Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3233312e302f32342d3234203d3e203532343638.roa
File:                     3138392e38342e3233312e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          uWPS80sOQMyiR+fdLqhCeyql7A/8E+TFTrw1LR44+ng=
Subject key identifier:   73:5B:AB:E5:F0:C3:88:50:26:49:19:9F:9C:D7:93:C5:1A:53:9B:73
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       652D04A837B0033C9CFCBCBBA76F75A7940FD002
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3233312e302f32342d3234203d3e203532343638.roa
Signing time:             Wed 30 Apr 2025 19:00:07 +0000
ROA not before:           Wed 30 Apr 2025 18:55:07 +0000
ROA not after:            Wed 29 Apr 2026 19:00:07 +0000
asID:                     52468
IP address blocks:        189.84.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 11:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:2d:04:a8:37:b0:03:3c:9c:fc:bc:bb:a7:6f:75:a7:94:0f:d0:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: Apr 30 18:55:07 2025 GMT
            Not After : Apr 29 19:00:07 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1d:8e:7e:aa:04:f1:f6:0f:da:e1:1b:45:6c:
                    ea:a4:89:b7:4f:83:20:6a:52:66:29:ec:75:3b:77:
                    eb:ca:0f:cd:d4:98:f2:20:7f:b1:c9:37:f1:dd:69:
                    b4:81:aa:20:13:6a:29:04:50:2c:37:1c:32:3b:01:
                    c1:4f:6b:d7:5f:e7:2c:e3:03:0d:17:75:b3:93:3f:
                    79:5b:d2:d9:0b:4c:67:61:fa:a3:ac:bc:80:a6:f3:
                    9c:a2:28:e0:82:1b:b8:a2:dc:52:7c:8e:91:2b:7e:
                    5d:a5:15:09:1f:6e:26:d4:a8:37:a9:c9:2e:34:ad:
                    78:52:97:91:a6:c5:73:9e:2a:17:43:9b:a1:56:bb:
                    44:d6:88:ca:58:a8:27:df:df:0d:b3:58:59:7a:52:
                    f0:ea:00:d9:aa:5c:9d:0a:e9:49:bf:d1:07:c5:af:
                    56:78:65:bf:4a:dc:b8:81:08:f6:e8:f8:b2:01:59:
                    a1:a7:3e:c3:a1:03:be:c5:0d:d7:82:17:0a:b8:07:
                    08:45:53:65:46:40:ba:fa:f8:d4:cf:64:d8:b9:7f:
                    a0:0d:ac:0d:b3:b4:96:33:af:27:d1:88:f8:a7:60:
                    ac:a8:ae:b2:02:30:74:8d:b2:f2:83:ae:98:35:24:
                    e4:f5:cf:c4:4b:1e:23:ec:97:f3:f2:e6:74:31:32:
                    c6:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:5B:AB:E5:F0:C3:88:50:26:49:19:9F:9C:D7:93:C5:1A:53:9B:73
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3233312e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:64:19:1c:7c:10:e3:b2:4f:7a:54:ed:48:f8:57:d0:c5:50:
         47:b4:ed:57:ad:ea:59:87:e5:43:f2:63:19:99:0e:a1:4e:68:
         c9:d9:06:47:04:bb:34:81:02:ca:a4:7a:07:70:c5:57:47:24:
         04:3d:b5:6f:6a:04:88:10:33:59:ff:54:65:f8:6b:4f:fb:02:
         96:41:ea:2b:03:ae:b1:15:4e:dc:91:d6:eb:8a:40:aa:aa:9d:
         c7:83:69:e6:13:97:4e:71:c4:ab:b8:34:27:e8:c8:e4:f3:c2:
         42:30:e0:1b:d1:aa:d9:61:77:a2:69:d5:2a:3e:4c:0d:53:ba:
         0a:e8:f5:25:37:a6:2a:c6:dd:2d:00:2a:ce:b9:e8:fa:c0:be:
         af:0e:03:11:fc:59:6c:53:25:8d:c7:86:a8:bf:19:17:ea:7f:
         90:0c:bb:bd:c1:b2:4b:c1:df:0c:31:d8:39:8f:c0:fb:1d:5f:
         00:b8:1b:63:00:13:5e:38:43:ee:47:6d:d1:2e:21:7e:59:b0:
         43:b7:77:bd:f4:30:5a:2b:bf:fe:dc:82:7b:4e:6e:06:17:e6:
         4f:d1:0d:17:a2:f4:52:92:cd:b7:f2:0b:c2:1b:98:63:ff:67:
         cf:f8:7b:fe:e1:e4:71:46:d3:01:eb:5f:24:11:20:81:3b:6e:
         ad:e7:48:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 16:03:33 2025 by rpki-client