Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3233342e302f32342d3234203d3e203238333338.roa
File:                     3138392e38342e3233342e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          dOFTSvRHQN4TQNhqAru+xiTPs92420MaHSbMzuSgqkg=
Subject key identifier:   89:26:9B:0D:20:39:FC:14:F8:7D:A2:AB:A5:06:8E:1E:70:50:17:FC
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       039AD7BDF34A8F2DCF2F0F523744864281827E9C
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3233342e302f32342d3234203d3e203238333338.roa
Signing time:             Wed 30 Apr 2025 19:00:00 +0000
ROA not before:           Wed 30 Apr 2025 18:55:00 +0000
ROA not after:            Wed 29 Apr 2026 19:00:00 +0000
asID:                     28338
IP address blocks:        189.84.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:9a:d7:bd:f3:4a:8f:2d:cf:2f:0f:52:37:44:86:42:81:82:7e:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: Apr 30 18:55:00 2025 GMT
            Not After : Apr 29 19:00:00 2026 GMT
        Subject: CN=3082010A0282010100A2A2094FDBE49D8B93044A583C205C600EE859181B525B90399E9C8954B929C6D780617C0FC54518011C6C0F1D608FD93F413B352681ADAAF93836DEB0B1F58319189C87AA32F8BCAD32F4BE5312C20D17071F99E0009E29B4790E1AB9BD336B6B48B7D379E66553A3EFE749AE0481BD550F191C9E9E910CC8D2C3A7F76D4EF0B5CDF8C92CD97E52FC5149AC8A31CD2171ED8D64A833700A679177B6C1F4CA2757C3A1A96CCF3BCCFDFCF1AC22C1AB745812E303DF2FCC7A4BF34E0FABF7C86A79DCD7C3B80E59B8C909574C9EB58741C0B17BFEC7F5639A6E16328899C161D7C5133755687C58454CE937B1422F1481BBA0E0FC9E13C2200BD57E5EDD0F53AF0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a2:09:4f:db:e4:9d:8b:93:04:4a:58:3c:20:
                    5c:60:0e:e8:59:18:1b:52:5b:90:39:9e:9c:89:54:
                    b9:29:c6:d7:80:61:7c:0f:c5:45:18:01:1c:6c:0f:
                    1d:60:8f:d9:3f:41:3b:35:26:81:ad:aa:f9:38:36:
                    de:b0:b1:f5:83:19:18:9c:87:aa:32:f8:bc:ad:32:
                    f4:be:53:12:c2:0d:17:07:1f:99:e0:00:9e:29:b4:
                    79:0e:1a:b9:bd:33:6b:6b:48:b7:d3:79:e6:65:53:
                    a3:ef:e7:49:ae:04:81:bd:55:0f:19:1c:9e:9e:91:
                    0c:c8:d2:c3:a7:f7:6d:4e:f0:b5:cd:f8:c9:2c:d9:
                    7e:52:fc:51:49:ac:8a:31:cd:21:71:ed:8d:64:a8:
                    33:70:0a:67:91:77:b6:c1:f4:ca:27:57:c3:a1:a9:
                    6c:cf:3b:cc:fd:fc:f1:ac:22:c1:ab:74:58:12:e3:
                    03:df:2f:cc:7a:4b:f3:4e:0f:ab:f7:c8:6a:79:dc:
                    d7:c3:b8:0e:59:b8:c9:09:57:4c:9e:b5:87:41:c0:
                    b1:7b:fe:c7:f5:63:9a:6e:16:32:88:99:c1:61:d7:
                    c5:13:37:55:68:7c:58:45:4c:e9:37:b1:42:2f:14:
                    81:bb:a0:e0:fc:9e:13:c2:20:0b:d5:7e:5e:dd:0f:
                    53:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:26:9B:0D:20:39:FC:14:F8:7D:A2:AB:A5:06:8E:1E:70:50:17:FC
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3233342e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:36:74:a8:97:d8:02:50:7a:e3:db:25:0d:f6:37:61:5a:17:
         1c:6c:3d:df:87:e4:44:da:ed:70:60:4a:b3:5e:f2:c9:b4:83:
         b5:1b:d1:8c:52:b5:ba:82:f6:b3:7e:2f:e8:b7:8d:b7:66:72:
         b8:b6:c7:f6:11:b4:40:cf:1b:e2:a3:bd:b7:04:28:2d:8e:19:
         da:1d:ed:5e:b8:d2:fd:b6:68:ad:29:61:af:bb:1a:c3:58:1b:
         f9:a0:89:ec:bd:fc:b6:e5:44:e4:50:e5:3c:20:21:3b:79:26:
         0b:ec:16:56:2d:cb:54:0d:ed:1c:02:1d:74:1b:85:92:ff:4b:
         07:72:d3:f9:65:04:69:5f:79:e0:39:63:bd:10:d6:fc:08:ad:
         ed:6f:b9:2a:e4:16:20:5b:3a:86:5b:f1:99:49:3c:a2:9f:1d:
         97:7b:76:8b:0d:5a:46:fe:36:4d:df:94:a9:cf:df:07:8d:bf:
         15:33:2c:16:a8:0a:ac:d9:79:51:f9:24:c1:3e:29:b1:67:9b:
         bb:c5:7c:7c:41:c5:fc:11:8f:7d:05:19:0e:e0:66:70:4d:65:
         5d:e1:19:6b:3e:d6:ad:8f:ff:50:69:e9:bb:32:6e:0b:d6:e2:
         41:c7:57:83:e4:03:d0:71:88:98:c6:df:0d:4f:22:e5:3f:dd:
         d5:dd:bf:49
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUA5rXvfNKjy3PLw9SN0SGQoGCfpwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjdGNjJENTVEQzc1ODg3NUI0OUFEQ0EwRkNEMTE1ODA3
QjJGMUREMTAeFw0yNTA0MzAxODU1MDBaFw0yNjA0MjkxOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTJBMjA5NEZEQkU0OUQ4Qjkz
MDQ0QTU4M0MyMDVDNjAwRUU4NTkxODFCNTI1QjkwMzk5RTlDODk1NEI5MjlDNkQ3
ODA2MTdDMEZDNTQ1MTgwMTFDNkMwRjFENjA4RkQ5M0Y0MTNCMzUyNjgxQURBQUY5
MzgzNkRFQjBCMUY1ODMxOTE4OUM4N0FBMzJGOEJDQUQzMkY0QkU1MzEyQzIwRDE3
MDcxRjk5RTAwMDlFMjlCNDc5MEUxQUI5QkQzMzZCNkI0OEI3RDM3OUU2NjU1M0Ez
RUZFNzQ5QUUwNDgxQkQ1NTBGMTkxQzlFOUU5MTBDQzhEMkMzQTdGNzZENEVGMEI1
Q0RGOEM5MkNEOTdFNTJGQzUxNDlBQzhBMzFDRDIxNzFFRDhENjRBODMzNzAwQTY3
OTE3N0I2QzFGNENBMjc1N0MzQTFBOTZDQ0YzQkNDRkRGQ0YxQUMyMkMxQUI3NDU4
MTJFMzAzREYyRkNDN0E0QkYzNEUwRkFCRjdDODZBNzlEQ0Q3QzNCODBFNTlCOEM5
MDk1NzRDOUVCNTg3NDFDMEIxN0JGRUM3RjU2MzlBNkUxNjMyODg5OUMxNjFEN0M1
MTMzNzU1Njg3QzU4NDU0Q0U5MzdCMTQyMkYxNDgxQkJBMEUwRkM5RTEzQzIyMDBC
RDU3RTVFREQwRjUzQUYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAoqIJT9vknYuTBEpYPCBcYA7oWRgbUluQOZ6ciVS5KcbXgGF8D8VF
GAEcbA8dYI/ZP0E7NSaBrar5ODbesLH1gxkYnIeqMvi8rTL0vlMSwg0XBx+Z4ACe
KbR5Dhq5vTNra0i303nmZVOj7+dJrgSBvVUPGRyenpEMyNLDp/dtTvC1zfjJLNl+
UvxRSayKMc0hce2NZKgzcApnkXe2wfTKJ1fDoalszzvM/fzxrCLBq3RYEuMD3y/M
ekvzTg+r98hqedzXw7gOWbjJCVdMnrWHQcCxe/7H9WOabhYyiJnBYdfFEzdVaHxY
RUzpN7FCLxSBu6Dg/J4TwiAL1X5e3Q9TrwIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FIkmmw0gOfwU+H2iq6UGjh5wUBf8MB8GA1UdIwQYMBaAFLf2LVXcdYh1tJrcoPzR
FYB7Lx3RMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRCeDg4RlhlOG41Ujc0
OXBXZ3JrQVMzZGV5cjVtZHl5ZnhCTmlXejV5dnZNLzEvQjdGNjJENTVEQzc1ODg3
NUI0OUFEQ0EwRkNEMTE1ODA3QjJGMUREMS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9CN0Y2MkQ1NURDNzU4ODc1QjQ5QURDQTBGQ0QxMTU4MDdCMkYx
REQxLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80Qng4OEZYZThuNVI3NDlwV2dy
a0FTM2RleXI1bWR5eWZ4Qk5pV3o1eXZ2TS8xLzMxMzgzOTJlMzgzNDJlMzIzMzM0
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMzMzMzOC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL1U
6jANBgkqhkiG9w0BAQsFAAOCAQEAnzZ0qJfYAlB649slDfY3YVoXHGw934fkRNrt
cGBKs17yybSDtRvRjFK1uoL2s34v6LeNt2ZyuLbH9hG0QM8b4qO9twQoLY4Z2h3t
XrjS/bZorSlhr7saw1gb+aCJ7L38tuVE5FDlPCAhO3kmC+wWVi3LVA3tHAIddBuF
kv9LB3LT+WUEaV954DljvRDW/Ait7W+5KuQWIFs6hlvxmUk8op8dl3t2iw1aRv42
Td+Uqc/fB42/FTMsFqgKrNl5UfkkwT4psWebu8V8fEHF/BGPfQUZDuBmcE1lXeEZ
az7WrY//UGnpuzJuC9biQcdXg+QD0HGImMbfDU8i5T/d1d2/SQ==
-----END CERTIFICATE-----
Generated at Thu May 1 02:20:49 2025 by rpki-client