Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e382e302f32342d3234203d3e203238333338.roa
File:                     3138392e34352e382e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          IcYbR3CRQ7xULO9yvLy89AodztWAkxS/No5HwcJgUaw=
Subject key identifier:   3A:DD:CA:52:58:54:37:5C:E2:83:BC:66:9B:E5:4C:99:C2:C9:7B:B9
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       7FDFB727B2C0A6D6F606CDC1A54348A7D00BF860
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e382e302f32342d3234203d3e203238333338.roa
Signing time:             Wed 30 Apr 2025 19:00:06 +0000
ROA not before:           Wed 30 Apr 2025 18:55:06 +0000
ROA not after:            Wed 29 Apr 2026 19:00:06 +0000
asID:                     28338
IP address blocks:        189.45.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 11:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:df:b7:27:b2:c0:a6:d6:f6:06:cd:c1:a5:43:48:a7:d0:0b:f8:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: Apr 30 18:55:06 2025 GMT
            Not After : Apr 29 19:00:06 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:63:6c:29:ac:c3:6c:85:09:9c:7b:47:08:7c:
                    02:69:b5:a1:a6:85:9e:cc:9b:c8:db:e6:29:a0:12:
                    6c:ea:26:34:fb:61:0d:26:6c:12:84:34:57:92:9b:
                    14:f5:9a:ca:e0:17:9c:c7:72:33:02:15:29:5c:f1:
                    54:c1:1a:b3:e1:c9:ac:fe:c7:4b:5c:eb:e0:24:9b:
                    1d:a3:61:4c:fd:b1:e3:37:09:ca:d1:18:2b:2d:7c:
                    5a:65:e7:27:98:95:83:26:57:97:74:e9:3d:f3:7b:
                    a8:25:8a:41:99:80:ae:8a:8c:09:c9:f6:ec:5d:a2:
                    89:c0:0c:ab:d6:ac:69:5e:10:f4:93:c3:7e:b6:81:
                    69:cb:02:e7:ea:92:e4:a2:ca:9b:b8:cf:7c:21:ca:
                    f7:49:1b:d2:f0:fb:d2:ce:03:c3:fa:b5:9e:d4:af:
                    dc:a7:17:bc:a8:83:72:98:91:d6:ca:95:73:e4:f6:
                    78:71:3f:32:45:60:c6:33:ff:06:92:75:6f:68:50:
                    a4:f4:a1:5c:3a:27:b9:d9:a1:78:38:c3:80:51:73:
                    f8:72:c9:ca:f0:24:2e:56:e3:cd:cc:96:6e:a7:dd:
                    67:89:57:0d:a1:2a:13:e7:26:0d:df:92:0a:d0:80:
                    64:20:8d:13:a4:eb:43:09:35:0f:78:54:e5:a2:b5:
                    0d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:DD:CA:52:58:54:37:5C:E2:83:BC:66:9B:E5:4C:99:C2:C9:7B:B9
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e382e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:de:7b:16:02:98:b3:a1:9a:1f:ed:4f:9a:0a:33:5c:86:96:
         01:19:d7:a9:a4:1b:3f:94:15:ba:05:5c:95:90:ec:d8:f4:67:
         94:d0:a2:0c:aa:25:bb:cc:9b:6a:24:1c:66:29:3b:81:2f:73:
         8d:0e:cb:ae:11:75:db:94:c7:28:f7:f2:26:2c:f4:0f:23:89:
         02:8f:c3:76:b2:8b:22:1b:4e:6b:0d:21:48:dd:46:1c:78:43:
         ba:36:c6:d5:61:31:4c:ec:a0:08:78:81:ac:38:d8:8b:b1:5a:
         87:2e:3e:1b:fd:b2:fb:85:33:17:1d:e9:22:d1:1b:79:cb:82:
         bb:8f:ee:cd:88:dd:ec:67:50:64:32:19:71:d2:e3:df:fa:83:
         66:99:53:5b:00:83:71:13:13:58:46:4b:6a:e3:3f:03:b6:7d:
         70:51:46:bc:2c:43:10:21:a3:42:95:87:d2:9b:9f:1c:b9:8c:
         1e:26:83:af:ad:cf:3d:0c:6e:b7:d5:e5:3e:ce:6c:fe:b8:57:
         b7:88:82:c5:03:d9:3e:38:e5:43:ca:67:19:cc:0b:91:5a:78:
         83:5b:8a:a5:74:18:d2:34:c4:e3:f2:39:27:f8:a8:2b:ca:75:
         0b:be:80:18:da:ac:32:13:4b:b1:d1:08:9a:12:da:70:55:82:
         cd:f1:6e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 16:05:38 2025 by rpki-client