Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e31342e302f32342d3234203d3e203238333338.roa
File:                     3138392e34352e31342e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          3LGzlW7yHc9cDH6ydwINzELhOqjU0OIgg+xA+1apNKg=
Subject key identifier:   C8:F7:49:DF:54:40:6D:73:FC:8D:D4:2E:4A:2A:C0:FC:37:32:2C:A4
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       5AE4BD4BCFDAFB5F1F6F0CA1FCA65DBB017150EE
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e31342e302f32342d3234203d3e203238333338.roa
Signing time:             Wed 30 Apr 2025 19:00:07 +0000
ROA not before:           Wed 30 Apr 2025 18:55:07 +0000
ROA not after:            Wed 29 Apr 2026 19:00:07 +0000
asID:                     28338
IP address blocks:        189.45.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:e4:bd:4b:cf:da:fb:5f:1f:6f:0c:a1:fc:a6:5d:bb:01:71:50:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: Apr 30 18:55:07 2025 GMT
            Not After : Apr 29 19:00:07 2026 GMT
        Subject: CN=3082010A0282010100D6431657C497A732E97E21BDC365B241BB0D5015DD9FDF9749B106821955DB44D91595627B9966B5AD8E9ED40F4061DA686372EB2500281128B64B04E4FCE3B69E878F85A834D57FA2FFC010EBB39AB806F65E55A830410147AF9C9736D822CC1337CC53F13E8C4CAD22A8B5C5A0ADD788A95EEB100A88D25844286CDCFDBA703DFA18894B46E1F3C51E13F6043CF366BED8934BB0FEC67277940E50749CCF5693806E39DBD242B98CBA64CF71189078C19A85D8D7CD86A5BD43EB6D3AFC7CE8C125EE9157222D781A0261E62FCC72240ED7A845BBCDEF5849110F75F1B803CF6E0FE40393AC37A518FE3172DD3A2C7F20856D1A921B8B89D0B809F8E13810030203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:43:16:57:c4:97:a7:32:e9:7e:21:bd:c3:65:
                    b2:41:bb:0d:50:15:dd:9f:df:97:49:b1:06:82:19:
                    55:db:44:d9:15:95:62:7b:99:66:b5:ad:8e:9e:d4:
                    0f:40:61:da:68:63:72:eb:25:00:28:11:28:b6:4b:
                    04:e4:fc:e3:b6:9e:87:8f:85:a8:34:d5:7f:a2:ff:
                    c0:10:eb:b3:9a:b8:06:f6:5e:55:a8:30:41:01:47:
                    af:9c:97:36:d8:22:cc:13:37:cc:53:f1:3e:8c:4c:
                    ad:22:a8:b5:c5:a0:ad:d7:88:a9:5e:eb:10:0a:88:
                    d2:58:44:28:6c:dc:fd:ba:70:3d:fa:18:89:4b:46:
                    e1:f3:c5:1e:13:f6:04:3c:f3:66:be:d8:93:4b:b0:
                    fe:c6:72:77:94:0e:50:74:9c:cf:56:93:80:6e:39:
                    db:d2:42:b9:8c:ba:64:cf:71:18:90:78:c1:9a:85:
                    d8:d7:cd:86:a5:bd:43:eb:6d:3a:fc:7c:e8:c1:25:
                    ee:91:57:22:2d:78:1a:02:61:e6:2f:cc:72:24:0e:
                    d7:a8:45:bb:cd:ef:58:49:11:0f:75:f1:b8:03:cf:
                    6e:0f:e4:03:93:ac:37:a5:18:fe:31:72:dd:3a:2c:
                    7f:20:85:6d:1a:92:1b:8b:89:d0:b8:09:f8:e1:38:
                    10:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:F7:49:DF:54:40:6D:73:FC:8D:D4:2E:4A:2A:C0:FC:37:32:2C:A4
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e31342e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:17:af:f7:5d:08:41:0b:6c:42:01:22:b1:a9:c1:6f:69:c7:
         ef:f3:a8:5a:3a:4a:18:5e:2d:0f:44:ab:51:26:19:52:25:ce:
         74:17:a6:bc:4c:3f:77:cc:4f:ce:29:dc:b6:10:b4:67:14:f9:
         48:e1:26:73:c5:6d:e2:5d:20:93:55:ee:27:7a:40:f0:5a:42:
         5a:ae:a7:b7:36:93:94:fb:05:6b:11:8b:8b:bf:fe:75:fd:49:
         ba:e4:75:b6:0b:a4:c1:e5:38:d1:93:86:1e:df:ba:9f:14:85:
         6d:87:5d:4f:16:93:fb:09:94:bf:fe:d7:80:21:d1:31:e1:1f:
         92:2f:10:aa:4f:84:1b:39:c1:cf:0f:8e:a6:5b:56:58:05:4c:
         1d:bb:6c:8a:75:6f:f9:d0:ca:f3:f8:fd:64:53:97:47:4c:a5:
         71:1e:fc:80:8d:71:a4:13:d3:06:b6:a5:ac:5c:e9:90:e3:ea:
         1f:fd:c1:ba:99:5c:00:f0:44:cd:dd:63:7a:71:21:66:ac:74:
         a0:c2:fc:40:b0:c9:23:df:72:8b:00:53:98:51:d4:7c:75:0f:
         68:c5:49:24:43:b4:a2:45:be:55:c5:f0:74:9a:b0:ac:c5:f1:
         29:f4:92:6d:b6:4f:e2:f2:64:2c:2e:b7:3a:13:a2:41:f6:e8:
         2a:34:9b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:23:01 2025 by rpki-client