cf:26:3c:45:c9:4b:1d:17:64:0f:34:
                    5e:7a:5b:59:45:84:a9:be:6b:0e:85:04:b5:ad:d0:
                    fa:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:15:94:B1:8B:8A:40:B8:F7:5E:0E:A4:DE:56:12:5C:EB:B5:92:8C
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e31322e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:d3:d8:a2:28:86:48:c0:ac:87:a4:02:8b:ce:cd:96:0a:9a:
         bb:99:84:51:e3:6d:08:7c:ed:28:13:a4:3b:dc:d5:21:f0:de:
         d2:d1:f6:10:28:69:5b:71:e4:d2:ee:dc:0b:3b:f9:50:ba:36:
         f6:62:19:11:7f:00:6a:70:3e:4f:c1:62:af:87:fc:ad:a9:4f:
         99:e2:af:36:b5:f0:ac:8e:54:f8:98:a9:93:0b:b7:7c:c3:26:
         6e:b9:d1:67:c7:23:9f:a8:5d:3e:09:06:56:90:86:7e:83:91:
         47:3e:ed:33:4f:b5:96:fa:cb:1a:fa:60:89:d8:d4:e1:42:3e:
         d5:2c:0c:00:c9:0e:48:28:c5:9a:e1:d5:fc:30:7f:ea:77:d7:
         2a:7e:fd:4b:db:ae:d6:c0:fa:46:50:bf:6a:7c:a0:e1:37:9e:
         03:df:26:e2:a0:f3:cd:b7:25:c8:75:7d:32:e5:89:9a:53:b1:
         b9:d4:dc:ce:40:df:0b:1c:02:68:c9:89:37:4c:fe:ef:40:6e:
         69:01:1c:39:ec:7b:a0:9a:f5:98:89:14:94:32:fe:0a:f9:7f:
         72:bd:04:2d:05:21:fa:2e:27:37:e3:e5:a4:ab:7c:28:f7:6a:
         25:26:e7:f0:13:9a:79:87:0c:24:5a:74:91:7d:d8:76:93:5b:
         f2:89:43:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:51:46 2025 by rpki-client