Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3233372e302f32342d3234203d3e203532343638.roa
File:                     3138392e38342e3233372e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          DFdNoVT/BeOLuFGv5x/DyKMygaS8Ow05/7wuM5Mi0lE=
Subject key identifier:   99:BC:0B:A0:55:CC:14:BC:0D:0E:ED:02:3B:5F:A9:C9:BB:93:F6:16
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       065103D71D1E87878C7D0DFE600C425135BD676A
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3233372e302f32342d3234203d3e203532343638.roa
Signing time:             Wed 30 Apr 2025 19:00:02 +0000
ROA not before:           Wed 30 Apr 2025 18:55:02 +0000
ROA not after:            Wed 29 Apr 2026 19:00:02 +0000
asID:                     52468
IP address blocks:        189.84.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 11:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:51:03:d7:1d:1e:87:87:8c:7d:0d:fe:60:0c:42:51:35:bd:67:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: Apr 30 18:55:02 2025 GMT
            Not After : Apr 29 19:00:02 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c4:80:80:9c:9d:34:ec:ee:84:a8:c9:c2:2c:
                    6e:58:d6:07:d4:04:72:c2:cb:e9:b4:3b:ea:a9:0c:
                    8a:24:e7:b8:18:e1:de:36:13:80:e4:87:a4:bf:25:
                    8e:fe:58:63:7c:0b:d3:03:25:c4:e3:1c:f6:c7:2d:
                    8d:51:5a:5a:95:61:e0:d4:d1:ea:50:f7:46:3f:25:
                    82:b3:90:24:da:f1:01:ac:f2:06:17:82:df:9f:99:
                    6e:85:c3:68:6a:69:65:9f:16:82:89:4b:57:8a:d4:
                    d7:e3:fd:d4:96:44:a8:fa:4c:16:52:75:a9:78:52:
                    8a:46:d1:c1:59:56:3f:39:16:87:bf:cb:c7:83:70:
                    27:61:b8:0a:93:79:12:e2:91:15:60:59:94:ab:8c:
                    91:db:5c:cd:5c:1e:bd:f3:e6:6a:ff:6c:99:85:17:
                    a7:78:7c:c3:b8:ed:0e:a5:6a:90:58:91:7a:ed:90:
                    7c:01:8f:d8:f1:23:74:d3:4f:ec:22:86:c0:d2:04:
                    54:b4:44:29:8e:c7:f3:c4:f6:52:bc:ad:c1:c1:11:
                    9b:db:01:c2:eb:b5:10:53:57:45:d3:52:84:e0:ef:
                    51:c3:da:f8:61:b9:d5:f2:ac:28:30:ae:ad:df:fd:
                    7b:e1:71:a3:c8:76:52:ca:bc:c2:26:75:cc:a7:59:
                    6f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:BC:0B:A0:55:CC:14:BC:0D:0E:ED:02:3B:5F:A9:C9:BB:93:F6:16
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3233372e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:fd:ba:30:20:48:fc:c9:36:40:a5:54:77:eb:e3:aa:fa:9d:
         75:62:9a:8f:6a:e4:2b:92:40:36:86:2b:7a:8b:58:26:c0:3d:
         60:4e:78:1d:ca:23:59:70:e6:fa:d3:53:f2:84:28:50:85:65:
         18:91:3a:9e:9e:8a:c6:6b:2d:7b:cd:35:a8:d1:1b:2b:1e:ca:
         04:b1:7e:65:c7:16:19:24:52:37:87:59:db:55:22:12:43:df:
         57:68:0e:88:78:67:7f:70:72:61:05:11:56:aa:af:db:e7:e2:
         ae:40:5f:10:6e:f6:1a:93:7c:cf:50:c4:95:ea:1c:c8:6b:75:
         47:80:53:67:8a:0b:3c:45:a7:a9:81:48:d0:4b:9d:e4:7c:ee:
         cf:5e:21:ce:21:88:68:f0:04:39:f5:43:9c:71:1d:85:f2:7e:
         0a:3e:db:22:b8:72:5b:6e:f0:1f:3b:c8:15:41:25:09:07:1c:
         f0:b5:30:64:c7:74:83:c2:f5:eb:1d:62:0a:62:5a:8b:f1:d8:
         c4:3a:f0:16:96:54:23:ce:15:f0:18:2c:af:4d:2c:92:31:b4:
         76:1a:e5:a7:06:2c:3c:ff:4a:5f:f3:06:ba:cf:e6:49:b2:47:
         e4:4f:3b:70:85:fd:ee:24:7a:f7:cd:0f:15:cb:b1:52:4a:f0:
         3a:90:af:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 02:27:48 2025 by rpki-client