Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3232342e302f32302d3230203d3e203238333338.roa
File:                     3138392e38342e3232342e302f32302d3230203d3e203238333338.roa (raw, json)
Hash identifier:          xLEYr2lb7ng8GAgrP1uYLis66MD7TneK6eGQ09Lzj/Y=
Subject key identifier:   8F:4A:C8:8D:21:B6:D0:BF:C9:13:88:53:11:25:55:B5:50:7B:36:59
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       13F05EAEBD34266DCFE5F4E061B98918CD8B4855
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3232342e302f32302d3230203d3e203238333338.roa
Signing time:             Wed 30 Apr 2025 19:00:00 +0000
ROA not before:           Wed 30 Apr 2025 18:55:00 +0000
ROA not after:            Wed 29 Apr 2026 19:00:00 +0000
asID:                     28338
IP address blocks:        189.84.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 11:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:f0:5e:ae:bd:34:26:6d:cf:e5:f4:e0:61:b9:89:18:cd:8b:48:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: Apr 30 18:55:00 2025 GMT
            Not After : Apr 29 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:25:0a:90:ee:4d:17:17:27:42:a8:55:f1:8a:
                    f3:11:a8:01:7a:36:6a:fb:ab:08:ae:92:07:6d:df:
                    7d:35:81:1c:50:9e:eb:f6:07:04:10:78:6b:9f:a7:
                    80:9f:b9:af:59:c5:b0:a8:53:c0:96:64:03:89:13:
                    0b:3d:38:c8:6f:8d:f7:f9:69:5f:03:6b:88:e5:88:
                    90:69:f7:2e:94:f8:aa:4a:a1:d9:94:7c:44:8a:eb:
                    d0:97:50:74:ff:1a:e2:e0:01:4b:22:93:1d:62:5d:
                    e2:aa:29:4a:75:38:89:35:cd:68:57:a0:ce:d2:67:
                    59:82:52:7c:ba:49:70:96:97:9b:fb:30:26:d6:0d:
                    e9:99:c5:0e:40:d3:e7:c1:b0:46:69:bd:ff:12:52:
                    e1:43:f8:4f:18:eb:f7:ae:e3:6d:2c:77:af:de:94:
                    e3:44:31:28:8a:43:b3:d7:2f:74:be:12:fd:dc:34:
                    de:48:df:5c:3e:fb:42:9d:f8:ca:41:dd:0c:e5:74:
                    70:49:d5:7a:61:b0:7a:8f:13:88:01:40:1e:1c:44:
                    93:75:9e:48:f3:18:bc:80:77:72:21:33:81:5b:f5:
                    34:62:b4:ca:42:28:ef:8e:7c:9f:56:4f:e8:cd:96:
                    51:f6:45:1d:62:01:8b:55:01:af:20:2c:2b:05:59:
                    1c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:4A:C8:8D:21:B6:D0:BF:C9:13:88:53:11:25:55:B5:50:7B:36:59
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3232342e302f32302d3230203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         54:24:81:7e:0b:87:35:87:12:9c:20:fa:9e:0c:85:39:74:26:
         f5:cf:64:9c:25:f8:c6:9b:b6:32:b1:b3:32:27:98:3c:a2:ba:
         d7:28:e3:2f:be:c0:d3:2e:75:e4:78:c4:f4:e4:6a:d5:48:41:
         7a:93:7e:0c:71:53:59:d7:0c:cc:0e:4b:8f:35:9a:65:43:b8:
         5e:94:8e:e6:9b:e0:0e:2d:bc:2c:b8:4b:9c:92:1b:21:22:ea:
         de:5b:67:1f:d8:3c:46:3d:66:c0:88:e1:ac:54:82:c1:1e:d0:
         50:5e:54:26:5f:68:00:e3:a9:c1:37:40:21:c1:98:3a:48:60:
         24:bb:58:94:f7:fb:16:0c:08:b9:2e:0b:0e:aa:8a:ee:8f:11:
         94:5f:82:25:6e:77:8c:c0:f6:47:cc:2e:f5:60:bf:53:89:d6:
         d8:dd:37:fe:ff:62:a7:c2:ff:e9:35:80:11:6b:be:ef:02:10:
         92:8e:ae:ca:31:cf:53:c7:6c:f6:24:52:0c:5f:d5:79:ae:6e:
         9b:24:52:fc:7a:ac:38:f5:85:4b:66:06:3a:49:5f:5a:bc:71:
         6f:7c:24:65:09:3c:b5:88:b7:3c:aa:dc:0b:04:c1:93:58:42:
         66:34:e8:0c:62:17:72:2a:16:f1:ec:c2:2e:5f:bb:73:ad:eb:
         77:8c:06:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 22:12:20 2025 by rpki-client