Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3233382e302f32342d3234203d3e203532343638.roa
File:                     3138392e38342e3233382e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          jSkOts2GERm9EDkYcW142+V0oHDuziCEs/bZrs45wfc=
Subject key identifier:   E1:D0:E7:0D:D3:D7:62:7F:2B:72:5D:46:77:DA:93:F5:1C:58:E9:37
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       03F5DCF93FCDA7DF9EDFF418B35141A800CDB5DB
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3233382e302f32342d3234203d3e203532343638.roa
Signing time:             Wed 30 Apr 2025 19:00:06 +0000
ROA not before:           Wed 30 Apr 2025 18:55:06 +0000
ROA not after:            Wed 29 Apr 2026 19:00:06 +0000
asID:                     52468
IP address blocks:        189.84.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 11:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:f5:dc:f9:3f:cd:a7:df:9e:df:f4:18:b3:51:41:a8:00:cd:b5:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: Apr 30 18:55:06 2025 GMT
            Not After : Apr 29 19:00:06 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:19:c2:41:1c:78:d6:b9:cc:07:9b:ff:a5:89:
                    9b:da:ed:14:a3:2d:59:db:8a:53:f0:57:eb:2b:67:
                    7e:57:bf:eb:50:d4:cf:dc:3c:c5:7f:2a:f4:5e:fb:
                    c7:ce:34:5e:42:f6:12:a7:cd:81:bf:3f:1a:8d:d1:
                    71:db:3f:a8:ff:25:aa:65:8b:91:ec:31:25:93:88:
                    c8:b5:9f:2b:ba:0a:da:7c:9f:59:68:48:81:69:9f:
                    4d:5a:61:b7:40:17:df:98:b8:6c:3d:ca:ea:c9:e8:
                    45:ec:c6:d2:38:0b:e9:de:04:7a:9c:b8:f5:80:31:
                    b5:94:70:9e:06:62:ea:6b:9f:d9:df:b3:72:90:0f:
                    67:dc:c7:37:92:63:07:69:cd:31:bc:97:98:2a:0a:
                    91:92:76:04:82:80:97:7d:5a:70:bb:ea:b8:90:51:
                    0a:02:af:dd:30:aa:0a:52:59:c8:b7:f7:78:9f:69:
                    2b:59:88:c5:43:e1:0d:5d:d5:5f:2a:d1:c4:5f:a6:
                    d7:1e:b5:ea:6c:bf:25:24:c3:ae:ef:ee:34:7d:a5:
                    a9:af:0a:ab:43:3e:35:a4:4c:6c:3b:19:ee:05:0a:
                    81:87:5c:7c:24:5f:45:e6:cd:ef:3b:71:62:35:6b:
                    94:bd:6a:4d:c9:c4:38:12:ae:d7:c6:dd:0d:3b:ec:
                    76:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:D0:E7:0D:D3:D7:62:7F:2B:72:5D:46:77:DA:93:F5:1C:58:E9:37
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3233382e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:05:ce:30:0a:c2:fd:4e:2a:bc:a8:8b:f9:28:b9:06:74:e1:
         12:13:69:f6:4f:74:97:e0:08:68:ea:4c:25:1c:69:2b:1b:e3:
         f1:f7:13:69:f2:55:2e:ce:00:f9:bd:1d:5e:03:4e:39:c7:5b:
         a3:6d:89:9d:26:f0:19:de:e8:11:1f:40:e7:e8:b7:03:13:9a:
         c7:df:7c:10:d1:75:84:ba:0b:a1:7e:e0:60:cd:bf:ef:84:55:
         b5:c9:03:3e:57:35:bc:d4:ed:d1:68:77:dc:23:7e:5b:92:a8:
         45:34:6d:0d:8d:b2:ba:3c:14:46:d7:f6:43:0d:4f:b2:22:85:
         b1:1d:38:b4:23:85:51:83:82:ba:9a:ba:c2:de:14:68:8e:3e:
         56:9b:3e:73:e4:38:7b:b2:f9:b0:18:90:35:b7:b2:cf:2a:9d:
         64:d6:dd:0a:82:88:0d:20:1e:34:1a:55:70:1b:7e:ca:c4:4f:
         09:f5:72:6d:98:4d:53:2c:1c:a5:8b:49:18:15:29:11:74:8c:
         fc:d2:a3:31:06:3d:43:8b:b0:5f:27:18:83:fd:ff:8e:0d:7e:
         eb:42:de:54:22:46:f3:39:eb:58:db:8f:27:53:b1:65:75:fe:
         2d:19:e5:e8:3b:7c:d2:64:6c:dc:68:ae:6b:90:5c:de:a0:24:
         e4:fb:fb:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 19:38:24 2025 by rpki-client